Data controller: SOUTH COAST BRASIL LTDA (trading as RUMBO LIBRE) · CADASTUR 66.894.484/0001-78 · Brazil.
Last updated: 5 November 2026.
This section explains how RUMBO LIBRE handles the personal data of people who visit our website (rumbolibre.com.br and scbtravel.com), use its forms, or interact with its cookies and the Google services described below. RUMBO LIBRE is a Receptive Tour Operator & DMC based in Brazil that serves travel agencies and tour operators exclusively (B2B). How passenger data is handled is explained in the “Passengers and booking data” section of this same policy.
SOUTH COAST BRASIL LTDA (trading as RUMBO LIBRE), based in Florianópolis, SC, Brazil, identified at the top of this policy. Contact channel for data subjects (privacy): ola@rumbolibre.com.br.
Technical visit data. When a page loads we receive your IP address, browser and device type, language and the page requested. We use the IP address transiently to deliver the site, limit repeated form submissions and check reCAPTCHA (section 6).
Data you type into a form. Depending on the form: name, e-mail, phone, agency or company, country, professional registration number (Cadastur) on the agency access request, travel dates and number of passengers, destination or product of interest, event type and budget (groups), the message you write, the page language and the address of the page you wrote from. Please do not include passport or ID details or payment details in the forms.
Advertising source. If you arrive from an advertisement, we keep the campaign parameters in the address (for example ad click identifiers and campaign tags) for the duration of your session and attach them to your enquiry so we know which campaign led to it.
Preferences on your device. Language, destination, dates and number of travellers of your searches, favourites and saved searches and, if you send a product enquiry, your name, e-mail, passengers and message so you do not have to retype them (kept only in your browser; the “Clear form” button deletes them).
Agency and operator users of the Portal. For registered travel agencies and tour operators we process the account, sign-in and Portal usage data needed to provide the service and keep it secure.
Measurement and advertising with Google, if you accept (sections 4 and 5).
Purposes: answering your enquiries and preparing quotes; assessing agency access requests; protecting the site against spam and abuse; measuring and improving the site; measuring and optimising our advertising campaigns and showing you our advertising (only with your consent); complying with legal obligations and defending rights.
| Purpose | Basis (LGPD art. 7 · GDPR art. 6) |
|---|---|
| Answering enquiries, preparing quotes, processing agency requests | Preliminary procedures related to a contract at the data subject's request (art. 7 V · 6(1)(b)); and, in the B2B context, legitimate interest (IX · 6(1)(f)) |
| Providing the Portal service to registered agencies and operators and keeping it secure | Performance of a contract or pre-contractual steps (V · 6(1)(b)); legitimate interest (IX · 6(1)(f)) |
| Security, anti-spam, submission limits, reCAPTCHA | Legitimate interest (IX · 6(1)(f)) |
| Google analytics and advertising cookies and tags | Consent (I · 6(1)(a)), which you may withdraw at any time |
| Necessary cookies (language, form security, session) | Strictly necessary to provide the service you request / legitimate interest |
| Legal obligations and defence of rights | Compliance with a legal obligation and regular exercise of rights (II, VI · 6(1)(c)) |
We use cookies (small files stored in your browser) and the browser's local storage. We describe each type by its purpose, without listing technical names, for security reasons. Depending on their purpose, they last from the browsing session up to a maximum of two years.
| Type | Provider | Purpose | Necessary |
|---|---|---|---|
| Necessary cookies of the site | RUMBO LIBRE | Remember the language, protect forms against forged submissions, show confirmations and keep registered agencies signed in (only if you sign in) | Yes |
| Security against automated programs | Google (reCAPTCHA) | Tell people from automated programs when you use a form | Yes (classified as necessary by Google) |
| Analytics cookies | Google (Analytics) | Tell visitors apart and measure site use | No — only with your consent |
| Advertising and conversion-measurement cookies | Google (Ads) and advertising partners | Measure conversions and show advertising and remarketing on other sites | No — only with your consent. See Google’s list |
Local storage (not cookies; not sent to our server unless you submit a form): it keeps your banner choice, your searches, favourites and saved searches, the details of your last enquiry (until “Clear form”) and, during the session, the campaign parameters. If you are a signed-in agency, the Portal also stores screen preferences and your quote basket.
