Privacy Policy – EnduroLand Costa Rica

Effective Date: 01.10.2025

Organizer / Data Controller: EnduroLand Costa Rica 3-102-939101 (EnduroLand Costa Rica)
Address: Finca Tranquila, Naranjito 3km Norte de la Escuela Pública la gallega, lote 25, Puntarenas Province, Naranjito, Costa Rica
Email: info@endurolandcostarica.com
WhatsApp: +1 (773) 862-0388
Website: endurolandcostarica.com

Table of Contents

• 1. General Information
• 2. Data Controller
• 3. Data We Collect
• 4. Legal Basis for Processing
• 5. Purposes of Processing
• 6. Data Retention
• 7. Data Sharing and International Transfers
• 8. Cookies and Tracking Technologies
• 9. Your Privacy Rights
• 10. Data Security
• 11. Children’s Privacy
• 12. Changes to this Policy
• 13. Contact Information
• 14. Governing Law
• 15. California Addendum (CCPA/CPRA)

1. General Information

1.1. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and protect personal data of users who visit our website and/or book our trips (“you,” “your”).

1.2. We process personal data lawfully, fairly, and transparently, in accordance with the General Data Protection Regulation (GDPR) and applicable U.S. privacy laws.

1.3. By accessing our website or making a booking, you acknowledge and agree to this Policy.

2. Data Controller

2.1. The data controller is EnduroLand Costa Rica 3-102-939101, Finca Tranquila, Naranjito 3km Norte de la Escuela Pública la gallega, lote 25, Puntarenas Province, Naranjito, Costa Rica Contact: info@endurolandcostarica.com.

2.2. Where required by law, we may act as a joint controller with payment processors (e.g., PayPal) for specific transaction-related data.

3. Data We Collect

• Identification Data – full name, date of birth, nationality.
• Contact Data – email address, phone number, mailing address.
• Booking Data – selected trip, travel dates, preferences.
• Payment Data – PayPal transaction ID, amount, date, currency (no credit card details stored).
• Technical Data – IP address, browser, device type, operating system, cookies.
• Communications – inquiries and correspondence submitted through forms or email.

4. Legal Basis for Processing

• Contract necessity – to manage bookings and provide services.
• Legal obligation – to comply with financial and tax laws.
• Legitimate interest – to ensure safety, prevent fraud, and improve services.
• Consent – for marketing communications and non-essential cookies.

5. Purposes of Processing

• Processing reservations and issuing confirmations.
• Communicating with customers and responding to inquiries.
• Managing payments and cancellations via PayPal.
• Improving our website’s functionality and analytics.
• Sending promotional information where consented.
• Fulfilling legal and compliance requirements.

6. Data Retention

6.1. We retain personal data only for as long as necessary to fulfill the purposes described in this Policy or as required by law.

6.2. Booking and payment data – up to 7 years for accounting and tax purposes.

6.3. Marketing data – until consent is withdrawn.

6.4. Cookie data – as determined by browser settings or until manually deleted.

7. Data Sharing and International Transfers

7.1. We do not sell or rent personal data. Limited data may be shared with trusted providers (hosting, PayPal, analytics) under strict confidentiality agreements.

7.2. We may share data with authorities where required by law.

7.3. For international transfers, we apply safeguards such as Standard Contractual Clauses (SCCs) or other lawful mechanisms.

8. Cookies and Tracking Technologies

8.1. Cookies are used to ensure website functionality, analyze traffic, and enhance user experience.

8.2. Essential cookies are required; non-essential cookies (e.g., analytics) are used only with consent.

8.3. You may disable cookies through browser settings, though some site features may be limited.

9. Your Privacy Rights

• Access – request a copy of your data.
• Rectification – correct inaccurate or incomplete data.
• Erasure – request deletion under lawful conditions.
• Restriction/Objection – limit or object to processing.
• Portability – request your data in a structured format.
• Withdraw Consent – at any time for marketing or cookies.

Requests can be sent to info@endurolandcostarica.com. We respond within 30 days (GDPR) or up to 45 days (CCPA/CPRA).

10. Data Security

10.1. We implement encryption (HTTPS/TLS), secure servers, and restricted access protocols.

10.2. No online system is entirely secure; we cannot guarantee absolute protection.

11. Children’s Privacy

11.1. Our website and services are intended for adults. Minors may participate only with guardian consent.

11.2. We do not knowingly collect data from children under 16 without parental consent.

12. Changes to this Policy

12.1. We may update this Policy periodically. The latest version will display the effective date above.

12.2. Continued use of our website after updates constitutes acceptance of the revised Policy.

13. Contact Information

Questions or requests? Contact us at info@endurolandcostarica.com or call +1 (773) 862-0388.

14. Governing Law

This Policy is governed by the laws of the Costa Rica. Disputes shall be resolved by the competent court.

15. California Addendum (CCPA/CPRA)

California residents may exercise rights to access, delete, correct, or opt-out of sharing/selling personal data under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). We do not sell personal data. Requests: info@endurolandcostarica.com.