Privacy Notice · in effect since January 2025 · updated September 2026
Your privacy and security are priorities for Rede MME Hotéis (“the group”, “we”). This Privacy Notice reaffirms our commitment to protecting your personal data and applies to all hotels in the group (Maceió Mar Hotel, Maceió Mar Resort, Ipioca Beach Resort, Acqua Suítes, Acqua Inn and Acqua Prime), to this website and to our booking and customer service channels. We are committed to full compliance with Brazil’s General Personal Data Protection Law (Law No. 13,709/2018, “LGPD”).
01What data we collect
We collect only what is necessary to host you well. Depending on the channel, this may include:
- Identification and contact data: name, CPF (Brazilian taxpayer ID), email and phone number, provided in bookings, at check-in, in the forms on this website (contact, events, newsletter) and on WhatsApp.
- Booking and stay data: dates, hotel, companions and the information in the National Guest Registration Form (FNRH), required by Brazilian hospitality law.
- Payment data: processed within the booking engine and by payment providers. This website does not receive or store card numbers.
- Browsing data: pages visited, device type and source of the visit, collected through cookies and similar technologies (section 4).
We do not request sensitive data, such as health or biometric data, through the forms on this website. If a booking requires information of this kind (for example, accessibility needs), it is used only to prepare your stay.
02How we use your data
- To process, confirm and manage bookings and stays at the group's hotels.
- To respond to enquiries, proposal requests and event quotes made through the website, phone, email or WhatsApp.
- To send offers and news from the group to those who asked to receive them, always with an unsubscribe option in every message.
- To comply with the legal and regulatory obligations of the hotel industry and respond to authorities when required.
- To measure the performance of the website and media campaigns and improve the browsing and customer service experience.
Each use has a legal basis under the LGPD: performance of a contract (bookings and stays), consent (newsletter and offers, always revocable), compliance with a legal obligation (hotel activity records) and legitimate interest (website improvement and fraud prevention).
03Data of children and adolescents
We recognize the importance of protecting the personal data of children and adolescents.
- Children's data is collected exclusively with the consent of their legal guardians, in situations such as booking and check-in.
- This data is used only as necessary, such as for registering the stay and determining age for pricing, and is not shared without authorization.
If you are a child's legal guardian and have questions about how we handle this data, contact our Data Protection Officer (section 7).
04Cookies
Cookies are small text files stored on your device when you visit the website. We use cookies in four categories:
- Essential: ensure the basic functioning of the website and the booking flow. They cannot be disabled without affecting the service.
- Functional: remember preferences, such as language and display settings.
- Analytics: help us understand how the website is used (Google Analytics, Microsoft Clarity), with aggregated data.
- Media and advertising: measure campaigns and enable ads related to your interests (Meta and Google).
You can manage or decline cookies through the notice shown on your first visit and in your browser settings. Declining non-essential cookies does not prevent you from booking, but may affect your experience on the website.
05Data sharing
The group does not sell your data. To fulfill the purposes above, it may be shared with:
- Competent authorities, whenever there is a court order, legal or regulatory requirement, request or demand.
- Third-party software platforms and tools used in our operations, such as the booking engine, the property management system, chat and WhatsApp support and email tools.
- Suppliers and service providers acting on our behalf, always based on the principles of necessity, purpose, adequacy, security and transparency, and under a contract that ensures compliance with the law.
All sharing respects the original purpose of collection and the LGPD.
06Your rights
As a data subject, you have the right to:
- Confirm whether your data is being processed and access the data we hold about you.
- Correct incomplete, inaccurate or outdated data.
- Request anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law.
- Request data portability, under the applicable regulations.
- Be informed about who we share your data with.
- Know what happens if you do not give consent, and withdraw consent already given, requesting the deletion of data processed on that basis.
- Petition the Brazilian National Data Protection Authority (ANPD).
Requests are reviewed by the group's privacy officers and answered within the legal deadlines. In some cases, a request may be denied on legitimate grounds, for example when fulfilling it would expose another person's data or when the law requires us to keep the record; in every case, the reason will be given to you.
07Data Protection Officer
The controller of the data processed on this website is Rede MME Hotéis, headquartered in Maceió, Alagoas, Brazil. To exercise your rights or ask questions, write to the Data Protection Officer at reservas@mmehoteis.com.br, with the subject “Privacidade” (Privacy). We are ready to handle your requests.
08Updates to this notice
This notice may be updated to reflect changes to our services or to the law. The current version is always published on this page, with the date at the top. We recommend checking it periodically.
Thank you for your trust. We reaffirm our commitment to transparency and to the security of your data.
In effect since January 2025 · this version: September 2026.
