Legal
Privacy Policy
Last updated: April 2026 · Tangara Birding
01 Who we are
Tangara Birding (tangarabirding.com) is operated by Gustavo Dallaqua de Oliveira, an individual based in São Paulo, Brazil. We are the data controller for personal information collected through this platform.
If you have any questions about this policy or how we handle your data, contact us at [email protected].
02 What data we collect
When you make a booking
- Full name
- Email address
- Phone number / WhatsApp
- Country of residence
- Notes provided for the guide (travel preferences, target species, dietary needs, etc.)
- Payment information — processed and stored by Stripe; we do not store card details
When you browse the site
- Standard web server logs (IP address, browser type, pages visited, timestamps)
- No tracking pixels, advertising cookies, or third-party analytics beyond what Netlify collects for hosting
If you are a guide
- Name, email, biography, photo, languages, experience level
- Login credentials managed via Supabase Auth
- Booking and availability data you enter in the guide dashboard
03 How we use your data
We use your personal data solely to:
- Process and confirm your booking — sending you a confirmation email with your booking reference
- Facilitate communication with your guide — sharing your contact details with the guide assigned to your expedition
- Send booking-related communications — payment reminders, expedition updates, and post-trip follow-ups
- Comply with legal obligations — record-keeping for financial and tax purposes
We do not use your data for advertising, profiling, or sell it to any third party.
04 Who we share your data with
- Your guide — name, email, phone, country, and notes are shared with the independent guide leading your expedition, solely to deliver the service
- Stripe — payment processing. Stripe's privacy policy applies to payment data: stripe.com/privacy
- Supabase — our database infrastructure, hosted in the EU. Data processed under their privacy policy
- Resend — transactional email delivery (booking confirmations). No marketing use
We do not share your data with any other third parties, advertisers, or data brokers.
05 Data retention
We retain your booking data for 5 years from the date of your expedition, as required for financial record-keeping under Brazilian law.
If you request deletion of your account or data before this period, we will delete all personal information not required by law within 30 days.
06 Your rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate data
- Deletion — ask us to delete your data (subject to legal retention requirements)
- Portability — receive your data in a structured, machine-readable format
- Objection — object to certain types of processing
To exercise any of these rights, contact us at
[email protected]. We will respond within 30 days.
If you are in the European Union, you also have the right to lodge a complaint with your local data protection authority.
If you are in Brazil, these rights are guaranteed under the Lei Geral de Proteção de Dados (LGPD) — Law No. 13,709/2018.
07 Cookies
Tangara Birding does not use advertising cookies or third-party tracking. The site uses only essential technical cookies required for functionality (such as maintaining your session during checkout).
No cookie consent banner is currently displayed as we do not use non-essential cookies. If this changes, we will update this policy and add appropriate consent mechanisms.
08 International transfers
Tangara Birding is based in Brazil. Our infrastructure providers (Supabase, Stripe, Netlify, Resend) may process data in the United States or European Union. All providers are chosen for their compliance with international data protection standards.
If you are located in the EU, transfers to Brazil are subject to standard contractual clauses where applicable.
09 Contact
For any privacy-related questions, requests, or complaints:
[email protected]
We aim to respond to all privacy requests within 30 days.