Privacy Policy

Zendaya Resort, in its capacity as the Data Controller, presents this Policy in accordance with Law No. 13.709/2018 (“LGPD” – General Data Protection Law). This document aims to clarify how Zendaya Resort collects, uses, stores, and, when necessary, shares personal data within the context of its business activities.

We place our clients, users, partners, and employees at the core of our decisions, as we understand that they form the foundation of all our business relationships. To maintain this standard of quality and ensure a satisfactory experience, it is necessary, under certain circumstances, to process personal data. Such information is used to enable the delivery of our products, services, and solutions at the quality level to which we are committed.

We collect personal data such as full name, email address, CPF number (Brazilian individual taxpayer registry), telephone number, payment details, reservation information, and accommodation preferences. This data is processed for the following purposes: (i) to enable reservations and the check-in process; (ii) to comply with legal and regulatory obligations applicable to the hospitality sector; (iii) to provide personalized service and targeted offers and promotions; and (iv) to ensure physical and digital security within the premises of Zendaya Resort.

The processing of personal data is based on the legal grounds provided by the General Data Protection Law, including, but not limited to: the performance of a contract, compliance with legal or regulatory obligations, the legitimate interests of the controller, the data subject’s consent, and the protection of life or physical safety.

Data subjects may exercise, at any time, the rights provided for in Article 18 of the LGPD, such as: access, rectification, portability, anonymization, blocking, deletion, revocation of consent, and objection to processing, by submitting a request to the Data Protection Officer (DPO) through the available communication channels.

Personal data may be shared with third parties strictly necessary for the operation of the services, such as booking platforms, payment processors, technology support providers, and public authorities, always in accordance with the principles of necessity, purpose, and security established by the applicable legislation.

Last Update: This document was last updated on May 22, 2025.