Legal

Privacy Policy

Last updated: March 11, 2026 · Effective immediately

01 Introduction

CREACTEVE EVENTOS E TURISMO LTDA ("Creacteve," "we," "us," or "our"), registered under CNPJ 06.376.112/0001-28, is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your data when you engage our event planning or tourism services, attend events we organize, visit our website, or communicate with our team.

We comply with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados — LGPD, Law No. 13,709/2018), the Brazilian Consumer Defense Code (CDC), the Tourism Law (Law No. 11,771/2008), and applicable regulations governing event management and tourism services in Brazil.

02 Data Controller

Company: CREACTEVE EVENTOS E TURISMO LTDA
CNPJ: 06.376.112/0001-28
Address: R. dos Oitis, 35, Ap. T 304, Gávea, Rio de Janeiro – RJ, 22451-050, Brasil
Contact: contact@creacteve.com.br

03 Data We Collect

We may collect the following categories of personal data depending on how you interact with us:

CategoryExamplesPurpose
Identity DataFull name, CPF/CNPJ, date of birth, passport numberContracts, registration, travel bookings
Contact DataEmail, phone, address, emergency contactsCommunication, event coordination
Financial DataPayment method, billing details, transaction recordsInvoicing, payment processing
Event DataRegistrations, attendance, dietary needs, accessibility requirementsEvent logistics, guest experience
Travel DataPassport details, flight preferences, hotel preferencesTravel bookings, tourism packages
Technical DataIP address, browser, device informationSecurity, website analytics
Media DataPhotos, videos captured at eventsEvent documentation, marketing

Event Photography & Video: Events organized by Creacteve may include professional photography and videography. By attending our events, attendees may appear in event documentation materials. We provide clear signage at events, and attendees may request to not be photographed by notifying event staff. Explicit consent is obtained for any use of individual images in promotional materials.

Sensitive Health & Dietary Data: We may collect information about dietary restrictions, allergies, or accessibility requirements solely to ensure your safety and comfort at our events. This data is classified as sensitive under the LGPD and is processed exclusively with your explicit consent and shared only with catering and venue partners on a strict need-to-know basis.

04 How We Use Data

Event Management: To plan, organize, and execute events including attendee registration, badge production, seating arrangements, catering coordination, accessibility accommodations, and on-site logistics.

Tourism & Travel: To arrange travel packages, book flights, reserve hotels, coordinate transfers, manage group itineraries, and provide travel documentation for tourism and incentive travel programs.

Contract & Client Management: To prepare proposals, execute service agreements, manage project timelines, coordinate with vendors, and process payments for event and tourism services.

Communication: To send event confirmations, schedule updates, travel itineraries, and with your consent, newsletters, upcoming event invitations, and promotional offers.

Event Documentation: To produce post-event reports, photo/video archives, and with appropriate consent, marketing materials showcasing our portfolio.

Legal Compliance: To comply with tax obligations (Nota Fiscal), tourism regulatory requirements (CADASTUR), and other applicable Brazilian laws.

05 Legal Basis

In accordance with Article 7 of the LGPD, we process your data under the following legal bases:

Contract Performance: For event planning and execution, travel bookings, attendee registration, vendor coordination, and fulfillment of service agreements.

Legal Obligation: For Nota Fiscal issuance, CADASTUR compliance, tax reporting, and regulatory requirements for tourism operators.

Consent: For marketing communications, event photography usage in promotional materials, processing of dietary/health data, and non-essential cookies.

Legitimate Interest: For event security, service improvement, portfolio documentation, basic analytics, and client relationship management, provided these do not override your fundamental rights.

06 Data Sharing

We do not sell, rent, or trade your personal information. We may share data only under these circumstances:

Event Venues & Suppliers: Venue operators, catering companies, AV providers, and event support vendors who require attendee information for event logistics. Only data necessary for service delivery is shared.

Travel Partners: Airlines, hotels, transfer companies, and tourism operators for booking and managing travel arrangements. Passport and identity data is shared as required by travel operators.

Payment Processors: Secure payment gateways for transaction processing in compliance with PCI-DSS standards.

Event Sponsors & Co-organizers: When events are co-organized or sponsored, attendee data may be shared with co-organizers only with your explicit prior consent and clear disclosure at the point of registration.

Legal Authorities: When required by law, court order, or governmental authority, including tax authorities and tourism regulatory bodies.

All vendors and partners are contractually required to maintain appropriate confidentiality and security measures. We conduct due diligence on all data-sharing partners to ensure LGPD compliance.

07 Data Retention

We retain your personal data only for as long as necessary:

Event records & contracts: 5 years from event date (tax and legal requirements). Travel booking records: 5 years (tourism and tax regulations). Attendee registration data: 2 years from event date. Event photos/videos: Indefinitely for portfolio purposes unless you request removal. Marketing consent: Until withdrawn. Health/dietary data: Deleted within 30 days after the event.

08 Your Rights Under LGPD

Under the LGPD, you have the following rights:

Confirmation & Access: Confirm whether we process your data and access a copy of it.

Correction: Request correction of incomplete, inaccurate, or outdated data.

Anonymization, Blocking, or Deletion: Request anonymization, blocking, or deletion of unnecessary or excessive data.

Data Portability: Request transfer of your data in a structured format.

Consent Withdrawal: Withdraw consent at any time, including for marketing and event photography usage.

Image Removal: Request removal of your image from event documentation and marketing materials at any time.

Objection: Object to processing based on legitimate interest.

To exercise these rights, contact us at contact@creacteve.com.br. We will respond within 15 business days.

09 Cookies & Tracking

Our website may use cookies and similar technologies:

Essential Cookies: Required for core functionality, event registration forms, and secure checkout.

Analytics Cookies: Help us understand visitor behavior and popular event pages.

Marketing Cookies: Used to deliver relevant event promotions and retarget interested visitors, activated only with consent.

You can manage cookie preferences through your browser settings at any time.

10 Data Security

We implement comprehensive security measures including SSL/TLS encryption for all website interactions, PCI-DSS compliant payment processing, secure file transfer for contracts and travel documents, role-based access controls, encrypted storage for sensitive personal data including passport and health information, regular security assessments, and employee training on data protection and client confidentiality.

Sensitive data such as passport numbers, health/dietary information, and payment details receive enhanced protection with restricted access and audit logging.

11 International Transfers

Given the nature of tourism and international event services, your data may be transferred outside of Brazil when booking international travel, coordinating with overseas venues, or using global service providers. In such cases, we ensure appropriate safeguards are in place per Chapter V of the LGPD, including standard contractual clauses, adequacy decisions by the ANPD, or your explicit consent.

12 Children's Privacy

Some events may welcome attendees of all ages, including minors. For attendees under 18, all registration data is collected from and managed by their parent or legal guardian. Photography consent for minors requires explicit parental authorization. We take special care to protect the data of minor attendees in compliance with the LGPD and the Statute of the Child and Adolescent (ECA).

13 Policy Changes

We may update this Privacy Policy periodically. Significant changes will be communicated through our website, email, or event registration communications. The "Last updated" date will always reflect the most recent revision.

14 Contact Us

For privacy questions, image removal requests, or to exercise your data rights:

CREACTEVE EVENTOS E TURISMO LTDA
R. dos Oitis, 35, Ap. T 304
Gávea, Rio de Janeiro – RJ, 22451-050, Brasil
Email: contact@creacteve.com.br
CNPJ: 06.376.112/0001-28

You also have the right to file a complaint with the Brazilian National Data Protection Authority (ANPD — Autoridade Nacional de Proteção de Dados) at www.gov.br/anpd if you believe your data protection rights have been violated.