PT Book now

Home / Privacy policy

Privacy policy

Vila Ybytu Eco Resort · Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018) · Last updated: October 21, 2026

1. General information and controller

L. Scavazin Siqueira LTDA (CNPJ 28.114.513/0001-42), responsible for the website vilaybytu.com.br, is the controller of your personal data under Law No. 13,709/2018 (LGPD). By using the website and providing your data, you acknowledge this Policy.

Data Protection Officer (DPO): Marcelo Scavazin Siqueira, by email at vilaybytu@gmail.com.

2. Glossary

  • Personal data: information that identifies you (name, phone, email, IP, cookies).
  • Sensitive data: racial origin, religion, health, biometrics and others. We do not collect them through the website.
  • Processing: any operation with the data (collecting, using, storing, sharing, deleting).
  • Controller: who decides how the data is processed (Vila Ybytu Eco Resort).
  • Processor: who processes the data on behalf of the controller (tools and partners).
  • Data Protection Officer (DPO): the person who talks to you and to the ANPD about your data.

3. Data we process

  • Provided by you in the forms (the WhatsApp bubble and the contact form): name, phone with area code, email, the message you write and your consent to be contacted.
  • Recorded with the form: the page it was sent from and, when present, the campaign identifiers of the link that brought you here (UTMs, gclid and fbclid).
  • Collected automatically, only if you accept cookies: pages visited, date and time, device, browser, IP address and cookie identifiers.

The availability form asks only for dates and number of guests. It does not ask for your name, email or phone.

4. How we collect it

Through the website forms, through cookies and measurement tools (only after you accept) and through your interactions with our ads.

5. Purposes and legal bases

We process your data only for a specific purpose and on a legal basis (Article 7 of the LGPD):

  • Replying to you and arranging your booking or quote: steps prior to a contract, at your request, and consent.
  • Measuring and improving the website and ads: consent, given in the cookie notice.
  • Protecting the website against spam and abuse: legitimate interest.
  • Complying with legal obligations and exercising rights in proceedings: legal obligation and regular exercise of rights.

6. Sharing

We share your data only with processors and partners that help us serve you, host and measure the website, and when required by law or court order:

  • the customer service tools where contacts are stored, with access restricted to the team;
  • WhatsApp, when you choose to open the conversation;
  • Cloudflare, which hosts the website and protects the forms against spam;
  • Google (Tag Manager, Analytics and Google Ads) and Meta, for measurement and ads, only with your consent;
  • the booking engine and the payment method it uses, when you go on to book: they receive the dates and number of guests you chose and have their own privacy policies.

Name, email and phone are not sent to measurement tools. We do not sell your data.

7. International transfer

Some tools (such as Google, Meta and Cloudflare) process data outside Brazil. In these cases, the transfer follows the safeguards set out in the LGPD, such as the contractual clauses adopted by these providers.

8. Cookies and consent

We use necessary, analytics and marketing cookies. The optional ones (analytics and marketing) are only turned on after you click Accept in the cookie notice; until then they stay off. If you decline or do not answer, the website works normally and Google may receive only cookieless signals that do not identify your browser, used to estimate results in aggregate. You can accept, decline or change your choice at any time in , also in the footer of every page. Details in the Cookie policy.

9. Storage and retention period

We keep your data in a secure environment for as long as needed for the purposes above and for the legal obligations of the hospitality business. After that, we delete or anonymize it. The duration of each cookie is in the Cookie policy.

10. Security

We take technical and organizational measures to protect your data: encrypted connection (HTTPS), spam protection on forms, access control and limits on who can see the data. No personal data is stored on a public page.

11. Your rights (Article 18 of the LGPD)

At any time you may: confirm whether we process your data; access it; correct incomplete or outdated data; request anonymization, blocking or deletion of unnecessary data or data processed unlawfully; request portability; find out who we share it with; and withdraw consent. To exercise these rights, use the channels in item 13.

12. Your duties

Provide true and up-to-date data and do not impersonate anyone. You are responsible for any incorrect information you provide.

13. Contact channels and data removal

Requests and questions by email at vilaybytu@gmail.com, addressed to our Data Protection Officer (DPO), Marcelo Scavazin Siqueira. We reply within 15 days. You may ask for your data to be deleted, except when the law requires us to keep it.

14. Cooperation with the ANPD

We cooperate with Brazil's National Data Protection Authority (ANPD) and report relevant security incidents, as required by the LGPD. If your question is not resolved through our channels, you may also contact the ANPD at gov.br/anpd.

15. Minors

The website is not directed at people under 18 and we do not knowingly collect their data.

16. Changes and effective date

We may update this Policy at any time. The current version and date are on this page. Last updated: October 21, 2026.

17. Governing law and jurisdiction

This Policy is governed by Brazilian law, in particular the LGPD, with jurisdiction in the district of Itarema, Ceará, except where the law grants you, as a consumer, jurisdiction in your place of residence.

See also the Terms of use and the Cookie policy.