Privacy policy

Who is the controller

Maudy Beita Rojas, registered with Hacienda CR (ID 115220870), trading as "Amiguito Tours". Contact: reservas@amiguitotourscr.com.

What we collect

• Booking data: full name, email, phone, preferred language, country, number of people, tour and date.
• Payment data: the processor (Onvopay) handles card details. We only keep the last 4 digits and card brand for reconciliation.
• Technical: IP address, browser user-agent, and analytics cookies if you consent.

Why we use it

• Confirm and manage your booking, including pre-tour reminders.
• Meet Costa Rica accounting and tax obligations.
• Send service messages (weather, cancellations).
• Marketing messages only if you opt-in.

Who we share with

Subprocessors: Onvopay (payments), Resend (email), Meta WhatsApp Business (messaging), Cloudflare (infra), Supabase (database), Anthropic (AI assistant). Each under a data processing agreement.

How long we keep it

Booking data: 5 years per CR tax law. Marketing data: until you revoke consent. Technical logs: 12 months, then anonymized.

Your rights

Under Costa Rica Law 8968 you have the right to access, rectify, cancel and object to processing. If you're in the EU, GDPR additionally applies. To exercise any of these rights write to privacidad@amiguitotourscr.com with a copy of your ID. We respond within 10 business days.

Cookies

We use strictly necessary cookies always. Analytics (GA4, Plausible) and marketing (Meta Pixel) cookies only fire after explicit consent in the banner. You can revoke consent at any time from browser settings or by clearing the `cookie_consent` cookie.