My itinerary privacy

Who is responsible

The party responsible for the data of My itinerary is Bombinhas Oficial. Contact for any privacy matter: contato@bombinhasoficial.com.br. This text applies only to My itinerary. The rest of Guia Bombinhas has its own policy.

What we ask and what it is for

• Name and email: to address you by name and send the PDF.
• Trip dates, who is going (adults, children by age group, mobility difficulty, pet), where you will stay, how you will get around, your pace, your tastes, food restrictions, what you want to avoid and the special request in free text: to build the itinerary.
• Answers about mobility and food restrictions can touch on health. We use them only to build your itinerary and they leave our system together with the rest. Do not write in the free field anything you do not want processed.
• We do not ask for the names of the children, only the age group.
• Payment: the Pix is made at Mercado Pago, which receives your payment data on its own. We send it your email to create the Pix and get back only the payment number, the amount and whether it was approved. We do not see or keep bank or card data.

How long we keep it

• Unpaid order: deleted after 24 hours.
• Paid order: the PDF and the answers stay for 72 hours after delivery and are then deleted from our system. There is no backup.
• If the PDF fails and the amount is refunded, the order is deleted within 96 hours of payment.
• In your browser, the quiz keeps your answers on your device so you can continue where you stopped. This goes away when you send the quiz or clear the browser data.

Who we share it with

We do not sell data and we do not use it for advertising. For the service to work, it goes through the following providers:

• Mercado Pago: processes the Pix, under its own policy.
• Resend: the service that delivers the email with the PDF attached and keeps the record of the sending under its own rules.
• Hostinger: the hosting of the server where the system runs.
• Open-Meteo: supplies the weather forecast. It receives only the location of Bombinhas and the dates, none of your data.
• Deleting from our system does not delete what is held by Mercado Pago, by the email service and in your inbox. Those copies follow the rules of each one.
• When the PDF fails, we alert the team by email with the order number and your name, to fix the problem.

Why we may process this data

We process the data to fulfil the order you placed, that is, to build and deliver the itinerary. And, to a lesser extent, to protect the service against abuse, on the basis of legitimate interest. We do not build a profile of you and we do not use the data for any other purpose.

Cookies and tracking

My itinerary does not use advertising cookies or third party analytics tools. It stores only the language you chose, in a cookie for one year.

To stop abuse, your IP address and email stay in the server memory for up to one hour and then disappear. As on any site, the server also records the IP address and the page visited in technical access files, which are discarded periodically.

Your rights

Under the LGPD you can ask us to confirm that we process your data, for access, correction, deletion, information about who we share it with and withdrawal of what you authorised. Write to contato@bombinhasoficial.com.br. We reply within 15 days.

Since we delete orders after 72 hours, after that period there may be nothing left to access. You can also complain to the National Data Protection Authority (ANPD).

Children and minors

The service is sold to adults, aged 18 or over. For the children on the trip we only ask for the age group, without a name.

Changes

We may update this text. The date at the top shows the latest version. For orders already placed, what was written when you bought applies.