WAYFARERBack to site

WAYFARER Agency

Privacy policy

Updated 12 September 2026

This policy explains what personal data WAYFARER Agency collects on this site, why we collect it, and what you can ask us to do with it. It follows the Brazilian General Data Protection Law, Law 13.709 of 2018.

Who handles your data

WAYFARER Agency, based in São Paulo, Brazil, is the controller of the data collected on this site. For anything concerning personal data, write to hello@wayfareragency.com.

What we collect

We collect only what you type into the enquiry form:

Alongside that, the server records the date and time of the submission and the originating IP address, for security and to limit automated submissions.

We use no tracking cookies, no advertising pixels, and we never buy contact lists.

Why we collect it

We use this data to answer your enquiry, build the travel proposal you asked for, and stay in touch about it. The legal basis is the performance of preliminary procedures related to a contract, at the request of the data subject.

We only send you anything beyond a reply to your enquiry if you ask us to. Any message from us can be stopped by replying and saying so.

Who we share it with

To deliver the trip you book, we pass the necessary details to suppliers: hotels, charter operators, airlines, restaurants and event organisers. We pass on only what the booking requires.

We also use Hostinger for hosting and email. We never sell your data to anyone, under any circumstances.

How long we keep it

Enquiries that do not proceed are deleted within 24 months. Data from completed trips is kept for five years, the period required by Brazilian consumer and tax law. You may request deletion before that, except where the law requires us to retain it.

Your rights

You have the right to confirm whether we process your data, access it, correct anything inaccurate, request deletion, request portability, know who we share it with, and withdraw consent.

To exercise any of these, write to hello@wayfareragency.com. We reply within 15 days.

Security

The site runs over an encrypted HTTPS connection. Access to enquiry records is restricted to the team that serves clients. If an incident occurs that could pose a meaningful risk to you, we will notify you and the Brazilian data protection authority.

Minors

This site is not directed at anyone under 18, and we do not knowingly collect data from minors. Where a trip involves children, their details are provided by the responsible adults during the booking process.

Changes to this policy

If we revise this policy, the new version takes effect from the update date shown at the top of this page.