Privacy Policy
Zendaya Resort, in its capacity as the Data Controller, presents this Policy in accordance with Law No. 13.709/2018 (“LGPD” – General Data Protection Law). This document aims to clarify how Zendaya Resort collects, uses, stores, and, when necessary, shares personal data within the context of its business activities.
We place our clients, users, partners, and employees at the core of our decisions, as we understand that they form the foundation of all our business relationships. To maintain this standard of quality and ensure a satisfactory experience, it is necessary, under certain circumstances, to process personal data. Such information is used to enable the delivery of our products, services, and solutions at the quality level to which we are committed.
We collect personal data such as full name, email address, CPF number (Brazilian individual taxpayer registry), telephone number, payment details, reservation information, and accommodation preferences. This data is processed for the following purposes: (i) to enable reservations and the check-in process; (ii) to comply with legal and regulatory obligations applicable to the hospitality sector; (iii) to provide personalized service and targeted offers and promotions; and (iv) to ensure physical and digital security within the premises of Zendaya Resort.
The processing of personal data is based on the legal grounds provided by the General Data Protection Law, including, but not limited to: the performance of a contract, compliance with legal or regulatory obligations, the legitimate interests of the controller, the data subject’s consent, and the protection of life or physical safety.
Data subjects may exercise, at any time, the rights provided for in Article 18 of the LGPD, such as: access, rectification, portability, anonymization, blocking, deletion, revocation of consent, and objection to processing, by submitting a request to the Data Protection Officer (DPO) through the available communication channels.
Personal data may be shared with third parties strictly necessary for the operation of the services, such as booking platforms, payment processors, technology support providers, and public authorities, always in accordance with the principles of necessity, purpose, and security established by the applicable legislation.
CNPJ: 32.092.284/0001-80
Meta Pixel
The Meta Pixel is a tracking tool that allows us to monitor the behavior of visitors on our website after they have been redirected here by clicking on a Meta (Facebook or Instagram) advertisement. This helps us measure the effectiveness of our ads for statistical and market research purposes and to optimize future advertising campaigns.
We also use the pixel for “Retargeting” and “Custom Audiences.” This allows us to show you personalized advertisements on Meta platforms based on your previous interactions with our website.
The data collected includes your IP address, browser information, device type, and “Event Data” (such as which pages you visited or if you completed a purchase). This data is anonymous to us as the website operator; however, Meta stores and processes this data and may link it to your Facebook or Instagram profile for its own advertising purposes.
EEA/UK (GDPR): The legal basis for using this service is your explicit Consent (Art. 6 (1)(a) GDPR). The pixel is only activated after you provide consent through our cookie banner.
Global: We process this data to improve our services and marketing reach.
Data collected may be transferred to and stored on Meta’s servers in the United States. Meta is certified under the EU-U.S. Data Privacy Framework.
You can withdraw your consent at any time via our Cookie Settings. You can also adjust your ad preferences directly in your Meta Ad Settings or via the Digital Advertising Alliance.
TikTok Pixel
The TikTok Pixel is a snippet of code that allows us to track user behavior on our website after they have been redirected here by clicking on a TikTok advertisement. This data helps us measure the conversion rate of our ads, optimize our marketing campaigns, and create custom audiences for retargeting (showing our ads to people who have previously visited our site).
The pixel collects information such as your IP address, device type, operating system, browser information, and specific actions taken on our site (e.g., “Page View,” “Add to Cart,” or “Purchase”).
EEA/UK (GDPR): The processing of this data is based on your explicit Consent (Art. 6 (1)(a) GDPR). The pixel will only be activated if you provide consent via our cookie banner
Global/USA: We use this data for legitimate business purposes to improve our advertising. Users can opt-out of such tracking at any time.
TikTok may link the data collected with your TikTok user account and use it for its own advertising purposes. Data may be transferred to and processed on servers in the United States or other countries outside your region.
You can withdraw your consent at any time via our website’s Cookie Settings. Additionally, you can manage your advertising preferences within your TikTok account settings or via the TikTok Privacy Policy.
Google Tag Manager
Google Tag Manager is a tool that allows us to manage and deploy website tags (scripts) via a single interface. The Tag Manager itself does not set cookies or collect personal data. It merely triggers other components (such as Google Analytics, Meta Pixel, or TikTok Pixel), which may collect data.
To ensure the stability and functionality of the service, Google Tag Manager collects the user’s IP address. This is technically necessary to establish a connection and deliver the scripts to your browser.
Global: We use this service to provide a faster and more secure website experience.
Information may be transmitted to and stored on Google servers in the United States. Google complies with the EU-U.S. Data Privacy Framework. You can find further information in Google’s Privacy Policy.
Google Ads (Conversion Tracking & Remarketing)
We use Google Ads to promote our website and services. We specifically use two main features:
Conversion Tracking: When you click on an ad placed by Google, a conversion tracking cookie is set. This allows us to see how many users performed a specific action (e.g., made a purchase or signed up for a newsletter) after clicking an ad.
Remarketing: This allows us to display personalized advertisements to you on other websites within the Google Display Network based on your previous interactions with our website.
Google collects information such as your IP address, browser information, and details about your interaction with our ads and website. This data is processed by Google to provide us with anonymous statistics.
EEA/UK (GDPR): The use of Google Ads cookies and tracking is based on your explicit Consent (Art. 6 (1)(a) GDPR). The tracking is only activated if you accept marketing cookies in our consent banner.
USA/Global: We use this data for legitimate marketing purposes. You have the right to opt-out of personalized advertising at any time.
Data may be transmitted to and stored on Google servers in the United States. Google is certified under the EU-U.S. Data Privacy Framework.
You can prevent tracking and personalized ads by: Adjusting your Cookie Settings on our website, Downloading and installing the Google Analytics Opt-out Browser Add-on or managing your preferences in your Google Ad Settings.
The Hotels Network
Personalising your booking experience
2. Data Collected:
The Hotels Network shall not carry out any transfer of personal data outside the European Economic Area (EEA). In the event that such a transfer was to occur, The Hotels Network would only do so in compliance with applicable data protection legislation. Regardless of the place where your personal data are collected or processed, The Hotels Network ensures and guarantees that the service providers maintain suitable levels of administrative, technical and physical security in order to protect your information.
You can prevent tracking by: Adjusting your Cookie Settings on the website.
Last Update: This document was last updated on April 21, 2026.