Privacy Policy and Terms of Use
Last updated: November 9, 2026
1. Who we are
The website esmeraldapraiahotel.com.br belongs to Esmeralda Praia Hotel, the trade name of SAL - Empreendimentos Ltda., Brazilian company registration (CNPJ) 04.201.876/0001-57, headquartered at Rua Francisco Gurgel, 1160, Ponta Negra, Natal/RN, Brazil, postal code 59090-050.
In this policy, “we” and “hotel” refer to this company. “You” means anyone who visits the website, makes a booking or fills in a form.
We are the controller of the personal data processed on the website, under Brazil’s General Data Protection Law (Law 13,709/2018, LGPD).
2. Data Protection Officer (DPO)
For any matter regarding your personal data, contact our Data Protection Officer:
- Data Protection Officer: Esmeralda Praia Hotel Reservations Department
- Email: reservas@esmeraldapraiahotel.com.br
- Phone: +55 (84) 4005-4005
- Address: Rua Francisco Gurgel, 1160, Ponta Negra, Natal/RN, Brazil, postal code 59090-050
3. What data we collect
Data you provide to us
| Where | Data |
|---|---|
| Contact forms, newsletter, VIP List and campaign sign-ups | first name, last name, email, phone/WhatsApp and, where applicable, the month or period you plan to travel |
| Website WhatsApp button | first name, last name, email, phone and when you plan to travel |
| Travel Consultant (consultor.esmeraldapraiahotel.com.br) | name, email, phone and the travel preferences you share |
| Dietary restrictions form | name, CPF or foreign ID document, email, phone, booking number and dates, and information about allergies, intolerances and diets |
| Booking through the booking engine (reservas.esmeraldapraiahotel.com.br) | guest and payment data, processed by the booking system |
| Online pre-check-in | guest registration data required for the stay |
| Travel agent portal | travel agent registration data |
Information about allergies, intolerances and diets is health data, considered sensitive under the LGPD. We only use it to prepare your meals safely, with your consent.
Data collected automatically
When you browse the website, we collect data such as IP address, browser and device type, pages visited, browsing time, source of the visit (for example, an ad or a campaign link) and interactions with the page. This is done through cookies and similar technologies (section 7).
4. How we use data and on what legal basis
| Purpose | Legal basis (LGPD) |
|---|---|
| Responding to your messages and questions | pre-contractual steps, at your request (art. 7, V) |
| Processing and managing bookings, payments and your stay | performance of a contract (art. 7, V) |
| Guest registration required by Brazilian tourism law (National Guest Registration Form), tax obligations and authorization for minors to stay (Child and Adolescent Statute) | compliance with a legal obligation (art. 7, II) |
| Meeting dietary restrictions | specific consent for health data (art. 11, I) |
| Sending newsletters, offers and communications by email and WhatsApp | consent (art. 7, I), which may be withdrawn at any time |
| Measuring website use, fixing errors and improving navigation | legitimate interest (art. 7, IX) |
| Measuring campaigns and showing hotel ads on other websites and social networks | consent for marketing cookies (art. 7, I) |
| Website security and fraud prevention, including card payment validation | legitimate interest and credit protection (art. 7, IX and X) |
5. Who we share data with
We do not sell your data. We only share what is necessary with:
- Suppliers that operate services for the hotel: website hosting (WordPress.com, by Automattic), email and CRM platform (RD Station), booking system, pre-check-in system and WhatsApp customer service tools.
- Analytics and advertising tools: Google (Analytics, Ads and Tag Manager), Meta (Facebook and Instagram), TikTok, Pinterest, OpenAI and Microsoft Clarity.
- Public authorities, when required by law or by court order.
These partners may only use the data for the purposes of this policy and must protect it.
6. International transfer
Some suppliers, such as Google, Meta, Microsoft, Automattic and TikTok, store data outside Brazil. In these cases, the transfer follows article 33 of the LGPD, with contractual protection safeguards.
7. Cookies
Cookies are small files stored in your browser. We use:
| Type | Purpose | Examples |
|---|---|---|
| Necessary | making the website work and remembering the source of your visit | eph_utms, rdtrk, __trf.src |
| Performance and analytics | understanding how the website is used and fixing problems | _ga, _ga_*, FPID, FPLC, FPGSID (Google Analytics); _clck, _clsk (Microsoft Clarity) |
| Marketing | measuring campaigns and showing hotel ads | _gcl_au (Google Ads); _fbp (Meta); _ttp, ttcsid, _tt_enable_cookie (TikTok); _pin_unauth (Pinterest) |
You can delete or block cookies in your browser settings. Blocking necessary cookies may affect how the website works.
8. How long we keep data
We keep data for as long as necessary for each purpose:
- Contacts and marketing sign-ups: until you request deletion or unsubscribe.
- Booking and stay data: for 5 years after the stay, the period set by tax obligations and the Brazilian Consumer Protection Code, or longer if required by law.
- Dietary restrictions: during your stay and for up to 6 months after check-out, to handle any questions or complaints. After that, they are deleted.
- Website access logs (IP address, date and time): 6 months, as required by Brazil’s Internet Civil Framework (Law 12,965/2014, art. 15).
- Browsing data in analytics and advertising tools: for the periods set by each tool.
After that, data is deleted or anonymized, except when the law requires it to be kept.
9. Your rights
Under the LGPD (art. 18), you may request at any time:
- confirmation that we process your data and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
- portability of the data to another provider;
- deletion of data processed with your consent;
- information about who we share your data with;
- withdrawal of consent.
To do so, write to the Data Protection Officer (section 2). We respond within 15 days. You may also file a complaint with Brazil’s National Data Protection Authority (ANPD).
To stop receiving emails, use the unsubscribe link included in every message.
10. Security
We adopt technical and administrative measures to protect your data against unauthorized access, loss and misuse. The website uses a secure connection (HTTPS). No system is completely immune to failures. If an incident occurs that may pose a risk to you, we will notify you and the ANPD, as required by law.
11. Children and adolescents
The website is not intended for people under 18. Children’s data is only processed when provided by their parents or guardians, for the family’s stay, and in the child’s best interest.
12. Links to other websites
The website contains links to third-party websites, such as social networks, the booking engine and the Travel agent portal. Each one has its own privacy policy.
13. Website terms of use
- All website content (texts, photos, videos, trademarks and logos) belongs to Esmeralda Praia Hotel or its partners and is protected by law. It may not be copied or used for commercial purposes without authorization.
- By using the website, you agree not to engage in illegal acts or interfere with the website’s operation, for example by sending viruses or trying to access restricted areas.
- Prices, availability and the conditions of deals apply as published in the booking engine and in the rules of each campaign.
- We do our best to keep information accurate and up to date, but it may change without notice.
- These terms are governed by Brazilian law. The courts of Natal/RN are chosen as the venue, without prejudice to the consumer’s right to file a claim in the courts of their place of residence.
14. Changes to this policy
We may update this policy at any time. The date of the last update appears at the top of the page.
This policy was written in Portuguese. In case of any discrepancy with versions in other languages, the Portuguese version prevails.
