Privacy

Privacy Policy

Last updated: 15 October 2026

This policy explains what personal information DGTOUR collects when you visit this website or ask us to plan a private journey, why we use it, who we share it with and the choices you have. It applies to visitors from anywhere, including the European Union, the United Kingdom, Switzerland, the United States, Canada and Brazil.

1. Who we are

The controller of your personal information is DGTOUR – Douglas Carvalho Albino, CNPJ 31.972.497/0001-33, Foz do Iguaçu, Paraná, Brazil. E-mail: douglascarvalhoalbino@gmail.com · WhatsApp: +55 45 99968-0121.

2. What we collect

Information you give us

Information collected automatically

We do not ask for payment details, identity documents or sensitive personal information on this website.

3. Why we use it and our legal bases

PurposeLegal basis (GDPR / UK GDPR · LGPD)
Replying to your request, planning and quoting your journey, and managing a booking.Steps taken at your request before entering a contract, and performance of the contract (Art. 6(1)(b) GDPR · Art. 7, V LGPD).
Recording your request in our customer management system (CRM) and following up.The same as above; and our legitimate interest in organising our service (Art. 6(1)(f) · Art. 7, IX).
When a request becomes a booking, telling Google Ads and Meta (Facebook/Instagram) which ad click led to it (the ad click identifier, the booking date and value and, only if you accepted advertising cookies, your e-mail address and phone number scrambled with SHA-256 and Meta browser identifiers), so our ads reach people likely to book. Nothing is sent if you refused advertising cookies or, in the EU/EEA, UK and Switzerland, if you did not accept them.Your consent to advertising cookies where the law requires it (EU/EEA, UK, Switzerland, Québec); elsewhere our legitimate interest in measuring our advertising, with the right to opt out (Art. 6(1)(a) or 6(1)(f) · Art. 7, I or IX).
Sending occasional travel news, only through the channel you opted in to (e-mail and/or WhatsApp).Your consent, which you can withdraw at any time (Art. 6(1)(a) · Art. 7, I).
Analytics and advertising measurement with cookies.Your consent where the law requires it (EU, UK, Switzerland, Québec); elsewhere our legitimate interest, with the right to opt out.
Keeping the website secure and preventing spam.Legitimate interest (Art. 6(1)(f) · Art. 7, IX).
Meeting tax, accounting and legal obligations.Legal obligation (Art. 6(1)(c) · Art. 7, II).

We do not make decisions about you based solely on automated processing.

4. Cookies and similar technologies

When you first visit, we ask for your choices. In the EU/EEA, UK, Switzerland and Québec, optional cookies stay off until you accept them. Elsewhere they are on by default and you can switch them off at any time. If your browser sends a Global Privacy Control signal, advertising starts switched off. We use Google Consent Mode, so Google tags respect your choice.

CategoryWhat it isExamplesDuration
Strictly necessaryRemembers your language and your privacy choices (browser storage, not shared).dg-lang, dg-consent, dg-attr (session)Until you clear it / the session ends
Analytics (optional)Google Analytics 4: statistics about visits to improve the site._ga, _ga_*Up to 2 years
Advertising (optional)Google Ads and Meta Pixel: measure which ads lead to requests and may personalise ads. The Meta Pixel only loads after you accept._gcl_au, _gcl_aw, _gcl_gb, Google domain cookies; Meta Pixel: _fbp, _fbcUp to 13 months

5. Who we share it with

We do not sell your personal information for money. We share it only with providers that help us run our service, under contracts that protect it:

WhatsApp

If you message us on WhatsApp, we use WhatsApp Business. Your messages are also processed by WhatsApp/Meta under its own terms and privacy policy. We reply to your questions there, but we only send promotional messages on WhatsApp if you opted in to that channel, and every such message tells you how to stop (reply STOP). We never ask for card numbers or identity documents on WhatsApp. If you ask us to delete your data, we also delete our WhatsApp conversation with you.

6. International transfers

We are based in Brazil and some providers process data in the United States and other countries. When personal information from the EU/EEA, UK or Switzerland is transferred, we rely on adequacy decisions or on Standard Contractual Clauses and equivalent safeguards offered by those providers.

7. How long we keep it

8. Your rights

Depending on where you live, you can ask us to: access your personal information; correct it; delete it; restrict or object to its use; receive it in a portable format; withdraw consent at any time (this does not affect earlier use); and opt out of targeted advertising. In Brazil (LGPD) you also have the right to information about sharing and about the consequences of refusing consent.

To exercise any right, write to douglascarvalhoalbino@gmail.com. We will reply within the period the law gives (generally one month, 45 days in California, 15 days for LGPD access requests). We may need to confirm your identity. You may also complain to your data protection authority, for example the authority of your EU country, the UK ICO, Switzerland's FDPIC, Canada's OPC or Québec's CAI, or Brazil's ANPD.

9. Notice for United States residents

In the last 12 months we have collected the categories described in section 2: identifiers (name, e-mail, phone, online identifiers), commercial information (trip details), internet activity, and approximate geolocation. We use them for the purposes in section 3. We do not sell personal information for money and we do not knowingly sell or share the information of anyone under 16. Using advertising cookies may count as "sharing" for cross-context behavioural advertising under California law. You can opt out at any time:

We honour Global Privacy Control signals. You will not be discriminated against for exercising your rights. You may use an authorised agent.

10. Children

This website is not directed to children under 16 and we do not knowingly collect their personal information. Families travelling with children can ask a parent or guardian to contact us.

11. Security

We use encrypted connections (HTTPS), limit access to those who need it, and use providers with recognised security practices. No method is completely secure, so please do not send sensitive information through the form.

12. Changes and contact

We will update this page when our practices change and show the new date at the top. Questions: douglascarvalhoalbino@gmail.com · WhatsApp +55 45 99968-0121 · DGTOUR, Foz do Iguaçu, PR, Brazil.