top of page

Privacy Policy

Privacy Policy - The Basics

Effective Date: March 24, 2026

1. Introduction
This Privacy Policy describes how El Castillo (the "Company," "we," "us," or "our"), located in the district of Espíritu Santo, Canton of Esparza, Province of Puntarenas, Costa Rica, collects, uses, and protects your personal data. We are committed to complying with the Law No. 8968 (Protection of the Individual against the Processing of their Personal Data) and its corresponding Regulations under Costa Rican jurisdiction.

2. Data Controller
The entity responsible for the processing of your personal data is:

3. Information We Collect
We may collect the following categories of personal information:

  • Identity Data: Name, surname, passport number, or government ID.

  • Contact Data: Email address, phone number, and physical address.

  • Transaction Data: Payment details and billing information.

  • Reservation Data: Stay dates, guest preferences, and special requests.

  • Technical Data: IP address, browser type, and usage data via cookies.
     

4. Purpose of Data Processing
Your data is processed for the following purposes:

  • Managing reservations and providing hospitality services.

  • Complying with legal obligations (e.g., reporting guest information to Costa Rican authorities).

  • Processing payments and preventing fraud.

  • Sending promotional communications (only with your explicit consent).

  • Improving website functionality and user experience.
     

5. Legal Basis for Processing
In accordance with Law No. 8968, we process your data based on:

  • Consent: Your explicit agreement provided at the time of booking or subscription.

  • Contractual Necessity: To fulfill our service agreement with you.

  • Legal Obligation: To comply with Costa Rican tax and security laws.
     

6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements mandated by the laws of Costa Rica.
7. Third-Party Sharing
We do not sell your data. We may share information with:

  • Service providers (payment processors, booking engines).

  • Public authorities when required by Costa Rican law.

  • Professional advisors (accountants and lawyers).
     

8. Your Rights (ARCO Rights)
Under Law No. 8968, you have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you.

  • Rectification: Request correction of inaccurate or incomplete data.

  • Cancellation: Request the deletion of your data when it is no longer necessary.

  • Opposition: Object to the processing of your data for specific purposes.

To exercise these rights, please contact us at info@elcastillodeesparza.com

9. Data Security
We implement technical and organizational security measures to protect your data from unauthorized access, loss, or alteration, as required by the Agencia de Protección de Datos de los Habitantes (PRODHAB).

10. Governing Law and Jurisdiction
This Privacy Policy is governed by the laws of the Republic of Costa Rica. Any disputes relating to this policy shall be subject to the exclusive jurisdiction of the courts located in the Province of Puntarenas, Costa Rica.
 

bottom of page