Privacy Policy

Last updated: May 25, 2026

PlayaCR — a Costa Rica concierge service operated by Rob & Jenny Cosman in Tamarindo, Guanacaste, Costa Rica respects your privacy. This policy explains what information we collect, how we use it, and what rights you have. Plain language, no legalese where we can help it.

1. Who we are

PlayaCR — a Costa Rica concierge service operated by Rob & Jenny Cosman in Tamarindo, Guanacaste, Costa Rica. Site: playacr.com. For any privacy question, contact us at jonescosmanca@gmail.com.

2. What information we collect

Information you give us directly

When you fill out a form on the site (the Plan My Trip quiz, the villa application, an event inquiry, or an email to us), we collect:

  • Your name and email address
  • Phone or WhatsApp number (if provided)
  • Trip details you share (dates, group size, preferences, budget range, special requests, dietary notes)
  • For villa owner applications: villa details, ownership confirmation, photos you submit

This information is stored on our WordPress hosting (Hostinger) in the site database.

Information collected automatically

  • Analytics: via Google Analytics 4 (GA4), we collect pages visited, time on page, approximate location (city/region, derived from IP), device type, browser, and referral source. IP addresses are anonymized before storage by GA4.
  • Server logs: our hosting provider (Hostinger) keeps access logs (IP address, user agent, request path, timestamp) for security and operational purposes.
  • Cookies: see our Cookie Policy for the specific cookies set on your device.

3. How we use your information

  • To plan and book your Costa Rica trip – that is the main reason you contacted us
  • To communicate with you (email, WhatsApp) about your trip
  • To share necessary booking information with the operators we book on your behalf (a villa owner, fishing captain, chef, etc.) – only the details they need (your name, group size, date, special requests)
  • To improve the site – what content is useful, where people land, where they bounce – via aggregated analytics
  • To comply with legal obligations and respond to lawful requests

4. Who we share information with

We are a small operation. We do not sell, rent, or trade your personal information. We share it only with:

  • Operators we book on your behalf: the specific villa owner, captain, chef, or service provider you have engaged – only the details needed to deliver the service
  • Service providers we use: Hostinger (hosting), Google (analytics + email via Gmail)
  • Legal compliance: if required by law or to protect our rights

We do not share with advertisers, data brokers, or marketing networks.

5. Where your information is processed

Your data may be processed in Costa Rica (where we are based) and the United States (where Google Analytics, Gmail, and our hosting provider operate servers). Both jurisdictions are deemed adequate for our purposes; we use established service providers with their own data protection practices.

6. How long we keep your information

  • Form submissions and trip planning records: retained while we are planning your trip + up to 2 years afterwards for accounting, tax, and dispute resolution reasons
  • Analytics data: Google Analytics retains user-level data for 14 months by default
  • Server logs: rotated by the hosting provider, typically within 30-90 days
  • Earlier deletion: you can request deletion of your data sooner – see Section 7

7. Your rights

You have the following rights with respect to your personal information. To exercise any of them, email jonescosmanca@gmail.com from the email address you used with us. We will respond within 30 days.

Everyone

  • Access the information we hold about you
  • Correct inaccurate or incomplete information
  • Delete your information (subject to our legal obligation to retain certain records)
  • Withdraw consent at any time

European Union / United Kingdom (GDPR)

If you are in the EU or UK, you additionally have the right to: data portability (receive your data in a machine-readable format), restriction of processing, object to processing, and lodge a complaint with your local data protection authority. Our legal basis for processing your data is your consent (forms) and our legitimate interest (analytics and security).

California (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect about you, the right to delete it, the right to correct it, and the right to opt out of the “sale” or “sharing” of your personal information. We do not sell or share your personal information for cross-context behavioral advertising. We will not discriminate against you for exercising these rights.

Costa Rica (Law 8968)

Costa Rica’s Personal Data Protection Law (Ley de Protección de la Persona frente al tratamiento de sus datos personales, No. 8968) grants you the rights of access, rectification, cancellation, and opposition (ARCO) over your personal data. You may exercise these rights by contacting us at the address above.

8. Cookies

We use a small number of cookies. See our Cookie Policy for the list and instructions to manage your preferences. You can change your cookie choices at any time using the “Cookie Preferences” link in the site footer.

9. Children

This site is not directed at children under 13 (United States) or under 16 (European Union). We do not knowingly collect information from children. If you believe a child has provided us with information, contact us at jonescosmanca@gmail.com and we will delete it.

10. Security

We protect your information with reasonable technical and organizational measures: HTTPS encryption for the site, a managed and patched hosting environment, restricted administrative access, and standard WordPress security practices. No internet transmission is 100% secure, so we cannot guarantee absolute security.

11. Third-party links

This site links to external websites (vendor sites, social media, Google Maps, partner properties). Once you click an external link, you are subject to that site’s privacy policy, not ours. We are not responsible for the content or practices of those sites.

12. How we make money – disclosure

We are paid by operators, not by you.

PlayaCR is a concierge service. When we book an experience or stay for you – a fishing charter, catamaran, private chef, villa, etc. – the operator pays us a referral or commission fee out of their margin. You pay the operator directly at the same rate you would pay if you booked yourself. We are transparent about this and we do not steer you to vendors based on commission size. Our standard villa referral fee is 10%. Our standard activity referral fees vary by operator.

13. Changes to this policy

If we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, post a notice on the site or email people whose information we hold. Continued use of the site after a change means acceptance of the revised policy.

14. Contact

For any privacy question, request, or complaint: jonescosmanca@gmail.com. We aim to respond within 30 days.

If you have questions about this policy, email us at jonescosmanca@gmail.com.