Privacy Policy

🇺🇸 PRIVACY AND PERSONAL DATA PROTECTION POLICY Éden do Cerrado Spa Terapêutico Ltda. values the privacy and protection of the personal data of its customers, guests, visitors, and users. This Privacy Policy is intended to clearly and transparently explain how Éden do Cerrado collects, uses, stores, and, when applicable, shares personal data, in accordance with Brazilian Law No. 13,709/2018 — the Brazilian General Data Protection Law (LGPD) and other applicable laws and regulations. 1. Personal Data We Process When browsing the website, making reservations, purchasing services, or contacting Éden do Cerrado, personal data may be processed, including name, CPF or other identification document, telephone number, WhatsApp number, email address, information related to reservations and the purchase of services, data required for payments and the issuance of tax documents, as well as technical information related to the use of the website, such as IP address, device information, and access logs, where applicable. Éden do Cerrado seeks to collect and use only the data necessary to fulfill the purposes described in this Policy or otherwise permitted by applicable law. 2. Purposes of Processing Personal data may be used to make and manage reservations, provide contracted services, confirm payments, communicate with customers and guests, provide customer support, issue tax documents, comply with legal and regulatory obligations, maintain operational security, prevent fraud, and regularly exercise rights in administrative, judicial, or extrajudicial proceedings. Where applicable, data may also be used to send institutional communications and information about Éden do Cerrado’s services, experiences, and news, in accordance with the applicable legal bases and the rights provided by law. 3. Payments Payment-related information may be processed by Éden do Cerrado and by specialized companies responsible for processing transactions. When payment is made through payment platforms or payment processors, the processing of data will also be subject to the respective privacy policies and terms of use of those providers. Éden do Cerrado does not intend to store complete credit or debit card information when the transaction is processed directly by a payment platform or payment processor. 4. Data Sharing Personal data may be shared, when necessary and within the limits established by applicable law, with suppliers and service providers that assist Éden do Cerrado in carrying out its activities, including reservation platforms, payment providers, management systems, technology services, accounting services, and other providers necessary for the provision of services. Data may also be shared when required by law or regulation, pursuant to an order or determination from a competent authority, or when necessary for the regular exercise of legal rights. Éden do Cerrado does not sell or commercially trade its customers’ personal data. 5. Data Storage and Security Éden do Cerrado adopts appropriate technical and administrative measures to protect personal data against unauthorized access and accidental or unlawful destruction, loss, alteration, disclosure, or improper processing. Personal data will be stored for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, perform contracts, and preserve the rights of Éden do Cerrado and data subjects. After the processing period ends, data may be deleted or anonymized, except where applicable law permits or requires its retention. 6. Data Subject Rights Under the LGPD, data subjects may request, subject to the conditions and limitations established by applicable law: • confirmation of the existence of processing of their personal data; • access to the personal data being processed; • correction of incomplete, inaccurate, or outdated data; • anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in violation of applicable law; • information regarding the sharing of their data; • deletion of data processed on the basis of consent, where applicable; • withdrawal of consent, when consent is the applicable legal basis; • data portability, in accordance with applicable regulations; • objection to processing, where applicable; • review of decisions made solely on the basis of automated processing, in the cases provided by law. The exercise of these rights is subject to legal circumstances that permit the retention or processing of data, including compliance with legal obligations, the regular exercise of legal rights, and other situations provided for by applicable law. 7. How to Exercise Your Rights To request information, exercise rights provided under the LGPD, or ask questions regarding the processing of personal data, data subjects may contact Éden do Cerrado Spa Terapêutico Ltda. through the “Contact Us” page or through the customer service channels available on the website. Requests will be reviewed in accordance with applicable law. 8. Cookies and Similar Technologies The Éden do Cerrado website may use cookies and similar technologies to ensure the proper functioning of the website, improve the browsing experience, understand how the website is used, and, where applicable, perform analytics and communications according to user preferences and applicable law. Where necessary, users may manage their cookie preferences through the mechanisms made available on the website. 9. Updates to This Policy This Privacy Policy may be updated periodically to reflect changes in the services provided, data-processing practices, applicable laws, or guidance issued by competent authorities. The current version will always be available on the Éden do Cerrado website. Éden do Cerrado Spa Terapêutico Ltda.