In plain terms: we collect what we need to take your booking and look after you while you're here. We don't sell your information, we don't run advertising trackers on this website, analytics run only if you agree to them, and you can ask us to delete what we hold at any time.
This website is operated by El Castillo Boutique Luxury Hotel, Calle Perezoso, Ojochal de Osa, Puntarenas, Costa Rica. We are the data controller for the information described here. For anything to do with your personal data, write to [email protected].
Reservations are handled by our booking provider, SimpleBooking, on their own system. That process collects your name, contact details, arrival and departure dates, number of guests, payment card details and any preferences or requests you add. We never see or store your full card number — that stays with the payment processor.
If you use the enquiry form, email us, or message us on WhatsApp, we receive whatever you choose to send: usually your name, email address, phone number and the content of your message. WhatsApp messages are delivered through WhatsApp's own service and are subject to their privacy terms as well as ours.
We keep a guest record covering your stay: dates, room, dietary requirements or allergies you've told us about, activities we booked on your behalf, and charges to your room. Costa Rican law also requires us to record certain identity details for guests.
Our hosting provider records standard server logs — IP address, browser type, pages requested, timestamps — for security and troubleshooting. We do not use Google Analytics, advertising pixels, or any other visitor-tracking service on this site.
We do not sell personal information, and we do not share it for anyone else's marketing.
Only the parties needed to give you the stay you booked:
Because these providers operate internationally, your information may be processed outside Costa Rica, including in the United States and the European Union.
We use Google Analytics, loaded through Google Tag Manager, to see how this website is used. It is switched off until you agree. Nothing is requested from Google and no analytics cookie is created unless you press Accept on the cookie bar. Our legal basis is your consent, and you can withdraw it at any time using the Cookie settings link at the foot of any page.
If you accept, Google sets cookies recording a randomly generated identifier, the pages you view, roughly which region you are in, and the device and browser you use. We read it only in aggregate, to see which pages are worth improving. We do not use it for advertising, and ad personalisation is switched off. Google processes this data on our behalf, including in the United States, and retains it for 14 months.
Whichever you choose, the site stores small preferences in your own browser — whether you have collapsed the availability bar, your language choice, and a record of your cookie decision. These never leave your device and we cannot read them.
Our booking provider sets its own cookies once you move to the reservation system, and you can clear or block cookies at any time in your browser settings.
Wherever you live, you can ask us to show you what we hold, correct it, delete it, or stop using it for marketing. Write to [email protected] and we will respond within 30 days.
If you are in the European Union or the United Kingdom, the GDPR gives you the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your national data protection authority.
If you are in Costa Rica, Law 8968 gives you equivalent rights, and you may contact the Agencia de Protección de Datos de los Habitantes (PRODHAB).
If you are in California, you may request disclosure or deletion of your personal information and may not be discriminated against for asking. We do not sell personal information as that term is defined under the CCPA.
We use encrypted connections for this website and our booking system, restrict guest records to staff who need them, and never take card details by email. No system is perfect, but if a breach ever affected your information we would tell you and the relevant authority promptly.
El Castillo does not accommodate guests under 16 and this website is not directed at children. We do not knowingly collect information about them.
If we change this policy we will update the date at the top of the page. Material changes will be flagged on the site.
El Castillo Boutique Luxury Hotel
Calle Perezoso, Ojochal de Osa, Puntarenas, Costa Rica
[email protected] · +506 8520-1031