Privacy Policy

This website is operated by Fortaleza Imobiliária ("Fortaleza", "we", "us"), a hospitality company based in Luanda, Angola, that runs corporate guesthouses and hotels in Luanda and Soyo. Fortaleza decides how and why the personal data described in this policy is used and is therefore responsible for it.

For anything concerning your personal data, write to contact@fortalezagh.com. We answer in English, Portuguese or French.

This policy explains what we collect through this website and the channels it links to - the enquiry forms, WhatsApp, phone and email - why we collect it, who we share it with and what choices you have.

Information collected during a stay itself, such as the guest identification recorded at check-in, is handled under the contract with you or your employer and the house rules handed over on arrival. It is outside the scope of this website policy, although the same commitments on selling, advertising and access apply to it.

Almost everything we hold comes directly from you, and only when you choose to send it.

• Contact form: your name, email address, company where you give it, the subject you choose and your message.
• Corporate proposal request: your name, email address, company, phone number where you give it, the city or area, the work site and residences you pointed to, your dates or type of stay, the number of rooms or people, the services you tick and any requirements you describe.
• Catering, transport and team-stay requests: your name, a phone number or email address, company where you give it, and the details of the order, trip or stay - package or service, number of people, dates and times, places and any notes.
• WhatsApp and phone: your number, the time of the call or message and what you tell us. WhatsApp is operated by Meta Platforms and is governed by its own terms and privacy policy.
• Email: anything you write to us directly, including attachments such as procurement or supplier-onboarding forms.

Please send only what your request needs. We never ask for passwords, payment-card numbers or copies of identity documents through this site.

This site is a set of static pages served by a hosting provider, with one small program on the same server that receives the site's forms. Like any web server, that provider records technical logs - the address your connection comes from, the page requested, the time and the browser type - which it keeps for security and troubleshooting for a limited period. We do not combine those logs with your enquiry.

When you send a form, that program also records the page and language you sent it from, so that we can reply in your language. To stop anyone flooding the forms, it keeps a scrambled code (a hash) derived from your connection's internet (IP) address for 24 hours; the address itself is not stored in the database.

If you accept analytics cookies in the banner shown on your first visit, we use Google Analytics, a service provided by Google, to understand how the site is used: which pages are viewed and for how long, how visitors arrived (for example from a search engine), the type of device and browser, the approximate country and city, and clicks on the WhatsApp, phone and email links. Google Analytics does not store your IP address, and we have switched off its advertising features, so this information is never used to show you ads. If you decline, or make no choice, the Google Analytics script does not load at all.

We use the information above for a small number of purposes, each of which needs it:

• To answer your enquiry and prepare a proposal - the reason you contacted us.
• To arrange and deliver the accommodation, catering or transport you asked for, and to manage the contract that governs it.
• To keep business records that Angolan commercial and tax law requires us to keep.
• To keep the site running and secure and - if you accept analytics cookies - to improve it using statistics on how it is used.

We do not build profiles, make automated decisions about you or send marketing you did not ask for. If we ever want to use your data for a new purpose, we will tell you first.

Within Fortaleza, your enquiry is read by the commercial team and by the staff who arrange your stay or service. Outside Fortaleza, a small number of providers handle data on our behalf so that this site can work:

• Our email provider stores the mailbox that receives enquiries, like any business email service.
• Meta Platforms operates WhatsApp; the messages you exchange with us pass through its service under its own policy.
• Google operates Google Analytics and, if you accept analytics cookies, receives the usage statistics described above. It does not receive your enquiries or messages.
• OpenStreetMap serves the maps on property pages and OpenFreeMap the street map on the homepage, so your browser requests those maps directly from their servers. If you look up a work site on the Properties page, your browser also sends the address you type to OpenStreetMap's search service (Nominatim), and the site's position on the map to the OSRM route planner, to estimate drive times. Plus Codes and coordinates are read in your browser and never go to the search service, and we don't receive or keep any of it.
• Our hosting provider serves the site's pages, keeps the technical logs described above and holds the database in which the forms keep a copy of each enquiry.

We may also disclose information when the law requires it, or to professional advisers bound by confidentiality. We do not sell or rent personal data, and we do not share it with advertisers.

Fortaleza operates in Angola, but the providers above run their servers in other countries, mainly in the European Union and the United States. Your enquiry therefore leaves Angola in transit. We choose providers that publish their security and privacy commitments and we transfer only what the service needs to do its job.

Google Analytics sets two cookies, _ga and _ga_ followed by an identifier, and only after you accept analytics cookies. They let it recognise a returning browser and group page views into visits, and they expire 13 months after your last visit. If you decline, no analytics cookie is set, and we never set advertising cookies.

Your choice itself, and small technical preferences such as the language you last chose, are kept in your browser's local storage and never leave your device. You can change your choice at any time with the "Cookie settings" link at the bottom of every page, or clear everything from your browser settings.

Enquiries that do not lead to a stay are kept for as long as needed to answer you and to follow up on an open request, after which they are deleted from our working mailboxes.

The copy of a form enquiry kept in the website's database is deleted automatically 12 months after it arrives.

Where an enquiry becomes a contract, the related correspondence is kept with the contract records for as long as Angolan commercial, accounting and tax law requires, and then deleted or anonymised.

Google Analytics data is kept for up to 14 months and then deleted automatically by Google.

The site is served over HTTPS, so what you type into the forms travels encrypted to our server. Enquiries are received into mailboxes restricted to the staff who need them, protected by strong passwords and two-factor authentication, and the database that keeps a copy of form enquiries is protected by its own password. No transmission over the internet is perfectly secure, so we ask you to send only what your request needs and to contact us if you believe an email or message was not meant for you.

Under Angola's Personal Data Protection Law (Law 22/11) and, where it applies to you, other data-protection law, you can:

• Ask what personal data we hold about you and receive a copy.
• Have inaccurate or incomplete data corrected.
• Ask us to delete data we no longer need to keep.
• Object to a use of your data, or ask us to restrict it, while a question is resolved.
• Withdraw your consent where a use relies on it, without affecting what was done before.

To exercise any of these, write to contact@fortalezagh.com from the address you used to contact us, or tell us how we can verify it is you. We answer within a reasonable time and without charge, unless a request is clearly excessive. You may also complain to the Angolan data-protection authority.

This site is aimed at companies and business travellers. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has sent us information, write to contact@fortalezagh.com and we will delete it.

We may update this page as the site or our services change - for example if we add a provider. The date at the top shows the current version, and material changes are noted on this page for a period after they take effect.