Privacy Policy

Effective Date: 09/26/2025 Costa Rica's Tour Desk (“we,” “our,” “us”) values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard your information when you book a tour, visit our website, or interact with us. It also explains your rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect the following categories of personal information:

Identifiers: Name, email, phone number, billing/shipping address, passport/ID details (if required).
Commercial Information: Tour bookings, payment details, travel preferences, dietary requirements, and emergency contacts.
Technical Data: IP address, browser type, device data, geolocation (if enabled), and usage patterns.
Communications: Feedback, customer service inquiries, and correspondence history.

We do not knowingly collect data from children under 13 (or under 16 in the EU).

2. How We Use Your Information

We use personal data to:

Process bookings, reservations, and payments.
Deliver services (transportation, lodging, guided tours).
Communicate with you regarding your tour or inquiries.
Improve services, website functionality, and customer support.
Send you promotional updates (only with your consent, where required).
Comply with legal, tax, and regulatory obligations.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or UK, we process your personal data under these lawful bases:

Contractual necessity: To fulfill bookings and provide services.
Consent: For marketing communications and optional data.
Legitimate interests: Improving services, ensuring safety, and preventing fraud.
Legal obligations: Compliance with local, tax, or travel regulations.

4. Sharing of Information

We do not sell personal data. We may share your data with:

Service Providers: Hotels, transport operators, local guides, and booking platforms.
Payment Processors: To securely complete transactions.
IT & Hosting Providers: To operate our website and systems.
Legal Authorities: When required to comply with laws or regulations.

If data is transferred outside the EEA, we ensure adequate safeguards (e.g., EU Standard Contractual Clauses).

5. Data Retention

We keep your personal data only as long as necessary for:

Fulfilling services.
Legal and accounting obligations.
Resolving disputes.

Once data is no longer needed, it is securely deleted.

6. Your Rights Under GDPR (EU/UK):

You have the right to:

Access a copy of your personal data.
Correct inaccurate or incomplete information.
Request deletion (“right to be forgotten”).
Restrict or object to processing.
Data portability (receive your data in a structured format).
Withdraw consent for marketing at any time.

Under CCPA (California):

California residents have the right to:

Know what personal data we collect, use, and share.
Request deletion of personal data (with some exceptions).
Opt-out of the sale or sharing of personal data (we do not sell your data).
Not be discriminated against for exercising your rights.

You may submit a rights request by contacting us (see Section 10).

7. Cookies & Tracking

Our website uses cookies and similar technologies for:

Website functionality.
Analytics and performance.
Personalization and marketing (with consent where required).

You can adjust cookie preferences via your browser or our cookie banner.

8. Data Security

We implement technical, organizational, and administrative safeguards to protect your personal information. However, no online transmission or storage system is completely secure.

9. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted here with a revised “Effective Date.”

10. Contact Us

If you have questions, concerns, or requests regarding your privacy rights, please contact us:

Costa Rica's Tour Desk
Email: info@costaricastourdesk.com
Phone: 123-456-7890
Address: Pastor Diaz Ave 61101, Puntarenas Province, Jaco, 61101, Costa Rica

If you are in the EEA/UK and feel your rights have been violated, you may also lodge a complaint with your local data protection authority.