Privacy policy

The controller of data processed through this site is the legal entity responsible for operating the HY4U brand towards clients and partners (“HY4U”). To exercise rights, ask questions or lodge complaints about personal data, use contato@hy4u.com.br or the channel available on Contact. Where indicated, the data protection officer (DPO) or equivalent channel may be reached at the same address with subject “LGPD / Personal data”.

Depending on your interaction, we may process, among others: name, email, phone, city of interest, messages sent via forms, browsing data (IP address, device type, pages visited, timestamps), cookie or similar identifiers, and data needed for the booking flow when you are sent to the booking engine (processing in that environment follows the partner’s own privacy notice).

We do not request sensitive data through this site. If you voluntarily include such information in a free-text field, we recommend avoiding it; HY4U may anonymise or discard unnecessary excerpts when identified.

Support and communication: legal bases of preliminary procedures or contract and, where applicable, legitimate interest.

Site operation and security (logs, fraud prevention, performance improvement): legitimate interest and/or compliance with a legal obligation.

Marketing and relationship, where allowed: consent or legitimate interest, with opt-out where applicable.

Bookings and lodging when you use links to the booking engine: bases set out in the lodging contract and the partner’s policy.

Compliance with legal obligations and responses to authorities: compliance with a legal obligation.

We use cookies and local storage for essential features (e.g. remembering consent preferences) and, if you accept the banner, for metrics or experience improvements when implemented. You can manage cookies in your browser; disabling essential cookies may affect parts of the site.

We may share data with: website and email hosting providers; analytics tools (if and when activated with consent); the booking engine operator and payment methods to complete bookings; authorities when required by law. We do not sell personal data lists. Any international transfer will follow mechanisms provided in the LGPD and contracts with suppliers.

We adopt reasonable technical and administrative measures to protect data against unauthorised access, loss or improper alteration. We keep data for as long as necessary for the purposes described or to comply with legal deadlines, dispute resolution and regular exercise of rights; afterwards, data may be anonymised or deleted.

Under the law, you may request: confirmation of processing; access; correction of incomplete, inaccurate or outdated data; anonymisation, blocking or deletion of unnecessary or unlawfully processed data; portability, where applicable; information on sharing; information on the possibility of not giving consent and consequences; withdrawal of consent when consent is the sole basis; objection to processing based on legitimate interest, subject to legal limits.

Requests will be reviewed within legal deadlines; we may ask for additional information to verify your identity. If in doubt, you may contact Brazil’s National Data Protection Authority (ANPD).

The site is not directed at under-18s for intentional data collection. If we learn of improper registration or submission by a minor without parental consent where required, we will take steps to delete or anonymise the data.

Search and ranking tools on the site may use automated criteria (e.g. date and region filters). We do not, through this site, make solely automated decisions that produce legal or similarly significant effects without human review, except where provided by law or in a booking flow with adequate transparency.

We may update this Policy to reflect legal, product or organisational changes. The date at the top will be adjusted; for relevant changes, we may publish an additional notice on the site or by email, where appropriate.

Main channel: contato@hy4u.com.br. For booking matters you may also use, when available, the channel indicated in the booking engine.