Arpoador Experience
Privacy Policy — Arpoador Experience
Last updated: September 4, 2026
Arpoador Experience respects the privacy of its clients, guests, users and visitors and processes personal data in accordance with the General Personal Data Protection Law — LGPD (Law No. 13.709/2018) and other applicable regulations.
This Privacy Policy explains what data may be collected, why it is used, with whom it may be shared, how long it may be kept and what rights may be exercised by data subjects.
1.Who is responsible for the data
For the purposes of this Policy, Arpoador Experience is responsible for decisions related to the processing of personal data carried out directly in its operation. Legal identification of the controller: LET’S LIVE INOVAÇÕES - TREINAMENTO PROFISSIONAL E GERENCIAL LTDA CNPJ: 12.463.490/0001-41 Address: Praia do Arpoador, Tutóia/MA, Brazil — ZIP code 65270-000 Email for privacy-related matters: arpoadorexperience@gmail.com WhatsApp/contact: +55 (11) 92464-5151 Website: https://www.arpoadorexperience.com.br
2.What data we may process
Depending on the user’s interaction with Arpoador Experience, the following data may be processed: first and last name; telephone; email; date of birth or age range, when necessary for the booking; information about companions; check-in and check-out dates; chosen accommodation; number and profile of guests; booking history; requests, preferences and observations related to the accommodation; communications carried out via WhatsApp, email or other official channels; information necessary for billing and payment; IP address, device information and technical browsing data; information obtained through cookies and similar technologies; other data voluntarily provided by the user during contracting or service. The LGPD defines personal data as information related to an identified or identifiable natural person.
3.Why we use the data
Personal data may be used to: process and manage bookings; confirm availability and payments; provide the contracted accommodation services; communicate information about check-in, check-out and stay; answer questions and provide support; process cancellations, changes and refunds; keep a history of contractual relationships; prevent fraud and abuse; comply with legal, tax, regulatory or administrative obligations; exercise or defend Arpoador Experience’s rights; improve the operation of the website, booking engine and customer service; send promotional communications when there is an adequate legal basis for doing so. The LGPD provides for different legal bases for processing, including execution of a contract, compliance with a legal or regulatory obligation, regular exercise of rights, consent and legitimate interest, according to the context of each operation.
4.Data related to bookings
When making a booking, certain data is necessary to enable the contracting and execution of the accommodation. This data may be used to: identify the booking; calculate amounts; confirm payment; manage availability; contact the person responsible; provide information related to the accommodation; record changes, cancellations or occurrences. The provision of certain data may be necessary for the booking to be completed.
5.Companion data
The booking holder may provide information about companions when this is necessary for contracting or organizing the accommodation. When providing third-party data, the user must be authorized to do so for the purpose related to the booking.
6.Payments
Payments made through the website or booking engine may be processed by companies specialized in payment methods. These companies may receive the data necessary to: authorize transactions; process charges; prevent fraud; carry out reversals and refunds; comply with legal and regulatory obligations. Arpoador Experience uses or may use payment providers integrated into its booking system.
7.STAYS platform and technology providers
Arpoador Experience’s booking operation uses the Stays.net platform as its management system and booking engine. Therefore, data necessary for carrying out and managing bookings may be processed by technology providers used in the operation, including systems for: booking management; hosting and technological infrastructure; communication; payment methods; performance analysis; fraud prevention; customer service; integration with sales channels. Sharing must be limited to what is necessary for the corresponding purpose.
8.Airbnb, Booking.com and other channels
When a booking is made through external platforms, such as Airbnb, Booking.com or other OTAs, data may be received from these channels to execute and manage the accommodation. These companies also process data in accordance with their own privacy policies. Arpoador Experience does not control the independent processing carried out by these platforms.
9.WhatsApp, email and customer service
Information provided by the user in contacts made via WhatsApp, email or other official channels may be stored when necessary for: customer service; booking management; guest support; recording requests; proof of communications; conflict resolution.
10.Cookies and similar technologies
The website may use cookies and similar technologies for operation, security, analysis and improvement of the browsing experience. Cookies may be classified, for example, as: necessary, essential for the operation of the website and the booking process; functional, used to store preferences; analytical, used to understand usage and performance; advertising or marketing, used to measure or personalize campaigns, when applicable. The ANPD recommends transparency about cookies and, where applicable, mechanisms that allow the user to manage non-strictly necessary cookies.
11.Data sharing
Personal data may be shared, when necessary, with: STAYS and other technology providers; payment processors and institutions; hosting platforms and OTAs; suppliers necessary to provide the contracted services; technical support providers; accountants, advisors or professional providers; public authorities, when there is a legal obligation or valid determination; third parties necessary for the regular exercise of rights. Arpoador Experience must not trade personal data as a database-selling activity.
12.International data transfer
Some technology providers may use infrastructure or companies located outside Brazil. In such cases, personal data may be subject to international transfer, in accordance with the mechanisms and requirements provided by applicable legislation.
13.How long we keep data
Personal data will be kept for the period necessary to: execute the booking or service; fulfill the purposes described in this Policy; comply with legal and regulatory obligations; preserve financial and tax records; exercise or defend rights; meet the deadlines applicable to contractual relationships. After the purpose has ended, data may be deleted or anonymized, except where retention is authorized or required by law. The LGPD provides for specific hypotheses that allow retention after the end of processing, including to comply with a legal or regulatory obligation.
14.Data security
Arpoador Experience must adopt reasonable administrative and technical measures to protect personal data against: unauthorized access; loss; destruction; alteration; improper disclosure; inadequate or unlawful processing. The LGPD requires processing agents to adopt technical and administrative security measures compatible with the protection of personal data. No system connected to the internet can be considered absolutely immune to incidents; therefore, security controls must be continuously evaluated.
15.Data subject rights
Under the LGPD, the data subject may, where applicable, request: confirmation of the existence of processing; access to data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of data processed in violation; portability, under the applicable regulation; information about sharing; deletion of data processed with consent, where applicable; revocation of consent; information about the consequences of any refusal to consent; review or clarification related to certain automated decisions, where applicable. These rights are provided for in the LGPD and are also described by the ANPD. Some requests may be subject to legal limitations, such as the need to retain certain records.
16.How to exercise your rights
Requests related to personal data must be sent to arpoadorexperience@gmail.com or WhatsApp +55 (11) 92464-5151. Arpoador Experience may request reasonably necessary information to confirm the identity of the requester and protect data against improper access. The ANPD recommends that data subjects first contact the controller’s official channels to exercise their rights.
17.Marketing communications
When Arpoador Experience sends promotional communications by email, WhatsApp or other channels, the processing must observe the applicable legal basis and the data subject’s preferences. When the communication depends on consent, it may be revoked. Messages necessary for the execution of a booking, service or contract are not equivalent to promotional communications.
18.Links and third-party services
The website may contain links or integrations with external services. Arpoador Experience is not responsible for the independent privacy practices adopted by third parties and recommends consulting their respective policies when the user accesses external services.
19.Changes to this Policy
This Policy may be updated to reflect legal, regulatory, operational, technological or service changes used by Arpoador Experience. The most recent version must remain available on the website with an indication of its update date.
20.Contact
Questions, requests or issues related to this Policy may be sent through Arpoador Experience’s official channels: arpoadorexperience@gmail.com; WhatsApp +55 (11) 92464-5151.