This Privacy Policy explains how El Cactus Services (“Cactus”, “we”, “us”), an ATV, scooter and mountain bike rental and tour agency in Sámara, Costa Rica, collects, uses and protects your personal data when you visit cactussamara.com or contact us. We process personal data in accordance with Costa Rica’s Law No. 8968 on the Protection of Individuals with regard to the Processing of their Personal Data, and we aim to respect the rights visitors have under the laws of their own country.
Who is responsible for your data
El Cactus Services is the controller of the personal data described in this policy.
El Cactus Services
100 meters west of the National Bank, C. Diego, Sámara, Guanacaste, 50205, Costa Rica
Email: elcactussamara2022@gmail.com
Phone / WhatsApp: +506 8389 6565
What data we collect
Data you give us
When you send a booking request through the “Reserve Your Spot” form, or contact us by email, phone or WhatsApp, we collect:
- your name, email address, phone number and, if you provide it, your WhatsApp number;
- the details of your request: activity, dates, pick-up or departure time, number of vehicles or riders;
- any message you choose to add.
Please do not send us sensitive information (such as health data or identity document numbers) through the website. Any documents required for a rental, such as your driver’s license, are checked at our agency.
Data collected automatically
Like any website, our hosting provider records technical data when you visit the site (IP address, browser type, pages requested, date and time). These logs are used only to run and secure the website. We do not use advertising or analytics cookies, and we do not track you across other websites.
Why we use your data
- To answer and manage your booking request: checking availability, confirming your reservation, and contacting you about it.
- To provide the rental or tour you booked, and to handle any follow-up (changes, questions, incidents).
- To comply with our legal obligations, for example accounting and tax requirements.
- To keep the website secure and working properly.
By sending a booking request, you consent to the processing of your data for these purposes. We never sell your personal data and we do not use it for marketing without your separate consent.
Who we share it with
Your data is only shared with the service providers we need to run our business:
- Vercel Inc. (United States) — hosting of this website.
- Google LLC (United States) — our email service (Gmail), the Google Maps map shown on the site, and the Roboto web font.
- WhatsApp / Meta Platforms — when you choose to send your request or talk to us on WhatsApp.
- Our booking management software — used to record and manage reservations.
Some of these providers are located outside Costa Rica, mainly in the United States. They process data under their own security and privacy commitments. We may also disclose data when required by law or by a competent authority.
Third-party content and links
Our contact section shows an embedded Google Maps map. When it loads, Google may receive your IP address and set its own cookies, under the Google Privacy Policy. Links to Instagram, Facebook, WhatsApp and Google reviews take you to those platforms, whose own privacy policies apply.
How long we keep it
We keep booking request data for as long as needed to handle your request and your rental or tour, then for the period required by our legal and accounting obligations. Requests that do not lead to a booking are deleted when they are no longer useful. Technical logs are kept for a short period by our hosting provider.
Your rights
Under Law No. 8968 you have the right to:
- access the personal data we hold about you;
- have it corrected if it is inaccurate or incomplete;
- have it deleted when it is no longer needed or was processed unlawfully;
- withdraw your consent at any time, without affecting processing that took place before.
Depending on where you live (for example in the European Union, the United Kingdom, Canada or some US states), you may have additional rights. To exercise any of them, write to elcactussamara2022@gmail.com. We will answer within the time limits set by law. If you are not satisfied with our answer, you can contact Costa Rica’s data protection authority, the Agencia de Protección de Datos de los Habitantes (PRODHAB), or the authority of your country.
Security
The website is served over an encrypted connection (HTTPS) and access to booking data is limited to our team. No system is completely secure, but we take reasonable measures to protect your data against loss, misuse and unauthorized access.
Children
Booking requests must be made by an adult. We do not knowingly collect data from children under 18 through this website; minors taking part in a tour are registered by the adult responsible for them.
Changes to this policy
We may update this policy, for example if our services or providers change. The date at the top of this page shows when it was last updated.