Privacy Policy

Last updated: September 29, 2026

This Privacy Policy explains how Unah collects, uses, shares and protects the personal data of people who visit unah.eco, contact our team or take part in our retreats, in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018, LGPD).

1. Data controller

Unah Ecolodge SA, CNPJ 44.280.672/0001-73, headquartered at Ecovila Piracanga, Maraú, Bahia, Brazil, ZIP code 45520-000. Privacy contact: [email protected].

2. Data we collect

Data you provide: name, email, phone or WhatsApp number and the information you send through forms, conversations and bookings (for example, dates of interest, accommodation preferences and dietary needs).
Booking and payment data: the data needed to issue your booking and payment. Card data is processed directly by payment platforms; Unah does not store your full card number.
Browsing data: IP address, device and browser type, pages visited, traffic source and interactions with the website, collected through cookies and similar technologies.

3. How we use your data

To answer questions and assist you via WhatsApp, email or phone.
To make, confirm and manage bookings, payments and your participation in our retreats.
To send you content, news and offers from Unah, when you have agreed to it. You can unsubscribe at any time.
To measure the performance of our website and ads and improve your experience.
To comply with legal, tax and accounting obligations.

4. Legal bases

We process data based on the performance of a contract and pre-contractual steps (bookings and customer service), consent (marketing communications and non-essential cookies), legitimate interest (service improvement and website security) and compliance with legal or regulatory obligations.

5. Who we share data with

We only share data when necessary, with:

providers that help us operate: website hosting, booking systems, payment platforms, customer service, CRM and messaging tools;
analytics and advertising tools, such as Google and Meta, to measure results and show ads;
public authorities, when required by law or court order.

We do not sell personal data. Some providers may store data outside Brazil; in these cases, we require adequate data protection safeguards, as provided by the LGPD.

6. Cookies

We use essential cookies for the website to work, and analytics and advertising cookies to understand how the website is used and to measure campaigns. You can block or delete cookies in your browser settings; some website features may stop working.

7. How long we keep data

We keep data for as long as needed to fulfill the purposes of this policy, or for the period required by law (for example, tax obligations). After that, data is deleted or anonymized.

8. Your rights

Under the LGPD, you may request at any time:

confirmation that we process your data and access to it;
correction of incomplete, inaccurate or outdated data;
anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
portability of your data to another provider;
deletion of data processed based on your consent and withdrawal of that consent;
information about who we share your data with.

To exercise your rights, write to [email protected]. You may also file a complaint with the Brazilian National Data Protection Authority (ANPD).

9. Security

We adopt technical and administrative measures to protect data against unauthorized access, loss or misuse. No system is entirely free of risk, but we work continuously to reduce it.

10. Children and teenagers

Data of people under 18 is only processed with the consent and under the responsibility of their parents or legal guardians, for example in family bookings.

11. Changes to this policy

We may update this policy to reflect changes in our services or in the law. The date of the latest update is always shown at the top of this page.

12. Contact

Questions about this policy or your data: [email protected].