Privacy Policy

Last updated: September 2026

This Privacy Statement aims to inform users, clients, and other data subjects—clearly and transparently—about how their personal data is collected, used, stored, and protected during the use of this website and the services provided through it.

The processing of personal data carried out by the party responsible for the website complies with Law No. 13.709/2018—the General Personal Data Protection Law (LGPD)—as well as other Brazilian regulations applicable to personal data protection and privacy.

1. Personal data controller

The party responsible for processing the personal data collected through this website is:

Legal Name: RAFAEL CUELLA RODRÍGUEZ ME
CNPJ (Tax ID): 11 165 067 0001 00
Trade Name: SIRIUS CANOA RESIDENCIAL
Address: Raimundo Nunes 181 – Canoa Quebrada, Aracatí
Postal Code (CEP): 62804-646
E-mail: siriuscanoa.residencial@gmail.com
Phone/WhatsApp: +55 85 99117-7414

For the purposes of the LGPD, the party indicated above acts as the Controller of the personal data processed within the scope of this website and related accommodation services.

2. Personal Data Processing Officer

The organization has a Personal Data Protection Officer responsible for acting as a communication channel between the Controller, data subjects, and the National Data Protection Authority (ANPD), in accordance with applicable legislation.

Data Protection Officer: RAFAEL CUELLA RODRÍGUEZ
Email for data protection-related matters: rcuella.advocat@gmail.com

Until the Data Protection Officer’s details are published on this page, requests regarding the processing of personal data and the exercise of rights under the LGPD may be sent to the organization’s general email address indicated in this Declaration.

3. What personal data is collected

The personal data collected depends on how the user interacts with the website.

3.1. Contact form

When a user contacts us via the form provided on the website, the following may be collected:

First and last name;
Email address;
Phone number;
Content of the message sent.

The information provided is forwarded to the email address used by the business for customer service.

Data submitted via the contact form is not stored in the website’s database by the form system.

The website uses the Cloudflare Turnstile service as a protection mechanism against abuse, spam, and automated submissions. The operation of this service may involve the processing of certain technical information necessary to verify whether an interaction is legitimate.

3.2. Accommodation requests and reservations

When the user utilizes the reservation system available on the website, data necessary to process the accommodation request may be requested, including:

Full name;
Email address;
Phone number;
Address;
Country of residence or origin;
Identification document or passport, when requested;
Number of guests;
Information regarding accompanying persons, when necessary;
Check-in and check-out dates;
Information related to the stay;
Special requests or comments provided by the user.

The specific data requested may vary depending on the information required to process the reservation and comply with legal obligations applicable to the accommodation business.

The system used to manage reservation requests is WP Booking System.

4. Purposes of processing

Personal data may be processed for the following purposes:

Responding to requests submitted via the contact form;
Contacting the user when necessary to respond to their request;
Processing reservation requests;
Checking and managing unit availability;
Contacting the client to confirm or supplement information related to the reservation;
Managing the contracted accommodation;
Complying with legal and regulatory obligations applicable to accommodation services;
Preventing fraud, abuse, and misuse of the services;
Ensuring the security of systems and services;
Exercising rights in judicial, administrative, or arbitration proceedings;
Complying with orders from competent public authorities.

Personal data will not be used for purposes incompatible with those stated in this Declaration.

5. Legal bases for processing

The processing of personal data will be carried out based on one or more of the legal grounds provided for in the LGPD, depending on the purpose and circumstances of each processing activity.

Among the legal bases that may apply are:

The data subject’s consent, when required;
The performance of a contract or preliminary procedures related to a contract, when requested by the data subject;
Compliance with a legal or regulatory obligation;
The regular exercise of rights in judicial, administrative, or arbitration proceedings;
The Controller’s legitimate interest, when applicable and provided that the data subject’s fundamental rights and freedoms are respected;
Other legally provided grounds, when applicable.

The legal basis used may vary depending on the type of data and the specific purpose of the processing.

6. Reservations and communications regarding the stay

Data provided during a reservation request will be used to enable the processing and management of the request.

The user may receive communications related to their reservation, including messages regarding the request, confirmation, modification, cancellation, or other information necessary for the provision of the service.

These communications are considered necessary for managing the accommodation and do not, in themselves, constitute marketing or advertising communications.

The establishment does not use customer data to send unsolicited commercial offers, newsletters, or promotional campaigns.

7. Sharing of personal data

Personal data may be shared only when necessary to fulfill the purposes described in this Declaration or when there is a legal basis for doing so.