Maps. On pages with a map, your browser requests the map images directly from our map provider, Esri, which receives your IP address and the area viewed.
How to control cookies. You can block or delete them in your browser settings; some site features may stop working. Cookies from Google services that were already accepted must also be deleted.
What we use. Google Analytics 4 and Google Ads, through a single Google tag, on both the public site and the agency portal.
What for. Counting visits and page views; learning which products and destinations are viewed and which terms are searched; recording clicks on WhatsApp or phone and form submissions (as “conversions”, with an indicative value); measuring and optimising our Google Ads campaigns; and, if you have accepted, remarketing, where enabled in our Google Ads account: showing RUMBO LIBRE ads on other sites in Google's network after you visit ours. The code of our site does not send the content of your forms (name, e-mail, phone or message) to Google.
Third parties and cookies. Third-party vendors, including Google, show our ads on other websites; they use cookies and identifiers to show ads based on past visits to our site. We combine Google Analytics' first-party identifier with Google's advertising cookies for these functions.
What happens when you arrive. When a page loads, the Google tag loads with all storage permissions set to “denied” (analytics, advertising, user data for advertising and ad personalisation). In that state no Google analytics or advertising cookies are set on your device, but the tag may send Google cookieless measurement signals: IP address, page address and title, language, screen resolution and browser and device data, together with an indication that consent has not been given. Google uses them to estimate conversions. Ad click identifiers are passed in the page address instead of in cookies and are redacted in Google Ads calls.
Your choice. The banner offers two buttons. “Accept” allows Google to store analytics and advertising cookies and to use your data for measurement and ad personalisation. “Reject” keeps everything “denied”: no analytics or advertising cookies are set, but the cookieless signals described above are still sent. Today there is a single choice for analytics and advertising (they cannot be separated). Your choice is stored in your browser. To change it or withdraw your consent, use the “Cookie settings” link in the page footer: the banner will appear again. You can also delete the site data and cookies of our website in your browser.
Other ways to opt out.
Google personalised ads: https://adssettings.google.com
Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout
Other advertising providers: https://optout.networkadvertising.org (Network Advertising Initiative)
How Google uses information from sites that use its services: https://policies.google.com/technologies/partner-sites · Google Privacy Policy: https://policies.google.com/privacy
We protect our forms with Google reCAPTCHA. The service loads when you start using a form on the site (or open the product enquiry) and then shows a badge in the lower right corner. Google analyses information about your device and your interaction with the page to estimate whether the person submitting the form is a human or an automated program, and may store a security cookie (section 4). When you submit a form, our server sends Google the result of that check together with your IP address in order to verify it. This tool works regardless of the choice you make in the cookie banner. If the check concludes that a submission comes from an automated program, it may be discarded automatically; if you think this happened by mistake, write to the contact in section 13 and we will review it.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
The Contact, Request a quote, Groups & MICE, Product enquiry and Agency access forms send your data to our request management system. They are given a reference number, recorded as an incoming request, and our sales team receives a notice in its mailbox. We may also send you a confirmation e-mail in the site's language. The application's technical logs may include the name and e-mail of whoever submits a form; they are kept only for a limited time (section 10). If you do not provide the required fields we cannot reply to you.
Our site is aimed at travel professionals (travel agencies and tour operators). The data we receive from their representatives is generally professional contact data: name, role or agency, business e-mail and phone. The site is not directed at minors. If you are an end consumer, please note that we do not sell directly to individuals.
Commercial e-mails. We send commercial e-mails (RUMBO LIBRE news and presentations) to travel professionals. The contact data we use (e-mail address and, where we have them, name, company and country) comes from people who have written to us or requested access through this site and from travel-trade contact lists loaded by our commercial team. Every commercial e-mail includes an unsubscribe link; once you unsubscribe, we do not send commercial e-mails to that address again. To unsubscribe, to ask where your data came from or to exercise your rights, use the link in the e-mail or write to the contact in section 13.
The following take part in providing these services, as vendors or recipients:
Microsoft Azure (hosting of the site, the API and logs), with infrastructure outside Brazil.
MongoDB Atlas (MongoDB, Inc.), the database of requests and customers, with infrastructure outside Brazil.
