Privacy and data protection
Transparency about how we collect, use and protect personal information.
Colorado curation
Colorado uses only the information required to understand your journey, respond to your enquiry and provide a personalised service.
This policy explains how Colorado Viagens handles personal data when you browse the website, request a quote or contact us.
Colorado Viagens, operating from Belo Horizonte, Brazil, is the controller of personal data processed through this website and service enquiries. Privacy questions and requests may be sent to fabricio@coloradoviagens.com.br.
We may collect name, email, telephone or WhatsApp number, departure city, destination of interest, travel dates, number of adults and children, children's ages and any message voluntarily submitted. Technical navigation data may also be processed, including IP address, device and browser type, pages visited and security logs.
We use the information to respond to quote requests, understand the proposed journey, contact the traveller, prepare offers, provide service, protect the website, comply with legal obligations and exercise legal rights. Submitting the form does not automatically subscribe the traveller to advertising lists.
Processing may be necessary for pre-contractual steps requested by the data subject, based on consent where applicable, required to comply with legal obligations, or supported by Colorado's legitimate interests while respecting the rights and reasonable expectations of the data subject.
The form requests only children's ages when needed to plan the journey. This information must be provided by a legal guardian and is used exclusively to adapt accommodation, fares, services and experiences to the family group.
Data may be processed by providers essential to website hosting, transactional email, audience analytics, security and communications. The form currently uses Resend; Google Analytics is enabled only after consent; and WhatsApp is opened only if the visitor chooses to continue the conversation. Embedded Instagram posts may load Meta resources. Information may also be shared when required by law or a competent authority.
Some technology providers may process or store data outside Brazil. In such cases, we seek services that apply appropriate security measures and mechanisms compatible with applicable law.
We retain data only for as long as necessary to handle the enquiry, maintain a relevant business history, meet legal obligations, prevent fraud and exercise rights. Data may then be deleted or anonymised unless retention is permitted or required by law.
We use reasonable technical and organisational measures to protect data from unauthorised access, loss, alteration or improper disclosure. No digital environment is entirely risk-free, but we review our practices and providers to reduce exposure.
The website uses technology required for its operation and may load embedded third-party content such as Instagram. With your permission in the preference banner, Google Analytics collects navigation and interaction data to provide audience, traffic-source, page-view, quote-request and WhatsApp-click statistics. Your choice is stored on the device and can be changed using the Cookies button. Analytics is not used before acceptance.
Under Brazil's LGPD, individuals may request confirmation of processing, access, correction, anonymisation, restriction or deletion of unnecessary or unlawfully processed data, portability where applicable, information about sharing and withdrawal of consent, as provided by law. Identity verification may be required to protect the requester.
This policy may be updated to reflect changes in the website, services or law. The current version and date of its latest update will remain available on this page.
Designed together