Privacy and data protection

Privacy Policy

How ArrowTur collects, uses and protects your personal data, in accordance with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).

Last updated on October 18, 2026

01Who we are

This website (arrowtur.com.br) is run by Arrow Viagens e Turismo Ltda. (ArrowTur), Brazilian company registration (CNPJ) 61.029.898/0001-15, headquartered at Rua Dr. Renato Paes de Barros, 618, Conjunto 01, Itaim Bibi, São Paulo - SP, 04530-000, Brazil.

Under the LGPD, ArrowTur is the controller of the personal data collected through this website, meaning we decide how it is used.

02What data we collect

  • Data you send us: in the company registration, leisure travel and events forms, data such as your name, email, phone number, company, company registration number and the details you write about your trip or event. For the newsletter, your email address.
  • Conversations: when you contact us by phone, WhatsApp or email, we keep the history needed to handle your request.
  • Browsing data: IP address, browser and device type, pages visited, where your visit came from and cookies (see section 6).

We do not ask for sensitive data (such as health or religion) through the website. Passenger data needed to issue tickets and bookings, such as identity documents and date of birth, is handled in our service systems, not through this website.

03How we use your data

  • To reply to your message and send proposals and quotes.
  • To register your company and give access to our booking, invoicing and reporting platforms.
  • To provide the travel and event services you hire.
  • To send our newsletter with deals and news, if you have subscribed.
  • To measure how the website is used and improve our content and ads.
  • To meet legal and tax obligations and protect the website against fraud and abuse.

04Legal bases

We use your data on the legal bases set out in Article 7 of the LGPD:

  • Consent: for the newsletter. You can unsubscribe at any time.
  • Contract and proposals: to prepare quotes, register your company and provide the services you hire.
  • Legal obligation: to keep records and tax documents required by law.
  • Legitimate interest: for website security, audience measurement, service improvement and business contact with companies, always respecting your rights.

05Who we share it with

ArrowTur does not sell personal data. We share only what is necessary with:

  • Travel suppliers (airlines, hotels, car rental companies, insurers and tour operators), to provide the service you hired.
  • Technology companies that work for us: website hosting (HostGator), website protection and delivery (Cloudflare), forms and customer relationship management (HubSpot), measurement and advertising (Google, Meta and LinkedIn), email delivery and WhatsApp.
  • Public authorities, when required by law.

06Cookies

Cookies are small files stored in your browser. This website uses:

  • Necessary cookies: they make the website work and remember the language you chose.
  • Measurement cookies: Google Analytics, loaded through Google Tag Manager, shows in aggregate how the website is used.
  • Marketing cookies: Google Ads, Meta, LinkedIn and HubSpot measure the results of our campaigns and may show ArrowTur ads on other websites and social networks.

You can delete or block cookies in your browser settings. Some parts of the website may stop working.

07International transfers

Some of these suppliers, such as Google, Meta, LinkedIn, HubSpot and Cloudflare, store data on servers outside Brazil. These transfers follow what the LGPD allows, with suppliers that apply protection measures consistent with the law.

When you book an international trip, the necessary data is also sent to suppliers at your destination.

08How long we keep it

  • Contacts and proposals: while there is a business relationship or until you ask us to delete them.
  • Newsletter: until you unsubscribe.
  • Services hired and tax documents: for the periods required by law.

After these periods, the data is deleted or anonymized.

09How we protect it

We use a secure connection (HTTPS), password-restricted access to our systems and suppliers with recognized security standards. No system is completely immune to failures: if a relevant security incident occurs, we will notify the affected people and Brazil's National Data Protection Authority (ANPD), as required by law.

10Your rights

Under the LGPD, you may at any time:

  • confirm whether we process your data and access it;
  • correct incomplete, inaccurate or outdated data;
  • request the anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
  • request the portability of your data to another provider;
  • find out who we share your data with;
  • withdraw your consent, for example by unsubscribing from the newsletter;
  • object to processing carried out without your consent when it does not comply with the law.

To exercise these rights, write to [email protected]. We reply within 15 days. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).

11Children and teenagers

The website is intended for companies and adults, and we do not knowingly collect data from anyone under 18 through it. Data of children and teenagers traveling with their families is used only for the trip, with the authorization of their parents or guardians.

12Links to other websites

The website has links to WhatsApp, social networks and other websites. They have their own privacy policies, which apply when you visit them.

13Changes to this policy

We may update this policy to keep up with changes in the law or in our services. The date at the top of the page shows the version in force.

14Contact

Arrow Viagens e Turismo Ltda.
Rua Dr. Renato Paes de Barros, 618, Conjunto 01, Itaim Bibi, São Paulo - SP, 04530-000, Brazil
Email: [email protected]
Phone: +55 11 5189-4120