Privacy Policy

Plan My Costa Rica (“we”, “us”) is the data controller for personal information collected through planmycostarica.com. Contact us at planmycostarica@gmail.com.

• Booking information — name, email, phone, WhatsApp, traveler count and ages, tour details, meeting-point preferences.
• Payment metadata — transaction reference and last four digits only. Full card numbers are handled directly by our payment processor and never stored on our servers.
• Communications — messages you send us by form, email, or WhatsApp.
• Technical data — IP address, browser, device, referring page, and interaction events collected through cookies and basic analytics.

• To process and confirm your booking with the applicable tour operator;
• To communicate with you about your booking, safety updates, and trip logistics;
• To share the minimum information required with the tour operator so they can deliver the service;
• To send marketing emails only if you opt in — you can unsubscribe at any time;
• To improve the Site, prevent fraud, and comply with legal obligations.

We rely on: (a) performance of a contract for booking-related processing; (b) our legitimate interests for service improvement, fraud prevention, and analytics; (c) your consent for marketing communications and non-essential cookies; and (d) legal obligation where required.

• The tour operator or Supplier fulfilling your booking;
• Our payment processor;
• Email, hosting, and analytics providers acting as our processors;
• Costa Rican or foreign authorities when required by law.

We do not sell your personal information.

Because Plan My Costa Rica operates in Costa Rica and our processors are typically located in the United States or European Union, your data may be transferred outside your country of residence. We rely on standard contractual clauses or equivalent safeguards where required.

We keep booking records for up to 7 years to meet Costa Rican tax and accounting requirements. Marketing contacts are retained until you unsubscribe. Analytics data is retained in aggregate.

Depending on where you live, you have the right to access, correct, delete, or export your data; to object to or restrict certain processing; and to withdraw consent. Residents of the EU, UK, California (CCPA/CPRA), and other jurisdictions with similar laws have additional rights. Email planmycostarica@gmail.com to exercise any of them. Under Costa Rican Ley 8968 (Protección de la Persona frente al Tratamiento de sus Datos Personales) you also have the right to complain to the Agencia de Protección de Datos de los Habitantes (PRODHAB).

We use strictly necessary cookies to run the Site, and optional analytics cookies to understand usage. You can accept or decline non-essential cookies through your browser settings.

The Site is not directed at children under 13. We do not knowingly collect personal information from children; a parent or guardian books on their behalf.

We use encryption in transit, restricted access, and reputable hosting and payment providers. No system is 100% secure; you use the Site at your own risk.

We may update this Privacy Policy. Material changes will be posted on this page with a new “last updated” date.