Privacy policy
This policy explains what personal data Kidslandy collects, why, and what you can do about it. It covers the site at kidslandy.com and the program area.
1. Controller
The data controller is Samuel Felipe Alexandre Rosa, CPF 553.556.048-03, Av. Angelo Missonelli, 736, Jd. Igar, Araraquara - SP, CEP 14806-765, Brasil. For any privacy question, write to support@kidslandy.com or call +55 16 99737-9711.
2. What we collect
When you buy: your email address, the plan purchased, the amount, the currency, the country used for tax purposes, and a payment identifier from Stripe. We do not receive your full card number.
When you use the site: aggregated analytics about pages viewed, only if you accept analytics cookies. Without your consent we collect no analytics.
When you write to us: the content of your message and your email address, so we can answer.
We do not ask for and do not want any data about your children. Please do not send us photographs, names, ages or health information about a child.
3. Why we use it and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Deliver the program you paid for | Email, plan, payment identifier | Performance of a contract |
| Issue receipts and meet tax obligations | Transaction records | Legal obligation |
| Answer support messages | Email, message | Performance of a contract, legitimate interest |
| Understand how the site is used | Aggregated analytics | Consent |
| Prevent fraud and abuse of access links | Access events | Legitimate interest |
4. Who processes data for us
- Stripe (payments, Ireland and United States) - processes the transaction and holds card data under its own controller responsibility.
- Vercel (hosting and serverless functions, United States and EU regions) - serves the site.
- Resend (transactional email, United States) - delivers your access email.
Transfers outside the European Economic Area rely on the European Commission's standard contractual clauses or on an adequacy decision.
5. How long we keep it
Purchase and invoicing records are kept for the period required by tax law, which is normally between five and ten years depending on the country.
Support messages are kept for up to two years. Analytics data is aggregated and kept for up to fourteen months.
6. Your rights
You may request access to your data, correction, erasure, restriction, portability, and you may object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting what was done before.
Write to support@kidslandy.com and we will answer within thirty days.
The seller is established in Brazil, where the applicable law is the LGPD and the supervisory authority is the ANPD. If you are in the European Union the GDPR also applies to these sales, and you may complain to your national data protection authority.
7. Security
The site is served over HTTPS. Access links are signed cryptographically and cannot be guessed or altered. We do not store card data at any point.
8. Children
The program is sold to adults. The site is not directed at children and we do not knowingly collect data from anyone under 16.