Privacy Policy

1. Who we are – This Privacy Policy explains how Skydive Búzios Paraquedismo (CNPJ 24.848.115/0001-07), a tandem-skydiving operator based in Armação dos Búzios/RJ, Brazil, processes your personal data as data controller under the Brazilian General Data Protection Law (Law No. 13,709/2018 – LGPD). Our contact channel for privacy matters, including reaching our data protection officer (encarregado/DPO), is the email skydivebuziosparaquedismo@gmail.com.

2. Data we collect – To process your booking, we collect the details of the person making the purchase (name, email, phone and city) and, for each jump participant, their name, date of birth, approximate weight and a fitness-to-jump declaration. We also keep records of the booking emails we send (confirmations, reminders and notices) and, when you choose to talk to us on WhatsApp, the history of those conversations, which may be handled by our staff and by an artificial-intelligence assistant.

3. Why we ask for date of birth, weight and a fitness declaration – Tandem skydiving has safety requirements that depend on this information: the minimum age is 12 on the jump date, participants under 18 need authorization from a legal guardian, and the equipment has a weight limit set by its manufacturer (up to 115 kg, with a weigh-in on the day of the jump and a surcharge above 90 kg). Without this data we cannot plan the jump safely or comply with the rules of the activity.

4. Payments – Online payments are processed by Mercado Pago. Your full card details are provided directly to Mercado Pago and are never stored on our servers; we keep only the transaction records needed to prove and manage your booking (amount, status and payment identifiers).

5. Purposes and legal bases – We process your data under the legal bases of the LGPD: (a) performance of a contract, to process your booking, the deposit payment and the delivery of the service; (b) compliance with legal or regulatory obligations, to issue tax documents and keep records required by law; (c) legitimate interest, for the operational safety of the activity, fraud prevention and service messages about your booking (confirmations, reminders and changes); and (d) consent, for marketing communications, only when you authorize them, revocable at any time.

6. Who we share data with – We share data only with the processors needed to deliver the service: Mercado Pago (payment processing), Resend and Postmark (transactional email), Meta/WhatsApp Cloud API (WhatsApp messaging), Anthropic (processing of WhatsApp conversations by our AI assistant), Google (syncing bookings with our operational calendar) and Vercel and Neon (site hosting and database). We never sell your personal data and we do not share it with third parties for advertising purposes.

7. International transfers – Some of these providers store or process data outside Brazil. In those cases, the international transfer takes place in accordance with article 33 of the LGPD, to countries or bodies that provide an adequate level of protection or under adequate safeguards, such as contractual data-protection clauses.

8. How long we keep data – We keep your data while our relationship with you lasts and, after it ends, for the periods required to meet legal, tax and regulatory obligations and for the regular exercise of rights. Records tied to operational safety (such as the fitness declaration and jump data) are retained for as long as needed to prove compliance with the rules of the activity. After these periods, data is deleted or anonymized.

9. Your rights – Under article 18 of the LGPD, you may request confirmation that your data is processed, access to your data, correction of incomplete, inaccurate or outdated data, anonymization, blocking or deletion of data that is unnecessary, excessive or processed based on consent, portability, information about sharing, and withdrawal of consent. To exercise any of these rights, write to skydivebuziosparaquedismo@gmail.com; we will respond within the legal deadlines. You also have the right to lodge a petition with the Brazilian National Data Protection Authority (ANPD).

10. Children and adolescents – Participants under 18 only jump with authorization from a parent or legal guardian, and the personal data of minors is processed with the guardian's consent and in the minor's best interest, in accordance with article 14 of the LGPD. From minors we collect only the data strictly needed for safety and for carrying out the jump.

11. Cookies – We use only essential and functional cookies and technologies, needed for the site, booking and payment to work (for example, keeping your session and your language preference). We do not use advertising cookies or ad tracking.

12. Security – We adopt technical and organizational measures to protect your data, including encryption in transit (HTTPS), restricted access controls and data minimization: we collect only what is necessary for the purposes described in this policy.

13. Changes to this policy – We may update this policy to reflect legal or operational changes. The current version will always be published on this page, with the date of the last update shown at the top. Significant changes will be communicated through our contact channels when required by law.