This may include, as applicable:

Technology service providers used for the operation of the reservation system;
Providers involved in the sending and receiving of electronic communications;
Public authorities and regulatory bodies, when there is a legal obligation;
Providers or third parties necessary to comply with legal obligations related to the hosting activity;
Lawyers, accountants, or other professionals when necessary for the regular exercise of rights or compliance with legal obligations.

The data will not be sold or traded with third parties.

8. Reservation and email sending system

Booking requests are processed via the WP Booking System, which is integrated into the website.

Electronic communications regarding requests and bookings are handled through the email system used by the establishment’s own server.

Access to the data will be limited to the individuals and systems that require this information to perform their respective functions.

9. Data storage and preservation

Personal data will be stored for the period necessary to fulfill the purposes for which it was collected.

Where applicable, the data may be retained for the periods required by Brazilian law, including for compliance with legal, regulatory, tax, or administrative obligations and for the regular exercise of rights.

Upon the expiration of the applicable retention period, the data will be deleted or anonymized, unless its retention is authorized or required by law.

10. Backups

Backups of the enterprise’s systems and information are performed periodically, currently at a frequency of approximately twice a week.

The purpose of these backups is to enable the recovery of systems and information in the event of a technical failure, data loss, security incident, or any other situation compromising information availability.

When backups contain personal data, their retention and eventual deletion are subject to the same legal obligations and security measures applicable to the original information.

11. Personal data security

Reasonable technical and administrative measures, appropriate to the nature of the data being processed, are implemented to protect personal data against unauthorized access and against accidental or unlawful destruction, loss, alteration, disclosure, or dissemination.

Access to personal data is restricted to authorized individuals who require such information to perform their duties.

Despite the measures implemented, no internet-connected system can guarantee absolute security. In the event of a security incident that may pose a risk or result in significant harm to data subjects, the measures prescribed by applicable law will be taken.

12. Data concerning children and adolescents

The website is not specifically directed at children.

When a reservation involves children or adolescents, data strictly necessary for the provision of the accommodation service and for compliance with applicable legal obligations may be processed.

The processing of personal data concerning children and adolescents will be carried out with due regard for the best interests of the minor and in accordance with the provisions of the LGPD and other applicable regulations.

13. Rights of data subjects

Under the LGPD, the personal data subject may, subject to the requirements and limitations set forth in the legislation, request information and exercise rights related to the processing of their data, including:

Confirmation of the existence of processing;
Access to personal data;
Correction of incomplete, inaccurate, or outdated data;
Anonymization, blocking, or deletion of data that is unnecessary, excessive, or processed in non-compliance with the LGPD;
Data portability, when regulated and applicable;
Deletion of data processed based on consent, subject to legal retention requirements;
Information regarding public and private entities with which the data has been shared;
Information about the possibility of withholding consent and the consequences of such refusal, when processing is based on consent;
Revocation of consent, when that is the applicable legal basis;
Objection to processing carried out in specific circumstances provided for in the LGPD;
Review of decisions made solely based on automated processing, when applicable.

The exercise of these rights may be subject to the conditions, limitations, and exceptions provided for in Brazilian legislation.

14. How to exercise your rights

Data subjects may request information or exercise their rights regarding personal data protection through the contact channel below:

Email: rcuella.advocat@gmail.com

To protect the privacy and security of data subjects, we may request additional information to verify the requester’s identity before fulfilling certain requests.

Requests will be reviewed and answered within the timeframes and conditions established by applicable law.

15. Data processing necessary for reservations

Certain personal data are required to process a reservation request, contact the guest, or fulfill legal obligations related to the accommodation.

When the provision of specific data is necessary for one of these purposes, the absence of such information may prevent or limit the ability to process the request or provide the requested service.

16. Changes to this Declaration

This Privacy Statement may be updated periodically to reflect changes in legislation, services offered, systems used, or personal data processing practices.

The most recent version will always be available on this page.

We recommend that users check this page periodically for any changes.

17. National Data Protection Authority

Data subjects who believe their rights regarding personal data protection have not been adequately addressed may, after utilizing the channels made available by the Controller, appeal to the National Data Protection Authority (ANPD) in accordance with applicable Brazilian legislation.

18. Contact

For questions, requests, or information regarding this Privacy Statement or the processing of personal data, please contact us:

Legal Name: RAFAEL CUELLA RODRÍGUEZ ME
CNPJ (Tax ID): 11 165 067 0001 00
Email: siriuscanoa.residencial@gmail.com
Phone: +55 85 99117-7414

Personal Data Protection Officer: RAFAEL CUELLA RODRÍGUEZ
Officer’s Email: rcuella.advocat@gmail.com

Last update: September 2026