Privacy Policy

VPX Travel LTDA (“VPXtravel”), registered under CNPJ No. 49.739.419/0001-59, committed to transparency and the protection of personal data, presents this Privacy Policy in compliance with the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018).

1. Personal Data Collected

We collect the following personal data during the use of our services:

• Identification data: full name, CPF, ID, date of birth
• Contact data: e-mail, phone, address
• Booking data: travel dates, accommodation preferences, number of guests
• Payment data: credit card information (processed by PCI DSS certified third parties)
• Browsing data: IP address, browser type, pages visited, cookies

2. Purpose of Processing

Your personal data is processed for the following purposes:

• Processing and management of bookings
• Communication about booking status and purchased services
• Sending offers and promotions (with consent)
• Improving the user experience on the Platform
• Compliance with legal and regulatory obligations
• Statistical analysis and service improvement

3. Data Sharing

Your personal data may be shared with:

• Service providers: hotels, guesthouses, transport companies and tour guides, exclusively to carry out the purchased service
• Payment processors: for secure processing of financial transactions
• Competent authorities: when required by law or court order

We do not sell or transfer personal data to third parties for unauthorized marketing purposes.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to improve the browsing experience. For more details, see our Cookie Policy.

5. Rights of the Data Subject

In accordance with the LGPD, you have the following rights:

• Access: request information about the processing of your data
• Correction: request the correction of incomplete or outdated data
• Anonymization or deletion: request the appropriate handling of unnecessary data
• Portability: request the transfer of your data to another provider
• Withdrawal of consent: withdraw the consent given for data processing
• Objection: object to processing carried out in breach of the LGPD

6. Data Security

We adopt technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or destruction, including:

• SSL/TLS encryption on all data transmissions
• Restricted access control to personal data
• Continuous security monitoring
• Staff training in data protection

7. Data Retention

Personal data is retained for the period necessary to fulfill the purposes for which it was collected, or as required by applicable law. Once the purpose has ended, the data will be securely deleted.

8. Data Protection Officer (DPO)

To exercise your rights or clarify questions about the processing of personal data, please contact our Data Protection Officer:

• E-mail: privacidade@vpxtravel.com
• Phone: (85) 99796-0800
• Address: Jericoacoara, Ceará, Brazil