Privacy policy

Privacy policy

This policy explains what data Vacation Rentals Nosara (VRN) collects when you book or use the platform, why, and your rights. Framework: Costa Rica's Law 8968 and the PRODHAB authority.

What we collect and why

From the guest: name, email and phone (to identify the booking and communicate); dates, home, number of guests and whether you travel with a pet, and amounts (to manage the booking and payment); the payment reference (we do NOT store the card number, the gateway handles it); concierge requests, incident reports and messages you send from your booking; your IP address only for security and abuse prevention; and, if you join the waitlist or leave a review, that data (a review may be shown publicly).

Identity verification (only if the home requires it, and only the first time): performed by an external provider in its secure environment. VRN never sees or stores your document or selfie: only the result (verified / not) and a reference.

Legal basis

We process data to perform your booking (contract) and, where applicable, with your consent. The IP is processed under legitimate interest in security. You can withdraw consent and exercise your rights.

Third parties that process data for us

Cloudflare (infrastructure), Resend (email delivery), Google (VRN's Gmail inbox, where your replies and internal notices arrive), the payment method you choose (payment goes directly to the home owner; if by card, the owner's gateway handles it, not us), the identity-verification provider (if applicable) and Airbnb/VRBO (we only import blocked dates; we don't send them your data). Some are outside Costa Rica.

Cookies

We use strictly necessary cookies: one to remember your language and, if you're a panel user, a signed session cookie to keep you logged in. We don't use advertising or third-party tracking cookies.

How long we keep data

Booking data is kept as long as needed to manage it and meet legal and accounting obligations. The security IP is kept for a short time and then deleted.

Your rights

You can request access, correction and deletion of your data when it's no longer needed, and withdraw consent. Write to vacationrentalsnosara@gmail.com and we'll respond within the legal timeframe.

Security

Encrypted connection (HTTPS), irreversibly stored passwords, signed session cookies, role-restricted access, payment-webhook secret verification and re-checking the payment with the provider and abuse limits. We don't store card numbers or ID documents.

Contact

For any question about your data, write to vacationrentalsnosara@gmail.com or WhatsApp +506 8811-1698. If we update this policy, we'll publish the new version with its date.