Privacy policy

This policy describes how Guanacaste Development Group handles the personal data you provide through this website (https://guanacastedevelopmentgroup.com).

1. Identity of the data controller

Guanacaste Development Group, corporate ID (to be confirmed), domiciled in Guanacaste, Costa Rica (exact address to be confirmed), telephone +506 7161550 (WhatsApp), is the controller of the personal data collected through this site. The contact email for privacy matters is to be confirmed; in the meantime, you can reach us on WhatsApp.

2. Legal framework

This policy is governed by Law No. 8968 — Protection of the Individual with regard to the Processing of their Personal Data and its Regulation (Decree No. 37554-JP), together with the applicable sector-specific rules in Costa Rica.

3. Data we collect

• Identification and contact data: first name, surname, phone and any data you include when you contact us via WhatsApp or the contact form.
• Browsing data: IP address, device type, browser and pages visited, collected through cookies and similar technologies (see Section 9).

We do not collect personal data from minors without the express consent of their parents or legal guardians.

4. Purposes of processing

• To respond to the inquiries you send us.
• To coordinate and provide the development, investment or sales services requested.
• To send you information about properties or opportunities, only if you expressly authorize it.
• To comply with legal, accounting and tax obligations.

5. Legal basis

• Your informed, express consent (Article 5 of Law 8968).
• The performance of a contract or of pre-contractual steps requested by you.
• Compliance with a legal obligation applicable to Guanacaste Development Group.

6. Retention period

We retain your data for as long as necessary to fulfill the stated purposes and the applicable legal periods. Once the purposes are exhausted and those periods have expired, your data is deleted or anonymized.

7. Recipients and data processors

To operate this site and provide our services, your data may be processed by processors such as the web hosting provider and the messaging provider (WhatsApp Business). The specific list of processors and analytics providers is to be confirmed and will be updated in this policy. Every processor accesses your data solely to provide the contracted service, under a duty of confidentiality.

8. International transfers

Some data processors may be located outside Costa Rica. Any transfer is carried out under Article 14 of Law 8968, seeking an equivalent level of protection. The details of the international processors are to be confirmed.

9. Cookies

This site uses cookies. See our Cookie policy for the categories, purposes and how to manage your consent.

10. Your rights (access, rectification, cancellation, opposition)

Under Article 7 of Law 8968, you have the right of access, rectification, updating, deletion and opposition regarding your data. To exercise them, message us on WhatsApp at +506 7161550 stating your full name and the right you wish to exercise. We have a maximum of five (5) business days to acknowledge receipt and thirty (30) calendar days to resolve your request.

11. Complaint before PRODHAB

If you believe the processing of your data does not comply with the rules, you may file a complaint with the Agency for the Protection of Residents' Data (PRODHAB), a body attached to the Ministry of Justice and Peace, based in San José, Costa Rica.

12. Data security

We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss and alteration, including encryption in transit (HTTPS) and access control.

13. Changes to this policy

We may update this policy to reflect regulatory changes or changes in our practices. The date of the latest update appears at the top of the document.

14. Contact

For any questions about this policy, message us on WhatsApp at +506 7161550.

This document is based on Costa Rica's Law No. 8968 and does not constitute legal advice. Before being considered final, it should be reviewed by the controller's legal counsel and incorporate the data marked as "to be confirmed".