Privacy policy
Last updated: 9 November 2026
This policy explains how Taste Rio Tours Ltda (CNPJ 52.479.361/0001-66) collects and uses personal data when you visit tasterio.com, book a tour or contact us.
Controller: Taste Rio Tours Ltda, Rio de Janeiro, Brazil.
Data protection officer (encarregado): Murillo Pijnappel. Contact: info@tasterio.com.
1. What data we collect
- Booking data: name, e-mail, phone/WhatsApp number, tour, date, number of guests, language, and the answers you give when booking (for example hotel name for pick-up).
- Dietary and allergy information: only if you tell us, and only to prepare your tour. Allergy information can be health data under the LGPD; we use it only with your consent and for this purpose.
- Payment data: card payments are processed by Stripe. We don't see or store your full card number. For Wise or Pix payments we receive the payer's name and the amount.
- Messages: what you send us by e-mail, WhatsApp or our contact and quote forms.
- Website use: cookies and similar technologies, if you allow them (see section 5).
2. Why we use it (legal basis)
| Purpose | Legal basis (LGPD art. 7 / 11) |
|---|---|
| Taking and managing your booking, reminders, meeting you | Performance of a contract |
| Allergy and dietary information | Your consent |
| Invoices (NFS-e) and accounting records | Legal obligation |
| Answering questions and quote requests | Pre-contractual steps / legitimate interest |
| Website statistics and advertising | Your consent (cookie banner) |
| Newsletter (if you opt in) | Your consent |
3. Who we share it with
Only with services we need to run the business:
- TicketingHub (booking system), Stripe (card payments), Squarespace (website and forms), Google (e-mail, analytics, advertising), Linguise (website translation), Elfsight (reviews widget), WhatsApp/Meta (messages).
- The bars we visit receive only what they need (e.g. number of guests, allergies), never your contact details.
- Authorities, when the law requires it.
Some of these providers store data outside Brazil (for example in the United States). They do so under contracts and safeguards allowed by the LGPD (art. 33).
If you booked through an online platform (Airbnb, Viator, GetYourGuide, etc.), that platform shares your booking details with us and its own privacy policy also applies.
4. How long we keep it
- Booking and invoice records: 5 years after the tour, to meet tax and accounting obligations.
- Messages and quote requests that didn't lead to a booking: up to 2 years.
- Allergy and dietary information: deleted after your tour.
- Newsletter: until you unsubscribe.
5. Cookies
We use necessary cookies to run the site and the booking system. With your consent, we also use analytics and advertising cookies (Google Analytics, Google Ads, through Google Tag Manager). You can accept, refuse or change your choice at any time with the cookie banner or your browser settings.
6. Your rights
Under the LGPD you can ask us to: confirm whether we hold data about you; give you access; correct it; anonymise, block or delete unnecessary data; give you a portable copy; tell you who we share it with; and withdraw your consent. Write to info@tasterio.com; we reply within 15 days. You can also complain to Brazil's data protection authority (ANPD).
7. Security
We use reputable providers, limit access to booking data to the people who need it, and never publish guests' details.
8. Changes
We update this policy when our services or the law change. The date at the top shows the latest version.