Star Parks Privacy Policy

At Star Parks, we understand the importance of your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use and protect your information, reflecting our dedication to transparency and respect for your privacy.

1. General Application

This Privacy Policy applies to all activities from Star Parks, including but not limited to:

Monica's Park;

Ticket Store;

Hello Park; and

Suhai Music Hall.

THE Star Parks is strongly committed to protecting your privacy when accessing our websites, applications and digital platforms, as well as when using any of our products, experiences or services. Therefore, this policy was prepared to demonstrate our commitment to security, transparency and privacy of the information collected from users.

If you fill in personal data on our platforms or if this information is captured automatically, this policy will explain how Star Parks collects, processes and protects your data.

Changes to this policy may be made at any time and will be communicated whenever you access our digital environments again. We recommend that you read this content regularly.

2. Collection of Personal Data

Star Parks collects personal data in different ways, including:

Active data filling: when the user provides information in fields on websites, in forms, during customer service or when using applications.
Automatic collection: when browsing our platforms, data such as IP address, pages visited, search terms, browser type and version, device type and operating system are collected.
Use of standard technologies: such as cookies, pixel tags, beacons and tracking tools for browsing analysis, improving user experience and personalizing content.
Collection of data from minors: With prior consent to this Policy by the parent, mother or legal guardian, such as first name and date of birth, with the aim of generating statistical visitation data and conducting marketing actions. The Star Parks limits such processing to the minimum necessary and clearly informs the consequences of not providing such data and/or refusing consent.

The user may, at any time, configure his/her browser to block or notify the use of these technologies. See the “Cookies” section for more details.

3. What personal data we collect

We collect, in particular, but not exclusively, the following data for the purposes described in this policy:

Full name;
Surname;
Date of birth (dd/mm/yyyy);
Email and email confirmation;
CPF (number only);
ID;
DDD and telephone numbers (main and additional);
Access password;
How did you meet us;
Main address (zip code, number, complement, neighborhood, city, state);
Information about the use of the services of Star Parks;
IP;
Browser type;
Data from the device used and the mobile operator; and
Geolocation (for website functionality, user location and social media actions).

In all cases, Star Parks limits the collection and processing of personal data to the minimum necessary to achieve the intended purposes, as determined by the LGPD.

Data processing is always carried out in accordance with Federal Law No. 13,709/2018 (LGPD) and other applicable regulations.

4. Purpose of Use of Personal Data

THE Star Parks will use the personal information collected only for the purposes stated in this Policy or at the time of collection. These purposes include, but are not limited to:

Purchase and sale of tickets for activities;
Sending physical tickets, when applicable;
Contact with buyers;
Carrying out direct and targeted marketing actions;
Location of users on social networks;
Payment processing; and
Assistance in specific security or emergency situations, such as lost children or the need for medical care in our establishments.

Important: All communication with the user will be carried out in accordance with applicable legislation and the principles of market self-regulation.

If the user wishes opt out of receiving non-essential communications, you can request its deletion through the service channels or via the link present in the communications.

The use of data by Star Parks has a time limit, and the Star Parks will only keep data when it is associated with a legitimate purpose provided for in the General Data Protection Law (LGPD – Law No. 13,709/2018).

5. Device permissions and synced data

When you use our applications, we may ask you to device operating system authorization for synchronization and collection of data such as contacts or location.

This authorization is done through the device's own permissions system, and the user can, at any time, activate or deactivate this functionality in the system settings.

The purposes of these permissions are described in detail in the “Analytics and Personalization Cookies” section below.

6. Third-party information and use of third-party cookies

THE Star Parks does not use information from third parties or external sources to supplement or cross-reference with data collected from users through our websites and applications. However, there may be use of third party cookies (e.g. traffic, performance or media analysis tools), as described in the Cookies section.

7. Data collection by third parties

This Policy applies to the collection and processing of data carried out by websites, applications and platforms. under the direct responsibility of Star Parks.

Data collection by third parties (such as advertisers, business partners or integrated social networks) is regulated exclusively by the privacy policies of these respective agents.

Data will only be stored for as long as there is a legitimate purpose. After this period, the data will be:

Blocked;
Anonymized; or
Permanently excluded.

Exceptions: When necessary to:

- Compliance with legal obligations;
- Fraud investigation; and

Judicial or administrative proceedings.

