Search
EN

Privacy Policy

Your privacy is a fundamental cornerstone at Worth Visiting (Vale a Pena Visitar). This Privacy Policy transparently and comprehensively outlines how we collect, use, store, share, and protect your personal information when you browse our website (valeapenavisitar.com) and any integrated channels, in full compliance with applicable international data protection laws.

1. Data Controller Identification and Contact

The data controller responsible for the processing of your personal information is:

  • Editorial and Operational Lead: Marco Vasconcelos
  • Location: Montreal, Quebec, Canada
  • Publishing Project: Worth Visiting / Vale a Pena Visitar (alongside sister publication Você no Quebec)
  • Official Privacy and Contact Channel: Contact Page

Any question, inquiry, or formal request concerning your rights as a data subject can be submitted directly through our official contact page linked above.

We recognize the global nature of our readership and structure our data governance practices to align with key international regulations:

  1. LGPD (Brazil - Law No. 13,709/2018): Governs data subjects’ rights for Brazilian residents, specifying legal bases, purpose limitation, adequacy, and data security requirements.
  2. Quebec Law 25 and PIPEDA (Canada): Quebec’s Act respecting the protection of personal information in the private sector and Canadian federal privacy law governing confidentiality, transparency, and data transfers.
  3. GDPR / UK GDPR (European Union, EEA, and United Kingdom - Regulation EU 2016/679): Sets strict standards for processing personal data belonging to citizens and residents of the European Economic Area and the UK.

3. Information Collected and How We Obtain It

We collect only the minimum data strictly required to ensure technical operability, platform security, and the ongoing enhancement of your user experience:

3.1 Technical Navigation and Telemetry Data

When you browse the site, specific technical telemetry is automatically captured and recorded in aggregated and pseudonymized formats by our servers and diagnostic tools:

  • IP address (with geographic anonymization masks applied prior to persistent storage);
  • Device identifier, screen resolution, operating system, and browser version;
  • Pages viewed, time spent per guide, navigation flow, and referring URL;
  • Server response status codes and Core Web Vitals performance metrics.

3.2 Spontaneous Inquiries

When you voluntarily use our contact form or send us an email inquiry, we collect:

  • Full name;
  • Email address;
  • Subject and content of your message.

These details are never sold, rented, or added to unsolicited marketing lists (spam). They are utilized solely to review and respond to your direct inquiry.

To honor your browsing preferences, we store minimal configuration state locally within your browser (localStorage and technical cookies):

  • Your consent status regarding analytics and advertising cookies (vpv_privacy_choice);
  • Your chosen interface language (vpv_language).

3.4 Newsletter (Travel Club)

If you tick the consent box on the newsletter form, we collect:

  • Your email address;
  • Proof of your consent: the exact text you accepted, its version, language, page and date/time (UTC).

We do not record your IP address or browser data for this signup. The box is unchecked by default: without it, no signup takes place. We use your email only to send the newsletter. You can unsubscribe at any time through the link in every email; unsubscribes are processed within 10 business days. Your email stays on file while you are subscribed; proof of consent and of unsubscription is kept for up to 3 years.

We process your data pursuant to recognized legal grounds under the GDPR, LGPD, and Canadian privacy laws:

Purpose Data Category Primary Legal Basis
Site Operations & Infrastructure Security Technical telemetry, anonymized IP, error logs Legitimate Interest and Legal Obligation
Inquiry & Reader Support Name, email address, message body Consent and Pre-contractual Steps
Newsletter Delivery (Travel Club) Email address and proof of consent Express Consent (unchecked box, revocable at any time)
Audience Insights & Usability (Analytics) Google Analytics 4 and Microsoft Clarity Consent (revocable at any time)
Advertising Delivery (Google AdSense) Advertising cookies, ad personalization identifiers Consent (managed via cookie preferences)
Travel Affiliate Attribution Third-party conversion cookies (Booking.com, etc.) Legitimate Interest and Consent

| Meta Pixel (Meta Platforms) | Visits from Facebook and Instagram and articles viewed, to assess the performance of our posts. Meta processes this data under its privacy policy. | Marketing/advertising consent, required before activating the pixel |

5. Third-Party Services and Tracking Technologies

We work with industry-standard technological partners to ensure an infrastructure that is fast, resilient, and secure:

5.1 Cloudflare

We utilize Cloudflare for Content Delivery Network (CDN) services, web application firewall (WAF) filtering, DDoS attack mitigation, and DNS security. Cloudflare processes transient technical request headers solely to protect the integrity and availability of our web properties.

