Privacy Policy

1. Who we are

TravelRight (travelright.travel) is operated by B.F.R. FORSSELL PUBLICIDADE, company number 10.682.153/0001-10, registered at Av. Rui Barbosa, 1302, sala 09, Satélite, Itanhaém - SP, CEP 11740-000.

Under the Brazilian General Data Protection Law (Law 13.709/2018), we are the controller of the data described in this policy.

Privacy contact: contact@travelright.travel

2. What we collect, and why

We collect only what each tool needs to work. Nothing is mandatory — if you don't use a tool, we don't collect its data.

Travel quiz

When you answer the quiz, we store your answers about emotional state, travel style, energy, budget and preferences, along with the origin city and country you enter, the currency and the interface language.

What for: generating the travel recommendations you asked for.

Birthday reading

We store the date, time and place of birth you enter, plus the departure city and the range you choose.

What for: calculating the natal chart and the astrocartography that produce the reading. The calculations run on our server, and the same birth data always produces the same result.

Email

If you ask to receive your recommendations or subscribe to our messages, we store the email address you enter, together with the matching quiz answers.

What for: sending what you asked for. You can ask to be removed at any time.

Travel Rights Plus — comfort profile

This questionnaire is in operation. It is optional: nothing is stored unless you tick the consent box, and no question has to be answered for you to use the rest of the site.

If you consent, we store whichever answers you gave about how you travel: preferred transport, comfortable walking distance, tolerance for stairs, need for a lift, adapted bathroom, step-free shower, use of a cane, walker, wheelchair or scooter, travel pace and need for rest.

We also store, when you answer them: the city you leave from, how many days you have and the period you intend to travel in. For the city we store the name you typed and its coordinates, because that is what we use to work out the road route to each destination.

In this questionnaire we do not read your device location: the city is the one you typed, and the coordinates are that city's. Another page of the site ("travel without flying") does have a location button, and it only works if you tap it and your browser asks your permission — even there we use the position only to guess which city on the list you are closest to, and we store the city name, never your device's coordinates. We do not use network-address location anywhere.

What for: not offering you a trip that doesn't work for you.

This is sensitive personal data. Information about mobility and use of assistive equipment can reveal a health condition or disability, and receives reinforced protection under the LGPD. Therefore:

• we ask for specific, prominent consent before the first question;
• we ask only about functional need ("do you need to avoid stairs?"), never about diagnosis, illness, medication or treatment;
• we do not infer or record any health condition from your answers;
• you can ask for the whole profile to be deleted at any time, and we don't require a reason.

Identification

TravelRight requires no account and no password. To remember your answers from one screen to the next, we generate a random identifier stored in your browser. It contains no name, email or personal information, and is not used to identify you outside the site.

Technical data

In our database we store the interface language, the anonymous identifier and error records from the tools. Your IP address is used only in memory, at request time, to limit abuse — we do not write it to the database. Our hosting providers keep their own access logs, under their own policies.

What for: keeping the site running, understanding what people use, and detecting abuse.

3. Legal basis

Consent can be withdrawn at any time, free of charge. Withdrawing consent does not invalidate what was done before.

4. Who we share with

We never sell your data. Never.

We share only when it is necessary for the service you asked for:

• Travel providers (hotels, airlines, tour operators, cruise lines) — only when you book a trip, only what the booking requires, and only after you authorise it. An accessibility need is disclosed to a provider only when it is indispensable for the trip to work.
• Providers that run the site: Vercel, Supabase, Vercel Analytics, OpenAI, Anthropic, Travelpayouts, Unsplash. Respectively: hosting, database, usage analytics, automated text generation, travel price search and images.
• Authorities, when required by law or court order.

Some of these providers operate outside Brazil. In those cases, the international transfer is made with the safeguards required by the LGPD.

5. Partner links and commissions

Some TravelRight pages contain affiliate links. If you book through one of them, we may receive a commission from the provider — at no additional cost to you.

This does not change what we recommend. Recommendations come from your answers, not from the size of the commission.

6. How long we keep it

• Comfort profile and quiz answers: as long as you want. You can ask for deletion whenever you decide. From the start of comfort profile collection, profiles with no access for 24 meses are deleted.
• Birthday readings: 24 meses.
• Technical records: 12 meses.
• Completed booking data: for the period required by tax and tourism legislation.

7. Your rights

Under the LGPD, at any time you can:

• find out whether we process data about you, and which;
• access, correct or complete your data;
• request erasure of data processed on the basis of consent;
• request portability;
• find out who we share it with;
• withdraw consent;
• object to processing you consider unlawful.

You delete the comfort profile yourself, on the questionnaire page, using the "delete my profile" button: deletion is immediate and does not depend on us replying. For any other request, write to contact@travelright.travel; we answer within 15 days.

If you are in the European Union or the United Kingdom, the equivalent GDPR rights also apply.

If you are not satisfied with our answer, you can complain to the Brazilian data protection authority (ANPD).

8. Cookies and browser storage

TravelRight stores your chosen language and the anonymous identifier in your browser's local storage, not in cookies. This is what makes the site work, and it cannot be turned off without losing saved answers.

To understand site usage we use Vercel Analytics, which uses no cookies and builds no individual visitor profile.

You can clear local storage through your browser at any time. Doing so may lose your saved answers.

9. Use of artificial intelligence

TravelRight uses automated processing to generate recommendations and text. Details are on the AI Disclosure page.

Recommendations are suggestions, not professional advice. TravelRight does not provide medical guidance. If a condition of yours needs assessment before travelling, talk to your doctor.

10. Security

We use encrypted connections, restricted database access and the principle of collecting the minimum necessary. No system is perfectly secure — if an incident occurs that may pose a relevant risk to you, we will notify you and the ANPD, as the law requires.

11. Children and adolescents

TravelRight is not intended for people under 18, and we do not knowingly collect data from minors. If you believe a child has sent us data, write to contact@travelright.travel and we will delete it.

12. Changes

If we change this policy in a relevant way, we will say so on the site. Changes that expand the use of sensitive data will require fresh consent — they do not apply retroactively.

13. Contact

B.F.R. FORSSELL PUBLICIDADE — company number 10.682.153/0001-10

Av. Rui Barbosa, 1302, sala 09, Satélite, Itanhaém - SP, CEP 11740-000

contact@travelright.travel

Data protection officer: o contato acima