Privacy Policy

1. Who is responsible for your data

This site and the e-book Brazilian Portuguese for Travelers are operated by Jose Miguel Rodrigues, based in Brazil.

For the purposes of the GDPR (EU/UK) and the LGPD (Brazil), we are the controller of the personal data described here. You can reach us at any time at hello@braziltravelphrases.com.

2. What we collect

Data you give us

When you ask for the free starter phrases, the form collects:

• Your first name — so the emails do not open with "Dear subscriber".
• Your email address — the only way to actually send you the phrases.
• Your consent, along with the date and time you gave it and the exact wording you agreed to. We store this as proof of opt-in, which the law requires us to be able to show.

If you email us or buy the paid guide, we also hold whatever you write to us and the order details our payment processor passes on (never your full card number — see section 4).

Data collected automatically

• Campaign source — the utm_* parameters, referring page and landing page URL, so we know which ad or article brought you here.
• Technical data — IP address, browser and device type, collected by our hosting provider in ordinary server logs.
• Email engagement — whether an email was opened and which links were clicked, recorded by our email provider.

3. Why we collect it, and on what legal basis

• To send the free phrases and follow-up emails about the guide — based on your consent (GDPR Art. 6(1)(a); LGPD Art. 7, I), given by ticking the box on the form. You can withdraw it at any time; see section 6.
• To deliver and support a purchase — based on performance of a contract (GDPR Art. 6(1)(b)).
• To keep the site working, measure which campaigns bring readers, and prevent spam and abuse — based on our legitimate interests (GDPR Art. 6(1)(f)) in running a functional, non-fraudulent service.
• To keep records of consent, and tax records for sales — based on our legal obligations.

We do not sell your personal data, we do not rent our list, and we do not use your data to build advertising profiles for anyone else.

4. Who else sees it

We use a small number of service providers, who process data only on our instructions:

• Email service provider — Kit (ConvertKit), which stores your name and email and sends the emails.
• Website hosting — Netlify, which keeps server logs.
• Analytics — Google Analytics 4, which receives anonymous usage statistics (pages viewed, country, device, referring site). We never send it your name or email address.
• Payment processing (paid guide only) — Payhip. They handle the card details directly; we never see or store your full card number.

Some of these providers are based outside your country, including in the United States. Where personal data leaves the European Economic Area, the UK or Brazil, it is transferred under the safeguards those providers offer — typically the European Commission's Standard Contractual Clauses.

We will also disclose data if we are legally required to, for example by a valid court order.

5. How long we keep it

• While you are subscribed, and for up to 24 months after your last interaction with an email — after which inactive contacts are deleted.
• If you unsubscribe, we keep your email address on a suppression list indefinitely. That is the only way to guarantee we never email you again by accident.
• Consent records for as long as we hold your data, plus 5 years.
• Purchase and tax records for the period required by law in Brazil, typically five to ten years.
• Server logs for as long as our host retains them, usually 30 to 90 days.

6. Your rights

Wherever you live, you can ask us to:

• Confirm and access the data we hold about you;
• Correct anything that is wrong or out of date;
• Delete your data ("right to be forgotten");
• Export your data in a portable, machine-readable format;
• Restrict or object to processing based on legitimate interests;
• Withdraw consent at any time — this does not affect anything we did lawfully before you withdrew it.

The fastest way to withdraw consent is the Unsubscribe link at the bottom of every email we send. It works immediately and does not ask you why.

For anything else, email privacy@braziltravelphrases.com. We will reply within 30 days (15 days for LGPD requests where a shorter deadline applies). We may ask you to confirm you control the email address before acting on a request.

If you are in the EU or the UK you can also complain to your national data protection authority; in Brazil, to the ANPD. We would rather you told us first and gave us the chance to fix it.

7. Cookies and tracking

This site sets no advertising cookies. What it does load:

• Google Analytics 4 (measurement ID G-BQCCMGHKLV), which tells us how many people visit, which pages they read and roughly where they are. It sets a first-party cookie named _ga, valid for two years, holding a random number rather than your identity.
• Google Fonts, served from fonts.googleapis.com and fonts.gstatic.com. This sends your IP address to Google. If you would rather it did not, the fonts can be self-hosted — see the site's README.
• No advertising or remarketing tags, and no Meta, TikTok or LinkedIn pixels.

If you are in the EEA, the UK or Switzerland, Google Consent Mode is set to deny all storage before you are asked. No analytics or advertising cookie is written for your visit — we receive only an anonymous, cookieless count. That is why you are not shown a cookie banner: there is nothing on this site to consent to.

Anywhere in the world you can opt out with Google’s browser opt-out add-on, or simply by blocking cookies. Your browser can block or delete them at any time; nothing on this site depends on them.

8. Security

The site is served over HTTPS. Your data sits with the providers named in section 4, under their own security programmes. No system is perfectly secure, but if a breach ever affects your data we will notify you and the relevant authority as the law requires.

9. Children

This site is meant for adults planning travel. We do not knowingly collect data from anyone under 16. If you believe a child has given us their details, email us and we will delete the record.

10. Changes to this policy

If we change how we handle your data we will update this page and the "last updated" date above. Material changes affecting people already on the list will be announced by email before they take effect.

11. How to reach us

Jose Miguel Rodrigues
Rua Dr. Ribeiro Pena, 2433
Divinopolis, MG, 35500-055, Brazil
hello@braziltravelphrases.com

A postal address is not decoration: US anti-spam law (CAN-SPAM) requires a valid physical mailing address in every commercial email you send, and most email providers will not let you send without one.

← Back to the guide