MailerSend, sending our transactional e-mails (confirmations and notices).
Google (Google Analytics, Google Ads and reCAPTCHA), which may process data outside Brazil; for advertising and analytics Google acts under its own terms (https://policies.google.com/privacy).
Esri, provider of the map images.
If your enquiry becomes a quote, we may share the necessary data with local service providers; see the “Passengers and booking data” section.
Links to WhatsApp, LinkedIn and Instagram: when you click, you leave our site and their own policies apply.
We do not sell your personal data.
International transfers. Your data is stored and processed outside Brazil (in the countries where the vendors above operate). We do so with the safeguards of the LGPD (art. 33) and, for visitors from the European Economic Area and the United Kingdom, with the mechanisms that the applicable law allows (an adequacy decision, standard contractual clauses or a data privacy framework, depending on the contract with each vendor). You may ask us for information about them.
We keep personal data for as long as necessary for the purposes described in this policy and to comply with applicable legal obligations; we delete or anonymise it when you ask us to or the law allows. Cookies expire according to their purpose, as explained in section 4, and your banner choice is stored in your browser until you delete the site data. You may ask us, at the contact in section 13, which period applies to your case.
Under the LGPD (art. 18) you may request: confirmation that we process your data; access; correction; anonymisation, blocking or deletion of unnecessary or excessive data or data processed in breach of the law; portability; deletion of data processed with your consent; information on the entities with which we have shared your data; information on the possibility of refusing consent and its consequences; and withdrawal of consent. You may also ask for review of decisions made solely by automated processing (art. 20). If the GDPR or UK law applies to you, you also have the right to object, to restrict processing and to lodge a complaint with your data protection authority. If you are in Brazil you may complain to the National Data Protection Authority (ANPD).
To exercise them, write to the contact in section 13; we may ask you to prove your identity. We will reply within the legal deadlines (in Brazil, immediately in simplified form or by a complete statement within 15 days).
We apply reasonable technical and organisational measures to protect data (encrypted HTTPS connection, access controls and protection against automated submissions).
To exercise your rights or for any privacy enquiry: ola@rumbolibre.com.br.
We may update this section; we will publish the new version on this page with its date. Last updated: 5 November 2026.
In the course of service delivery, the Agency will transmit to RUMBO LIBRE personal data relating to Passengers that is necessary for operational coordination purposes. RUMBO LIBRE processes such data in accordance with the Lei Geral de Proteção de Dados — LGPD (Lei 13.709/2018) and uses it exclusively for the management of contracted services, sharing it with the Local Supplier only to the extent required for service delivery. RUMBO LIBRE does not sell or otherwise transfer Passenger data to third parties not directly involved in the operation.
What Passenger data is processed. When an Agency enters the Passengers of a booking in the Portal, the following is requested: the Passenger type (adult, child or infant), first and last name, age (mandatory for minors), nationality and identity document (type and number, for example a passport), these last two being optional, and any special requirements the Agency wishes to communicate (for example mobility, allergies or diet). Our team may also record the date of birth. The data of Passengers who are minors is the same and is entered by the Agency.
Sensitive data and purpose. Special requirements may reveal health information, which is sensitive personal data. We use them only to arrange the requested service. All Passenger data is used to manage the contracted services and for no other purpose.
Who has access. The Agency that enters it, authorised RUMBO LIBRE staff and, to the extent necessary to deliver the service, the contracted Local Supplier: the service requests we send to it contain the Passenger’s name, Passenger type and age (for minors), nationality and special requirements, but not the document number. The voucher shows only the name, the Passenger type and the nationality.
How long it is kept. By the same criterion as in section 10: for as long as necessary for the purposes described and to comply with applicable legal obligations; we delete or anonymise it when you ask us to or the law allows.
The Agency declares that it has obtained the necessary consent from its Passengers for the transfer of their personal data to RUMBO LIBRE and to the Local Supplier at destination, in accordance with the data protection legislation applicable in the Agency's country of origin.
To exercise your rights over your personal data (access, correction, or deletion) under the LGPD, or for any privacy enquiry, write to us at ola@rumbolibre.com.br.
The “Passengers and booking data” section of this policy corresponds to Clause 15 of our Terms and Conditions, where the full text can be found.