Privacy Policy

Last updated:

Ruta Pacifico respects the privacy of everyone who visits rutapacifico.com (the "Site") or books a transfer with us. This policy explains what personal data we collect, why, how we protect it, and the rights you have under Costa Rica's Personal Data Protection Law (Law 8968).

1. Data controller

Ruta Pacifico, ICT licence #4121-2025, Liberia, Guanacaste, Costa Rica. Contact: reservations@rutapacifico.com or WhatsApp +506 7080-5578. We are responsible for handling your personal data in line with Law 8968 and its regulations.

2. What we collect

  • Booking details: first and last name, email address, phone number, pickup and drop-off addresses or hotels, flight number, dates and times, number of passengers, children's ages and any special requests.
  • Payment details are handled by our card payment provider on its own secure page. We do not store full card numbers, CVV codes or expiry dates. We keep only the transaction reference and approval code for accounting and dispute purposes.
  • Technical data: IP address, browser, device type, pages visited and approximate location, collected through cookies and analytics tools.
  • Communications: the messages you send us by email, WhatsApp or the contact form.

3. Why we use your data

  • To confirm, operate and invoice your transfer, including sharing your name and pickup details with the assigned driver.
  • To register your driver and vehicle with gated resorts and communities that require it before arrival.
  • To send you the reservation email, the payment link, pickup reminders and messages after the trip.
  • To meet our tax, accounting and ICT regulatory obligations.
  • To prevent fraud and abuse, and to improve the Site and our service.
  • Only with your consent: to send occasional offers and travel tips. You can withdraw that consent at any time.

4. Who has access

Your data is shared only with the providers we need to deliver the service: our card payment provider, the email service (Resend), the reservation database (Supabase), web analytics (Google), the driver assigned to your transfer, and the resort or gated community that asks for the driver's details before you arrive. We do not sell personal data.

5. International transfers

Some of these providers store data on servers outside Costa Rica. We work only with providers whose security standards are comparable to those required by Law 8968, including encryption in transit and at rest and restricted access.

6. How long we keep it

Booking and accounting records are kept for the period required by Costa Rican tax law. Marketing data is kept until you withdraw consent. Technical logs are kept for up to twelve months.

7. Your rights

Under Law 8968 you can ask at any time to access, correct, delete or object to the processing of your personal data, and you can withdraw consent for marketing. Write to reservations@rutapacifico.com and we will answer within the legal deadline.

8. Cookies

The Site uses functional cookies to keep your booking in progress and analytics cookies (Google Analytics) to understand how visitors use it. You can disable cookies in your browser; some parts of the booking flow may then not work fully.

9. Security

The Site is served over HTTPS, the database is encrypted, service keys have restricted access and card payments are taken on PCI-compliant pages. No system is completely immune to attack, but we apply the safeguards the industry considers standard.

10. Children

The Site is not directed at children under 13, and we do not knowingly collect data from minors except the age we need to install the right child seat, which is given by the adult who books.

11. Changes to this policy

We may update this policy from time to time. The date at the top always shows the current version, and material changes are announced by email where appropriate.