Privacy Policy
Last updated: February 2026
Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or make a reservation.
1. Information We Collect
We may collect the following personal information:
- Contact Information: Name, email address, phone number
- Booking Information: Check-in/check-out dates, number of guests, special requests
- Identity Information: Passport number or national ID (required by Costa Rican law for hotel registration)
- Payment Information: Credit card details (processed securely through our payment provider)
- Usage Data: Browser type, IP address, pages visited, and interaction data
2. How We Use Your Information
We use your personal information for the following purposes:
- Reservation Management: To process and confirm your booking
- Communication: To send booking confirmations, updates, and respond to inquiries
- Legal Compliance: To meet Costa Rican immigration and tourism requirements
- Service Improvement: To improve our website and guest experience
- Marketing: To send promotional offers (only with your consent)
3. Third-Party Processors
We share your information with trusted third-party service providers who assist us in operating our business:
- Tilopay: Payment processing (PCI DSS compliant)
- Channex: Channel management and OTA distribution
- Google Analytics: Website traffic analysis (anonymized)
- Cloudflare: Website security and performance
We do not sell your personal information to third parties.
4. Cookies
Our website uses cookies to enhance your browsing experience. For detailed information about our cookie practices, please see our Cookie Policy.
5. Data Retention
- Booking data: Retained for 5 years (as required by Costa Rican tax regulations)
- Marketing preferences: Retained until you unsubscribe
- Website analytics: Retained for 26 months (Google Analytics default)
- Payment data: We do not store full credit card numbers
6. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data (subject to legal retention requirements)
- Restriction: Request limitation of processing
- Portability: Receive your data in a structured, machine-readable format
- Object: Object to processing for marketing purposes
To exercise any of these rights, please contact us using the details below.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including encryption, secure servers, and access controls.
8. International Transfers
Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for any such transfers.
9. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.
11. Contact Us
For privacy-related inquiries or to exercise your rights, please contact us at the details provided on our Contact page.