Star Parks cooperates with competent authorities and third parties to ensure compliance with the law. Therefore, if required to do so under applicable law, Star Parks may disclose user information necessary to comply with law enforcement requests.

8. Storage of Personal Data

The information collected by Star Parks will only be kept as long as there is a legitimate purpose for its use. Once this purpose has been exhausted, the data will be:

Blocked;
Anonymized; or
Permanently deleted.

In some cases, Star Parks may retain certain user information in the following situations:

Compliance with legal or regulatory obligations;
Regular exercise of rights in administrative or judicial proceedings;
Investigation of fraud or violations of the Terms of Use of our activities; and
Court order.

9. Use of Local Storage (Web Storage)

Also known as Webstorage, the Local Storage feature is used exclusively for the technical functioning of platforms, such as:

Application flow control; and
Temporary storage of interface states.

Local storage does not store any personal user information and does not record browsing habits;

It cannot be disabled or configured directly by the user.

10. Social Login

Star Parks may offer social login functionality, which allows users to authenticate with their social media accounts (e.g. Facebook, Google, Apple).

In these cases:

Data provided by social networks (such as name, email, profile image) may be accessed with the user's prior authorization;
The user declares that the data provided is true and owned by him/her; and
If necessary, we may request supporting documents.

The user may, at any time, correct or update their data on the platforms.

Star Parks is not responsible for the content entered by the user. The user is civilly and criminally liable for any damage caused to the company or third parties due to false data or misuse of information.

11. Information Security

Data security is a priority at Star Parks. All data provided or collected automatically is stored and protected with:

Encryption technologies.
Restricted and monitored access environments.
Strict information security standards. and
Regulatory compliance audits and best practices.

Data transmission between Star Parks systems and users is always done using secure protocols.

The user is responsible for maintaining the confidentiality of his/her password. Star Parks is not responsible for unauthorized access by third parties if the correct credentials have been used.

12. Limitation of Liability

Even though we adopt rigorous protection measures, no security system is absolutely inviolable.

Therefore, Star Parks is exempt from liability for damages resulting from:

- Cyber attacks (hackers);
- Viruses or technical failures;
- Invasions into our systems or databases; and
- Illegal interceptions by third parties.

Except in cases of exclusive and proven fault or intent on the part of Star Parks.

Users, or those responsible for them, will be held legally liable for any damage caused to Star Parks, without prejudice to the company's right of recourse in applicable cases.

13. Rights of Personal Data Holders

The user, holder of the personal data processed by Star Parks, has the following rights, as provided for in Law No. 13,709/2018 (LGPD):

- Confirm the existence of data processing;
- Access the personal data processed;
- Correct incomplete, inaccurate or outdated data;
- Request the anonymization, blocking or deletion of unnecessary data;
- Portability of data to another service provider, upon express request;
- Deletion of personal data processed based on consent, except where there is a legal or regulatory obligation to retain it;
- Information about the entities with which the data was shared;
- Information about the possibility of not providing consent and the consequences of such refusal; and
- Revocation of consent, in accordance with the law.

To exercise your rights, the user may contact the Data Protection Officer (DPO) via email:

(DPO): 📧 encarregado@sjsa.com.br

Or, through the specific service channel available on the activity websites.

Caso deseje cancelar sua conta ou interromper comunicações de marketing, o usuário poderá fazê-lo acessando o link “Fale com o Encarregado” ou entrando em contato diretamente com o e-mail acima.

14. Privacy Policy Updates

THE Star Parks may change this Privacy Policy at any time, in accordance with changes in data processing practices or legal requirements.

The updated version will always be available on our platforms. We recommend that users periodically review the content.

Last update: June 27, 2025

15. Contact Channel

If you have any questions, requests or wish to exercise your rights as the holder of personal data, please contact:

📧 Nicola Voci – Data Protection Officer (DPO)
(DPO): 📧 encarregado@sjsa.com.br

This channel is exclusively for issues related to data protection and privacy.

For commercial or operational matters, use the service channels available on the platforms for each activity.

16. Jurisdiction and Final Provisions

The central court of the District of São Paulo/SP is elected to resolve any disputes arising from this Privacy Policy, expressly waiving any other court, however privileged it may be.