Privacy Policy
Version v2 — 28 July 2026
Who we are (data controller)
A T Labarile (trading as Atins Beach House e Chalés), CNPJ 38.453.004/0001-06, Atins, Barreirinhas/MA, CEP 65590-000, Brazil. Contact: atinsbeachhouse@gmail.com or WhatsApp +55 98 99181-8238 (opens in new tab).
What we collect in the pre-check-in
First and last name, nationality, CPF (Brazilian guests) or passport number (foreign guests), gender, date of birth, email, phone, home address, stay dates, reservation number (optional), your approximate arrival time and the agency handling your transfer to Atins (both optional), number of guests, and a record of your consent (date, version of this text and form language).
What we use it for
Exclusively for: (1) the guest registration required by Brazilian law — the national guest registration form (FNRH), under MTur Ordinance 41/2025; (2) issuing the lodging invoice; (3) contacting you about your reservation and arrival; and (4) showing, on the confirmation screen, a contact shortcut for our partner tour agency (Guaratur Adventure): the suggested message — with your first name and your stay dates — is composed on your own device and is only sent if you yourself tap send in WhatsApp; we transmit nothing to the agency. We do not sell your data and we do not pass it to commercial third parties ourselves; the contact with the partner agency described above only happens if you yourself decide to send the message.
Where the data lives
Submitted data is stored in a private Google spreadsheet (Google Sheets / Google Apps Script), accessible only to the pousada's team. Google LLC acts as a processor, which may involve international data transfer under Article 33 of the LGPD. While you fill in the form, a draft is kept only on your own device (localStorage) for up to 7 days and is deleted once your submission is confirmed. If you enter a Brazilian postal code, it is looked up on the public ViaCEP service directly from your browser, solely to auto-fill the address; no other data of yours is sent to that service. When you tap one of the WhatsApp buttons, the link you open contains the suggested message text (your first name and your stay dates), which WhatsApp (Meta) processes to pre-fill the conversation; the message itself only reaches the recipient if you tap send.
Sharing and retention
We share data only with public authorities when required by law (for example, the Ministry of Tourism's FNRH system and tax obligations). Records are kept for the periods required by guest-registration and tax legislation, and deleted afterwards. Guaratur Adventure receives no data about you from us; it only receives what you yourself send from your own WhatsApp.
Your rights (LGPD, Law 13.709/2018)
You may at any time request confirmation, access, correction or deletion of your data (LGPD Article 18) via the contacts above. Note that mandatory lodging-registration data can only be deleted after the legal retention period.
Website
The pre-check-in is the only page on this site whose data is sent to and stored by the pousada. The contact form only composes a WhatsApp message on your own device — nothing from it is stored by the website. For navigation metrics we use Google Tag Manager / Google Analytics, which set cookies and pseudonymous identifiers; no name, email or ID document is ever sent to the analytics service.