Privacy Policy

1. Data Controller

This Privacy Policy describes data processing practices associated with the SAILAWAY website, https://sailaway.com.br, and its contact channels. The designated privacy contact is [email protected].

2. Information Processed

The form requests your name, email, country/calling code, WhatsApp number, and topic of interest. These details are used locally in the browser to validate input and prepare a contact message. The website does not maintain an internal database for receiving or registering these leads; transmission occurs via WhatsApp as described below.

When you visit the website, technical information necessary for network connection, such as IP addresses and HTTP request metadata, may be processed by hosting infrastructure.

When analytical tracking is enabled and user consent is granted, Google Analytics may process cookie identifiers, technical device/browser specifications, and navigational events. We do not characterize this processing as entirely anonymous.

3. Form and Contact via WhatsApp

The form submission button generates a WhatsApp URL containing the pre-filled message text, including the provided data, and requests opening the external application. An alternative direct link to the conversation may also be displayed.

Upon opening this link, message content may be received by WhatsApp servers prior to final sending confirmation. The website does not automate final message dispatch; visitors review and send it manually. Once sent, information is managed within WhatsApp customer communication environments.

Our internal analytics integration does not include names, emails, phone numbers, message bodies, or full WhatsApp URLs in recorded events. Activation requires that automatic tracking of outbound links, forms, and user-provided data collection remains disabled in Google configurations.

4. Purposes and Legal Bases

Handling inquiries initiated by visitors may involve preliminary procedures related to service agreements upon request. Legal obligations and regular exercise of rights may also justify specific data processing when applicable. We do not presume a single legal basis for all inquiries; specific processing operations must be confirmed by the controller.

Optional analytics measurement depends on explicit consent. Declining consent does not restrict website navigation or form usage. User preferences are stored solely to respect visitor choices, never for behavioral advertising.

5. Cookies, Storage, and Google Analytics 4

The Google Analytics 4 integration, identified by measurement ID G-VBTRE7YMR2, is prepared but remains inactive by default. It never loads scripts in local development or preview environments. When authorized, execution is strictly restricted to the official production domain and requires explicit analytics consent.

Your preference is preserved in browser localStorage under the key sailaway-consentimento-analytics-v1, containing solely the selected choice and timestamp expiration, valid for up to 180 days. This storage is not a cookie. Without localStorage access, choices remain valid only for the active browsing session.

Upon consent, if integration is active, first-party analytics cookies use the prefix sailaway_ga (e.g., sailaway_ga and sailaway_ga_VBTRE7YMR2). Configuration restricts lifespan to 180 days without automatic activity extension. No cookies are set prior to explicit acceptance.

The implementation generates a single homepage view event per document, stripped of query parameters, fragments, or referrer addresses. The Google library may record standard technical engagement metrics post-consent. Personalized advertising features are disabled.

No mandatory proprietary cookies are utilized by the application. Hosting infrastructure may apply technical security cookies according to server settings; no arbitrary names or lifespans are assigned.

6. Accepting, Declining, and Revoking

Within the consent banner, you may accept analytics, decline, or review preferences and this policy. Once a choice is made, the Privacy Preferences dialog allows you to change or revoke authorization at any time from the homepage.

Upon revocation, the integration activates tracking blockers and removes its cookies identified by the configured prefix. Preferences synchronize across tabs in the same browser. Revocation does not retroactively affect prior processing; requests regarding earlier data can be sent to the privacy email.

You may also clear browser storage or block cookies through your browser settings. Clearing storage will display the consent prompt again when analytics integration is active.

7. Service Providers and International Transfers

Website hosting is provided by Cloudflare Pages. Google participates in statistical analysis only when enabled and consented. WhatsApp and email providers are involved when you communicate through those channels; Instagram links also direct to third-party services.

These providers may process data in different jurisdictions according to their global operations and privacy policies. SAILAWAY confirms appropriate safeguards for international data transfers in accordance with applicable data protection laws.

Any additional data sharing depends on purpose, necessity, and valid legal grounds.

8. Data Retention and Deletion

User-level and event-level data retention in SAILAWAY Google Analytics property is configured for 14 months. This does not represent a universal retention timeline for aggregated reporting or external service records.

The 14-month setting is distinct from the 180-day browser preference and cookie expiration. These represent separate controls.

Customer service messages, emails, and operational records maintained by the controller are retained in accordance with their purpose, necessity, and legal compliance requirements.

9. Data Subject Rights and Privacy Contact

Under applicable data protection legislation (such as LGPD/GDPR where relevant), you have the right to request confirmation of processing, access, rectification, anonymization, blocking or deletion, portability where applicable, and revocation of consent. You also maintain the right to object to processing and petition supervisory authorities.

To exercise your rights, contact [email protected], specifying your request and context. Identity verification may be required in a proportionate manner to prevent unauthorized disclosure. Requests are handled within statutory deadlines without unnecessary requirements.

10. Security and Policy Revisions

The website implements form validation and technical controls to limit analytical data collection. No digital environment is entirely free of risk. Avoid sending passwords, payment details, or sensitive personal documents through contact forms.

This policy will be updated whenever material changes occur in data handling practices, with clear revision versioning.