Privacy Policy

01 — Introduction

Who We Are and Why This Policy Matters

Bahia House — Negócios, Administradora & Consultoria Imobiliária Ltda ("Bahia House", "we", "our", or "us") is a real-estate advisory and property-management company registered in Brazil, operating this website at bahiahouseimoveis.site. We are committed to handling personal data responsibly and transparently, in compliance with Brazil's Lei Geral de Proteção de Dados (LGPD — Law 13,709/2018) and, where applicable, the European Union's General Data Protection Regulation (GDPR — Regulation 2016/679) and other international privacy standards.

This Privacy Policy explains what personal information we collect through our website, why we collect it, how we use and protect it, with whom we may share it, and the rights you hold as a data subject. Reading this document will give you a clear picture of our data practices so that you can make informed choices about your interaction with us.

By visiting bahiahouseimoveis.site you acknowledge that you have read and understood this policy. If you do not agree with any part of it, please discontinue use of the website. This policy applies to all users regardless of where they are located.

02 — Information We Collect

What Personal Information We Process

We collect different categories of personal data depending on how you interact with our website. We apply the principle of data minimisation — we collect only what is genuinely necessary for each identified purpose.

Information You Provide Directly

When you reach out to us via email or any contact channel listed on the website (phone, WhatsApp, or direct email), you may voluntarily share:

• Your full name and, if applicable, the name of your company or organisation.
• Email address and phone number you use to contact us.
• A description of your real-estate enquiry, budget range, or preferred locations, along with any other information you choose to include in your message.
• Correspondence history between you and our team (emails, chat transcripts, call notes).

Information Collected Automatically

When you browse bahiahouseimoveis.site, our web servers and third-party analytics tools automatically log certain technical and behavioural data:

• IP address (which may indicate approximate geographic location at the city or region level).
• Browser type, version, and language preference.
• Operating system and device type (desktop, tablet, mobile).
• Referring URL (the page you visited before arriving at our site).
• Pages viewed, time spent on each page, clicks, and scroll depth.
• Date and time of each request to our servers.
• Cookie identifiers and similar tracking technologies (see Section 4).

Information From Third-Party Sources

We may receive limited information about you indirectly through advertising platforms such as Google Ads — for example, aggregated audience segments or conversion signals indicating that you clicked on one of our ads before visiting the site. This data is used solely at the aggregate or pseudonymous level for campaign optimisation and is not linked to your name or contact details unless you independently reach out to us.

03 — How We Use Your Information

Purposes and Legal Bases for Processing

Every processing activity we carry out has a specific, documented purpose and is grounded in a valid legal basis under the LGPD (Art. 7) and the GDPR (Art. 6). The table below summarises the main scenarios:

Responding to Your Enquiries

When you contact us with a question about our services, a property-related request, or a partnership enquiry, we use the contact details and message content you provide to prepare and send a response. This processing is necessary for the performance of a pre-contractual measure taken at your request and based on our legitimate interest in managing our business relationships responsibly.

Operating and Improving the Website

Technical log data and analytics data help us maintain site reliability, diagnose errors, and understand which content is most useful to visitors. We use this information to improve page performance, adapt our content strategy, and prioritise where to invest in site development. The legal basis is our legitimate interest in running an efficient, high-quality online presence.

Marketing and Advertising

If we run advertising campaigns (e.g., Google Ads), we use aggregated and anonymised data to measure campaign effectiveness and retarget users who have previously visited the site — only where appropriate consent has been obtained or where we can rely on legitimate interests consistent with visitor expectations in a professional real-estate context. You can opt out at any time via your browser settings or Google's Ad Settings at adssettings.google.com.

Legal and Compliance Obligations

We may process or retain personal data where required to comply with a legal obligation — for example, responding to a request from a Brazilian supervisory authority or court order. The legal basis in these cases is compliance with a legal obligation.

What We Will Never Do

• Sell your personal data to any third party, ever.
• Use your data for purposes incompatible with those disclosed here without first seeking your consent or updating this policy.
• Send you unsolicited commercial email unless you have specifically asked to receive communications from us.

04 — Cookies & Tracking Technologies

How We Use Cookies and Similar Technologies

Our website uses cookies — small text files stored in your browser — and similar tracking technologies (web beacons, pixel tags) to distinguish you from other visitors, remember your preferences, measure site traffic, and support our advertising efforts. The following table describes the categories of cookies we deploy:

Managing Your Cookie Preferences

You can control which cookies are stored on your device through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified before a cookie is set. Please be aware that disabling analytics or marketing cookies will not affect your ability to browse the site, but it may reduce the relevance of any advertising you see from us on third-party platforms.

To opt out of Google Analytics across all sites, you can install the official Google Analytics Opt-Out Browser Add-on available at tools.google.com/dlpage/gaoptout. To manage Google Ads personalisation, visit adssettings.google.com.

For browsers on mobile devices, please refer to the privacy or settings menu within your specific browser or operating system. Note that opting out of interest-based advertising does not remove advertising from your experience — it simply makes ads less tailored to your profile.

05 — Third-Party Sharing

When and With Whom We Share Your Information

Bahia House does not sell, rent, or trade personal data. We share data only in the limited circumstances described below, and only to the extent strictly necessary.

Service Providers (Data Processors)

We engage trusted technology vendors who process data on our behalf under binding data-processing agreements that require them to handle data securely and only as instructed:

• Google LLC — website analytics (Google Analytics 4) and advertising measurement (Google Ads). Data is processed under Google's standard controller-to-processor terms and, where relevant, Google's EU Standard Contractual Clauses.
• Web hosting provider — our infrastructure provider stores server logs containing IP addresses and request metadata for security and uptime monitoring purposes.
• Email platform — inbound and outbound email communications are routed through an email service provider that processes message content solely to deliver messages.

