Privacy Policy
Last updated: September 12, 2025
This Privacy Policy describes how Imóveis na Serra, in compliance with the Brazilian General Data Protection Law (Law No. 13.709/2018, "LGPD"), collects, uses, stores, protects, and shares the personal data of website users. By using the website, the user declares that they have read and understood this policy, as well as the cookie practices described herein. We recommend reading this document carefully before providing any personal data.
1. Who We Are and How to Contact Us
Imóveis na Serra is a real estate brokerage duly registered with the CRECI (Regional Council of Real Estate Brokers), specializing in properties in the mountainous region of the state of Ceará. For the purposes of the LGPD, Imóveis na Serra acts as the controller of the personal data processed through the website, being responsible for decisions regarding the processing of such information. Questions, requests, and communications regarding privacy and the processing of personal data may be submitted through the website's contact page.
2. Definitions
For the purposes of this policy, the definitions set forth in Article 5 of the LGPD are adopted, including: personal data, meaning information relating to an identified or identifiable natural person; sensitive personal data, meaning data on racial or ethnic origin, religious belief, political opinion, membership in a trade union or religious, philosophical, or political organization, data concerning health or sex life, genetic or biometric data; processing, meaning any operation performed with personal data, such as collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation, or control of information; controller, meaning the natural or legal person to whom decisions regarding processing are assigned; and data subject, meaning the natural person to whom the personal data relates.
3. What Data We Collect
We collect data directly provided by the user, such as name, email, telephone number, and message sent through contact forms; registration and account access data, including name, email, telephone number, and password, which is stored in encrypted form; favorited properties; and data required for reservation requests. We also automatically collect data when the user browses the website, such as Internet Protocol (IP) address, browser type and version, device type, operating system, pages visited, date and time of access, and information collected by cookies and analytics tools, including Google Analytics 4.
4. How We Use Your Data and Legal Bases
Each processing purpose is linked to a legal basis provided for in the LGPD. Responding to requests made through contact forms and sending replies to messages are based on the data subject's consent and, subsidiarily, on the legitimate interest of Imóveis na Serra in meeting the user's legitimate expectations. The creation and maintenance of user accounts, including the use of favorites and the making of reservations, are based on the performance of a contract and preliminary procedures. Compliance with legal and regulatory obligations, such as tax and accounting obligations, is based on Article 7, item II, of the LGPD. The processing of data for platform security, fraud prevention, and service improvement through analytics tools is based on the controller's legitimate interest. Sending marketing communications, when carried out, will depend on prior consent and may be revoked at any time.
5. Cookies and Similar Technologies
We use cookies and similar technologies for the proper functioning of the website and to understand how users navigate the platform. Essential cookies are necessary for the basic operation of the website, such as login authentication, session maintenance, and security, and cannot be disabled without compromising the use of the platform. Analytics cookies, including those from Google Analytics 4, collect aggregated information about website usage, such as pages visited and time spent, enabling continuous improvements. Preference cookies remember the user's choices, such as language and favorited properties. The user may manage or disable cookies through their browser settings or the cookie banner displayed on the website.
6. Sharing with Third Parties
Imóveis na Serra does not sell or trade users' personal data. Data may be shared, to the extent necessary, with third parties acting as operators on our behalf, including hosting and infrastructure providers, Google through Google Analytics 4, Google Search Console, and Google OAuth for issuing administrative reports, and any service providers supporting reservation operations. Sharing occurs exclusively for the purposes described in this policy, and operators are contractually obligated to process the data in accordance with our instructions and in compliance with the LGPD.
7. International Data Transfers
Part of the collected data may be processed on servers located outside Brazil, including the Google infrastructure used for Google Analytics 4 and other integrated services, which constitutes an international data transfer. In such cases, Imóveis na Serra adopts the safeguards provided for in Article 33 of the LGPD, including entering into adequate contractual clauses and verifying that the recipient offers a level of protection compatible with Brazilian legislation.
8. Data Retention Period
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected. Account data is retained while the account is active and for any additional period required by legal obligations or for the defense of rights in administrative or judicial proceedings. Data collected automatically and through analytics tools is retained for the period defined by the respective tools, generally in aggregated and anonymized format.
9. Security Measures
Imóveis na Serra adopts appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, and improper disclosure, including the use of encryption in data transmission over HTTPS, encrypted password storage, restricted access controls to data, platform monitoring, performance of backups, and incident response procedures. The measures are reviewed and updated periodically to keep pace with technological developments and identified risks.
10. Your Rights as a Data Subject
Under Article 18 of the LGPD, the data subject has the right to: confirm the existence of processing of their data; access the processed data; correct incomplete, inaccurate, or outdated data; request anonymization, blocking, or deletion of unnecessary or excessive data; request data portability to another service provider; obtain information about sharing with third parties; revoke consent at any time; and request deletion of data processed based on consent. The user may also file a complaint with the ANPD (Brazilian National Data Protection Authority). Requests are free of charge and must be submitted through the channels indicated at the end of this policy, and will be responded to within the statutory period of up to 15 days.
11. Data of Children and Adolescents
The website is not directed at children and adolescents, and we do not intentionally collect personal data from individuals under 13 years of age. Registration and use of the services by adolescents between 13 and 18 years of age are only permitted with the consent of their parents or legal guardians. If we identify data from children or adolescents collected without proper consent, we will take steps to delete it immediately.
12. Changes to This Policy and Effective Date
This policy takes effect on September 12, 2025 and supersedes previous versions. Imóveis na Serra may amend it at any time to reflect changes in services, legislation, or processing practices, by publishing the updated version on the website with the respective update date. Continued use of the website after the publication of changes implies acceptance of the revised policy.
Contact and Data Protection Officer
Requests and questions regarding this Privacy Policy or the processing of personal data may be submitted through the website's contact page. Imóveis na Serra also maintains a Data Protection Officer (DPO) responsible for handling communications from data subjects, who may be reached through the same channel. Requests will be responded to within the statutory period, generally up to 15 days, without prejudice to the possibility of filing a complaint with the ANPD.