Privacy policy

The controller of the personal data collected on this website is Yann, host of Penthouse Arpoador (“we”, “us”), Rio de Janeiro, Brazil. You can reach us at booking@penthouse-arpoador.com.

We handle personal data in line with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados, LGPD, Law 13.709/2018).

When you request a quote we collect:

• the full name of every guest, as shown on their passport;
• your email address, and optionally your phone or WhatsApp number;
• your country of residence and the language you prefer;
• your dates, number of guests and payment preferences;
• any message you write to us.

We do not ask for payment card details: payments are made by bank wire or Zelle outside this website. This site does not use advertising trackers.

Like any web server, ours records technical data such as your IP address and browser type in short-lived logs, for security and to keep the service running.

• To prepare and email your quote and to manage your booking (performance of a contract or of steps you asked for before a contract).
• To register you with the building’s front desk and to meet our legal and tax obligations (legal obligation).
• To protect the website and our bookings against abuse and fraud, and to answer your questions (legitimate interest).

Your data is shared only with the service providers that help us run the website, and with the building’s front desk for registered guests:

• Supabase, our database provider (data stored in São Paulo, Brazil);
• Vercel, our hosting provider;
• Resend, which delivers our emails;
• Cloudflare, which handles our domain and email forwarding;
• the building’s front desk (portaria), which receives the names of registered guests.

Some of these providers process data outside Brazil (in particular in the United States and the European Union). We rely on providers that apply appropriate safeguards, as permitted by the LGPD.

We keep your data only for as long as it is needed for the purposes above, including the periods we must keep booking and accounting records by law. After that it is deleted or anonymised.

Under the LGPD (art. 18) you can ask us to confirm that we process your data, to give you access to it, to correct it, to anonymise, block or delete data that is unnecessary, to provide it in a portable format, and to inform you about who it was shared with. You can also withdraw any consent you gave. To exercise these rights, write to booking@penthouse-arpoador.com. You may also lodge a complaint with the Brazilian data protection authority (ANPD).

This website sets only functional storage: a cookie remembering your language, and your browser’s local storage remembering your currency. We use no analytics or advertising cookies.

We may update this policy; the date at the top shows the latest version.