Who is responsible
ALTASTAYS GESTAO LTDA is responsible for personal information received through this company website. This notice covers visitors and people interested in property management. Reservations and guest support on other platforms have separate flows.
Information we use
Name, email or WhatsApp number, neighbourhood or postal code, property type and stage, intended timing and an optional message. We also record the request reference, contact permission date, notice version, originating page and submission status. A contact-derived identifier helps prevent duplicates; it does not make the data anonymous. Do not send identity documents, banking details, passwords or sensitive information.
Purposes and legal grounds
Your specific form permission allows us to handle the assessment and contact you about it, based on consent. You may withdraw it through the privacy contact. The form does not subscribe you to marketing campaigns. If you request a proposal or agreement, necessary preliminary steps may rely on LGPD article 7(V). Legal obligations and the exercise of rights may justify retaining records where applicable.
Service operation
The site validates fields, limits submitted content and identifies duplicates. Hosting infrastructure may process connection information, such as IP address, browser and access logs, to deliver and protect the service. These records are separate from form data. Do not submit other people's information without necessity and appropriate authorisation.
Access and providers
Authorised team members use the data to assess and follow up on your request. OpenAI Sites and its Cloudflare infrastructure support hosting and storage. When email notifications are enabled, Resend will process the request information to deliver it to the AltaStays team. We do not sell form data. Assistance may take place through your chosen contact channel.
International processing
Technology providers may operate infrastructure outside Brazil. Processing locations and conditions depend on the service used. You may ask our privacy contact about providers and transfers. International transfers must comply with LGPD and ANPD regulations; this notice is not a blanket transfer authorisation.
Retention and security
Retention depends on the assessment, requested follow-up and any subsequent contract, as well as legal obligations and the exercise of rights. Deletion requests are assessed against these purposes and lawful retention grounds. There is no single period for all records. Access must be limited to people and providers involved in handling requests. No digital service is risk-free.
Cookies and external services
We have not implemented advertising tools, marketing pixels or audience analytics on this site. The hosting platform may use technical features for authentication, security and operation, especially for private access. WhatsApp, LinkedIn and reservation links lead to external services with their own notices; they are not embedded social widgets. The form is not consent to optional cookies. If optional consent-based features are introduced, they will require a specific choice, with a way to decline and change it later.
Your rights
Under LGPD, you may request confirmation and access, correction, sharing information, anonymisation, restriction or deletion where applicable, portability under applicable regulations, withdrawal of consent or an objection where permitted. You may also contact ANPD. Withdrawal does not invalidate earlier processing or override lawful retention grounds.
Exercising your rights
Contact us below, explaining your request and including the assessment reference if available. Requests are free of charge. We may ask for proportionate information to verify your identity and protect your data; do not send document copies unsolicited. Responses follow the timeframes and conditions applicable to the request.
Privacy contact: contato@altastays.com.br
ALTASTAYS GESTAO LTDA
Updates
This notice will be updated when relevant processing changes occur. Its version is displayed here and recorded with form permission. Changes requiring new consent will not be treated as automatically accepted.