This policy explains which personal data we collect when you use our website or stay with us, what we do with it, who we share it with and how you stay in charge of it. It follows the Brazilian General Data Protection Law (Law 13,709/2018), known as the LGPD.
Last updated: August 12, 2026
Quinta do Sol Hotels is the controller of the personal data handled on this website and at both hotels of the group: Quinta do Sol Praia Hotel and Quinta do Sol Lite Praia Hotel, both on Curuípe Beach, in Porto Seguro, Bahia, Brazil.
This policy covers hoteisquintadosol.com in Portuguese, English and Spanish, the booking engine, the online check-in and the service we give by WhatsApp and e-mail.
We only ask for what we need to look after you. The table shows each situation, what is collected, what it is for and the legal ground under article 7 of the LGPD.
| When | What we collect | What for | Legal ground |
|---|---|---|---|
| Booking on the website | Name, ID or passport number, e-mail, phone, address, dates of stay, number of guests and the payment details. | To make, confirm and charge your booking, and to talk to you about it. | Performance of a contract (art. 7, V) |
| Guest account on the website | Name, e-mail, phone and password. | To create your account, show your bookings and release the registered guest coupon. | Performance of a contract and consent (art. 7, V and I) |
| Online check-in (FNRH) | The data of the National Guest Registration Form: name, ID, date of birth, nationality, address, occupation, purpose of travel and dates. | To register the stay as Brazilian tourism law requires and to send that record to the authority. | Legal obligation (art. 7, II) |
| Newsletter and promotions waiting list | Name, e-mail and phone. | To tell you about news, seasonal rates and deals. | Consent (art. 7, I) |
| Discount pop-up and contact forms | Name, e-mail and phone. | To answer your request and send the offer you asked for. | Consent (art. 7, I) |
| Service by WhatsApp, phone or e-mail | Number, name and the content of the conversation. | To answer you, quote a stay and sort out whatever you ask. | Performance of a contract and legitimate interest (art. 7, V and IX) |
| Browsing the website | IP address, browser, device, pages seen, time spent and where the click came from (campaign, search term, advertising identifier). | To keep the website standing, measure what works and show offers closer to what you are looking for. | Consent for cookies that are not necessary; legitimate interest and legal obligation for access logs (Brazilian Internet Act, art. 15) |
We do not ask for sensitive data — racial origin, religion, political opinion, health, sex life, biometrics. If any of it is needed for a special arrangement, we ask separately and explain why.
We do not sell personal data. We share what is needed with those who help us run the hotel and the website, and all of them are bound to use the data only for the service they provide.
| Who | What for | Where the servers are |
|---|---|---|
| Nova XS / e-Solution (booking engine and online check-in) | To process the booking, the National Guest Registration Form and the payment. | Brazil |
| Card networks and payment providers | To charge the booking. Card details go straight to them: the hotel does not keep the number. | Brazil |
| Kommo (CRM) | To record your contact and organise the sales follow-up. | United States |
| Google (Analytics, Ads, Tag Manager, Maps and Places) | To measure use of the website, show the map and measure the ads. | United States |
| Meta (Facebook, Instagram and WhatsApp) | WhatsApp service and ad measurement. | United States |
| ReviewPro / Shiji | To collect and show reviews from people who have stayed with us. | Spain |
| Kinsta (website hosting) | To keep the website online and hold the access logs. | United States and European Union |
| Public authorities | Only where the law requires it or a court orders it. | Brazil |
The Google reviews strip on the home page shows what is already public on the hotel listing at Google. It is built on our own server from time to time: your visit is not sent to Google because of it.
Some of the services listed above run on servers outside the country. In those cases the transfer rests on article 33 of the LGPD: either the data is needed to carry out your booking, or the provider has signed contract clauses granting the same level of protection as Brazilian law.
We keep each piece of data for as long as it still serves what it was collected for, and for the periods the law sets:
| Data | Period |
|---|---|
| Booking, stay and invoice | Five years after the stay (consumer and tax law periods). |
| National Guest Registration Form | The period Brazilian tourism law requires. |
| Guest account on the website | While the account exists. You can ask us to delete it whenever you want. |
| Marketing contacts (newsletter, waiting list, pop-up) | Until you ask to leave, or after two years without any interaction from you. |
| Website access logs | Six months, as the Brazilian Internet Act requires. |
| Cookie choice | 180 days, in your browser. |
Once the period is over, the data is deleted or left with no link to you.
Should an incident happen that could put you at risk, we tell you and the ANPD, the Brazilian data protection authority, as article 48 of the LGPD requires.
Article 18 of the LGPD gives you the right, at any time and free of charge, to:
To exercise any of these, write to reservas@hoteisquintadosol.com. We answer within 15 days. We may ask you to confirm it is really you, and nothing beyond that — asking for identity protects your account, it is not there to make the request harder.
If our answer does not satisfy you, you can complain to the ANPD.
The website is not meant for people under 18, and a booking has to be made by an adult. When a child stays with us, their data comes from the responsible adult, who is told what it is for — as article 14 of the LGPD requires.
We take no decision about you by computer alone. Rates, availability and discounts follow hotel rules that are the same for everyone in the same situation, and they do not build a personal profile.
Article 41 of the LGPD requires us to name whoever answers requests from data subjects and talks to the authority. Reach our officer at reservas@hoteisquintadosol.com or on (73) 3268-8500.
When this policy changes, the date at the top of the page changes with it. If the change affects what we do with your data, we say so on the website — and if it affects cookies, the cookie banner comes back so you can choose again.
