Privacy policy

What we collect

Only what a booking needs:

• Name, email, phone or WhatsApp number and country.
• Stay dates, number of guests, whether you travel with a pet, and anything you write to us.
• Booking record: quote, status, deposit reported and received (method and amount; never card details).
• Messages exchanged through the site, email or WhatsApp.
• Minimal technical data to protect the site: IP address and browser when you submit the form, used only for abuse limits and not linked to your profile.

Why, and on what legal basis

We process your data to answer your enquiry, quote, reserve the dates, collect the deposit and coordinate your arrival. The legal basis is the performance of the accommodation contract you request (or the steps before it) and, for accounting retention, compliance with legal obligations in Costa Rica.

We do not use your data for advertising, and we never sell or share it with third parties for marketing.

Automated assistant

To reply quickly, an artificial-intelligence assistant may read your enquiry, check availability, send you a quote and hold dates tentatively. It never confirms a booking, charges or cancels on its own: a person always makes those decisions. You can ask at any time to be handled directly by one of the owners.

Who helps us process your data

We use providers that act on our instructions under data-protection agreements:

• Vercel (United States): website hosting.
• Turso (United States): encrypted database where bookings are stored.
• Microsoft 365 (Exchange Online): booking email and calendar.
• Anthropic (United States): the AI model behind the assistant; it does not use your data to train its models.
• WhatsApp (Meta): if you choose to write to us there, their terms also apply.

International transfers

Some of these providers process data outside your country, mainly in the United States. For residents of the European Economic Area and the United Kingdom, those transfers rely on the standard contractual clauses approved by the European Commission, included in our agreements with each provider.

How long we keep it

• Enquiries and quotes that do not become a booking: 24 months after the last contact; then they are anonymised automatically.
• Completed bookings: 5 years after check-out, for accounting and tax obligations in Costa Rica; then they are anonymised.
• You can request deletion earlier, except for data we are legally required to keep.

Your rights

You can ask us for access to your data, correct it, receive a portable copy, restrict or object to its processing, and request its deletion. Write to the address below with your name and booking code; we reply within 30 days at most.

If you live in the European Union or the United Kingdom, you can also lodge a complaint with your national data-protection authority. In Costa Rica the authority is the Agencia de Protección de Datos de los Habitantes (PRODHAB).

Security

Data travels encrypted (HTTPS) and is stored in an encrypted database. Access to the booking panel is restricted to the owners through passwordless passkeys. Every change to a booking is logged with who made it.

Cookies

The site uses only functional cookies: one to remember your language and one, for the owners only, to keep the booking-panel session. We use no advertising or tracking cookies.

Changes

If we change this policy we update the date above. Significant changes are notified to guests with an active booking.