Privacy policy · Avventa

1. Who we are

Avventa is the trading name of AVVENTA AVENTURA AGENCIAS DE VIAGENS LTDA, a travel agency registered in Brazil under CNPJ 69.699.364/0001-08, which is also its registration number in Cadastur, the Ministry of Tourism register, at Rua Pais Leme, 215, conj. 1713, Pinheiros, São Paulo, SP, 05424-150. We arrange nature expeditions in Brazil run by local operators. We decide how your personal data is used for the purposes in this policy, and we are responsible for it under Brazil's General Data Protection Law (LGPD) and, when you are in the UK or the European Union, under the UK GDPR and the EU GDPR. For anything about your data, write to info@avventa.com.br with "Privacy" in the subject.

2. What we collect

When you ask about a trip: your name, email, the expedition, when you would travel, the number of travelers, your country and anything you write in your message. We also record which page or ad campaign brought you to the site, without cookies.
When you write to us by email or WhatsApp: your messages and contact details.
When you book: each traveler's full name as in the passport, passport number, date of birth and nationality, your contact details, your flight times, and your choices in the proposal (including whether you keep the included accident insurance).
Health information, only if you choose to share it: conditions, allergies, medicines, mobility limits or dietary needs that the operator should know about to receive you safely.
Payments: amounts, dates and receipts. Card details are entered on our payment provider's secure page; we never see or store your full card number.
Travel advisors and partners: name, agency, business email, website and what you tell us about your clients.

3. Why we use it, and on what basis

To answer your request and prepare your proposal: steps you ask us to take before a contract.
To arrange and support your expedition: to perform our contract with you.
To meet legal obligations: invoices, accounting and tax records, and the accident insurance that Brazilian law asks anyone selling adventure travel to offer.
To share health information with your operator: only with your explicit consent, which you can withdraw at any time.
To understand how the site is used, to prevent fraud and to defend our rights (for example in a card dispute): our legitimate interests, kept to what is necessary.
To contact travel advisors about working together: our legitimate interest in business contacts. You can ask us to stop at any time.

We do not sell your data, and we don't send marketing emails to travelers.

4. Who we share it with

The local operator of your expedition, named in your proposal: what it needs to receive you, such as names, passport details, dates of birth, flight times, dietary needs and, with your consent, health information.
Our Brazilian insurance broker and insurer, to issue the included accident insurance: each traveler's name, passport number, date of birth and email. If you decline the insurance, nothing is sent.
Payment providers and banks, to process your payments.
Service providers who work for us: website hosting, email, WhatsApp and our accountants. They may use the data only to provide their service to us.
The travel advisor who referred you, if you booked through one.
Authorities, when the law requires it.

5. Data outside your country

We are in Brazil, and some of our providers store data in the United States or elsewhere. When your data leaves the UK or the EU, we rely on the safeguards the law allows, such as adequacy decisions or standard contractual clauses offered by our providers.

6. How long we keep it

Requests that don't become a booking: up to 2 years after our last contact.
Booking, payment and invoice records: 5 years after your trip, as Brazilian tax and consumer law requires.
Health information: deleted 90 days after your trip ends, unless it is needed for an insurance claim or a dispute.

7. Your rights

You can ask us to confirm whether we hold your data, give you a copy, correct it, delete it, move it to another provider, restrict or object to its use, and withdraw any consent you gave. Write to info@avventa.com.br; we reply within 15 days. Some records, such as invoices, must be kept by law even if you ask us to delete them. You can also complain to a data protection authority: the ANPD in Brazil, the ICO in the UK, or the authority of your country in the EU.

8. Cookies and third parties on this site

We count visits with a privacy-friendly tool that uses no cookies and keeps no personal profiles. We also use Google Ads to show our expeditions in search results and to measure how many trip requests come from those ads. In the UK, the European Union, the EEA and Switzerland, Google's advertising cookies are switched off on this site: Google receives only basic, cookieless information about the visit, such as the page and your approximate location, to count requests in aggregate. Elsewhere, including the United States, Google may set advertising cookies to measure ad performance; you can manage them in your browser settings or at adssettings.google.com. Our fonts load from Google Fonts and some photos load from our partners' websites, so those services receive your IP address when you open a page. Links to WhatsApp open a service run by Meta, under its own privacy policy.

9. Children

Families are welcome. Information about travelers under 18 is given to us by their parent or legal guardian, who books on their behalf.

10. Security

We keep your data in password-protected accounts with providers that use encryption, and we give access only to people who need it to arrange your trip.

11. Changes

If we change this policy, we publish the new version here with its date. The version that applies to your booking is the one in force when you paid your deposit.