Privacy Policy

Privacy Policy

1. Controller

Hong Dynasty Protection, operated by Douglas Maia, is the controller of personal data processed through this website.

Controller contact and channel for the Data Protection Officer under art. 41 of Brazilian Law 13.709/2018: info@hongdynasty.com.

2. Data processed, and when

Processing occurs solely when the data subject completes the contact form. Browsing alone generates no collection: this site uses no cookies and no third-party tracking technologies.

On submission of the form, the following are processed:

• Identification and contact data: name, email address and telephone number.
• Location data: city, state and country.
• Data relating to the enquiry: property type, presence of other animals, prior experience with dogs and intended timeline.
• Content supplied by the data subject: free-text message and how they found us.
• For rental enquiries: intended period and contract duration.
• For corporate enquiries: company name and tax identification of the interested legal entity.
• Consent record: date and time, the full text accepted, the version of this policy, IP address and browser identifier.

The page from which the enquiry originated is also recorded.

3. Purpose

Data are processed to assess the suitability of the enquiry and to conduct the resulting engagement.

They are not used for advertising. There is no automated decision-making and no profiling. There is no sale, assignment or sharing with third parties for commercial or marketing purposes.

4. Legal basis

Consent of the data subject, under art. 7, I of Law 13.709/2018. The form requires express affirmation and records the full text presented at the moment of collection.

Consent may be withdrawn at any time by request to the address in item 1. Withdrawal does not invalidate processing lawfully carried out beforehand.

5. Retention

• Enquiries not converted into a contract: 24 months from the last contact between the parties.
• Enquiries converted into a contract: for the term of the contract and for 5 years thereafter, the limitation period applicable to consumer claims.
• Backups: overwritten within 90 days.

Once these periods elapse, records are deleted.

6. Processors

Processing relies on cloud hosting and electronic messaging service providers, engaged under contractual obligations of confidentiality and of processing restricted to the purposes in item 3.

There is no sharing with third parties beyond the processors necessary to deliver the service.

7. Rights of the data subject

Under art. 18 of Law 13.709/2018, the following are assured: confirmation that processing exists; access to the data; correction of incomplete, inaccurate or outdated data; anonymisation, blocking or deletion; portability; information on sharing; and withdrawal of consent.

Any of these rights may be exercised through the address in item 1, with a response within 15 days.

Deletion, where requested, is definitive: the record is erased, not flagged as erased.

8. Security

Technical and administrative protection measures are in place, including authenticated access control to administrative areas and encryption of traffic. Data supplied through the form are not written to application logs.

9. Term and amendments

Each version of this policy carries its own identifier, and it is the version in force at the time of collection that is bound to the data subject's consent. Subsequent amendments do not apply retroactively to consent already given.