Legal and Regulatory Authorities

We may disclose personal data to government bodies, courts, regulators, or law-enforcement agencies when we are legally required to do so under Brazilian law, or where we have a good-faith belief that disclosure is necessary to protect our legal rights, prevent fraud, or respond to an emergency involving risk to life.

Business Transfers

In the event that Bahia House undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held by us may be transferred to the acquiring entity. We will provide advance notice of any such transfer and ensure that the receiving party is bound by privacy commitments equivalent to those in this policy.

International Transfers

Some of our service providers — including Google — are headquartered outside Brazil and may transfer data internationally. Where data is transferred outside Brazilian territory, we ensure that appropriate safeguards are in place as required by LGPD Art. 33, including adequacy decisions, standard contractual clauses, or other legally recognised mechanisms.

06 — Data Retention

How Long We Keep Your Information

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following guidelines apply:

• Enquiry correspondence: Email and message threads are retained for up to three (3) years from the date of last contact, so that we can maintain continuity of service for prospective clients and manage any resulting contractual relationships.
• Server logs and IP data: Automatically collected log files are retained for a maximum of twelve (12) months, after which they are deleted or anonymised.
• Analytics data: Google Analytics data is retained in pseudonymous form for up to twenty-six (26) months, which is the default retention window we have configured in our Analytics account, consistent with Google's data policies.
• Marketing and advertising data: Conversion and audience data associated with Google Ads cookies is retained for up to ninety (90) days, aligned with the cookie lifetime described in Section 4.
• Legal or regulatory holds: Where we are required by Brazilian law (e.g., consumer protection legislation or real-estate regulations) to retain records for a specified period, we will comply with those requirements even if they exceed the timeframes above.

When personal data is no longer needed and no legal retention obligation applies, we delete it securely or render it irreversibly anonymous so that it can no longer be associated with any individual.

07 — Data Security

How We Protect Your Information

Bahia House implements technical and organisational measures appropriate to the sensitivity of the data we hold and the risks posed by its processing. These measures include:

• TLS encryption in transit: All data transmitted between your browser and our web server is encrypted using Transport Layer Security (TLS 1.2 or higher), indicated by the HTTPS padlock in your browser's address bar.
• Access controls: Access to systems containing personal data is restricted to authorised personnel only, based on the principle of least privilege. Credentials are managed with strong passwords and, where supported, multi-factor authentication.
• Vendor security reviews: We only engage service providers that can demonstrate adequate security practices and that agree contractually to protect any data shared with them.
• Incident response: In the unlikely event of a personal data breach, we have procedures in place to contain the incident, assess its impact, and notify affected individuals and the Brazilian national data-protection authority (ANPD) within the timeframes required by the LGPD.

08 — Your Rights

Your Rights as a Data Subject

Under the LGPD (Arts. 17–22) and, where applicable, the GDPR (Arts. 15–22), you have a number of rights with respect to the personal data we hold about you. We take these rights seriously and will respond to all verified requests without undue delay — and in any case within fifteen (15) business days as required under Brazilian law (LGPD Art. 18, §3).

How to Exercise Your Rights

To submit a data-subject request, please send an email to contato@bahiahouseimoveis.site with the subject line "Data Subject Request" and include: (a) your full name; (b) a brief description of the right you wish to exercise; and (c) sufficient information to allow us to verify your identity. We may ask for additional verification steps to protect your data from unauthorised requests. We will acknowledge receipt within five (5) business days and fulfil the request within the statutory timeframe.

Please note that certain rights are not absolute. In some cases, we may be unable to delete data that we are legally required to retain, or that is necessary for the establishment, exercise, or defence of legal claims. Where we decline or partially fulfil a request, we will explain our reasoning clearly and in writing.

09 — Children's Privacy

Our Website Is Not Directed at Minors

This website is directed exclusively at adults who are at least eighteen (18) years of age. Bahia House does not knowingly collect, process, or store personal data from children or adolescents as defined under Brazilian law (individuals under 18 years old) or from children under 13 years as defined in other jurisdictions.

Our real-estate advisory and management services are commercial in nature and designed for adult property buyers, sellers, investors, and business clients. We do not market to, or create content intended to appeal to, anyone who has not reached legal adulthood.

If you are a parent or legal guardian and believe that a minor has inadvertently provided us with personal data, please contact us at contato@bahiahouseimoveis.site immediately. We will promptly investigate and, where confirmed, delete any such data from our records without delay. Where the processing of minors' data might be required in exceptional circumstances (for example, where a guardian is acting on behalf of a minor in a property transaction), we will apply the additional protective measures prescribed under LGPD Art. 14.

10 — Policy Changes

How We Will Notify You of Updates

We review this Privacy Policy periodically and whenever there is a material change in our data-processing activities, applicable law, or the services we offer. Changes may be prompted by new product features, regulatory updates (such as guidance from the ANPD), or changes to the third-party tools we use.

When we make a material change, we will update the "Last updated" date at the top of this page and, where appropriate, post a notice on the website homepage or send you a direct communication if you have an established correspondence relationship with us. We encourage you to revisit this page periodically to stay informed about how we protect your data.

Continued use of bahiahouseimoveis.site after the effective date of a revised policy constitutes your acknowledgement of the changes. If you disagree with a material update, you are entitled to exercise your rights as described in Section 8, including requesting deletion of data collected on the basis of consent.

11 — Contact

Reach Our Data Protection Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please do not hesitate to get in touch. We take every enquiry seriously and are committed to responding promptly and transparently.

We aim to resolve all privacy-related concerns internally first. Most issues can be addressed quickly and informally. We value the trust you place in us when you visit our site or engage with our team, and we are committed to earning and maintaining that trust through responsible, transparent data stewardship.