5.2 Google Analytics 4 (GA4)

GA4 measures aggregate audience traffic and navigation trends. IP anonymization features are permanently enabled, ensuring that complete IP addresses are never saved to disk or utilized to identify individual readers.

5.3 Microsoft Clarity

We employ Microsoft Clarity to study user experience dynamics (heatmaps, scroll depth, and pseudonymized session replays). Clarity features strict automated masking out of the box, preventing any personal details typed into form fields from ever being recorded.

5.4 Google AdSense

Google AdSense delivers contextual and programmatic advertisements on the site. Google and its ad technology partners may set cookies to display relevant advertisements based on prior visits to this or other websites. You can customize your advertising settings at any time via our footer preferences button or directly through Google Ads Settings.

5.5 Resend

Resend (Resend, Inc., USA) stores the newsletter subscriber list and sends the emails. It receives only your email address, your subscription preferences and your language. Proof of consent is stored with Cloudflare (Workers KV).

6. Affiliate Partnerships and Editorial Transparency

Worth Visiting participates in trusted travel affiliate programs, including:

  • Booking.com (via the Awin network and direct affiliate agreements);
  • DiscoverCars / Rentcars (vehicle rental comparison platforms);
  • Civitatis / GetYourGuide (tours, guided experiences, and museum tickets);
  • Wise (international currency transfer and card solutions).

How Affiliate Partnerships Work:

When you click on an external booking link and finalize a qualifying reservation or purchase, we may receive a modest referral commission. This never increases the price you pay. In many cases, our partner agreements provide competitive rates or exclusive benefits for our readers.

Travel Agency Disclaimer: Worth Visiting is an independent travel publication and is not a travel agency, tour operator, or booking agent. All bookings, payments, ticket issuances, modifications, and cancellations are contracted directly and exclusively between you and the third-party service provider.

7. International Data Transfers

Given the global nature of modern cloud networks (such as Cloudflare, Google, and Microsoft operating data centers located across the United States, Canada, and the European Union), your pseudonymized data may be processed outside of your country of residence.

We ensure that all vendor partners adhere to rigorous data protection standards, including standard contractual clauses (SCCs) approved by the European Commission, SOC 2 compliance, and ISO 27001 certifications.

8. Data Security and Retention

We maintain stringent administrative and technical safeguards to protect your personal data against unauthorized access, leakage, or unlawful destruction:

  • End-to-end encryption via HTTPS / TLS 1.3;
  • Principle of least privilege applied to all administrative access;
  • Strict retention schedules: server logs are purged regularly; contact inquiries are kept only for the duration required to resolve your query or satisfy statutory archival duties.

9. Your Data Subject Rights

Regardless of where you reside, we honor and support your fundamental privacy rights:

  1. Access and Confirmation: Inquire whether we process any personal information concerning you and receive a copy.
  2. Correction: Request the rectification of incomplete, outdated, or inaccurate personal information.
  3. Erasure or Anonymization: Request the deletion or pseudonymization of personal data processed in violation of law or no longer required.
  4. Consent Revocation: Change your mind at any moment regarding analytics and advertising cookies by clicking the “Cookie Preferences” button located in the footer.
  5. Data Portability: Request an export of data you voluntarily submitted in a structured, commonly used machine-readable format.
  6. Regulatory Complaints: If you believe your privacy concerns have not been addressed adequately, you retain the right to lodge a complaint with your competent supervisory authority (such as the OPC in Canada, the CAI in Quebec, the ANPD in Brazil, or your local European Data Protection Authority).

To exercise any of these rights, simply contact us via our Contact Page.

10. Policy Updates

We may revise this Privacy Policy periodically to reflect technological updates, vendor adjustments, or legislative changes. The latest revision date is prominently displayed below.

We encourage readers to review this page periodically to remain informed on how we protect your personal information.

Last updated: October 27, 2026.