Privacy Policy and Data Use

2. Express Database Collected

During the organic use of our services (browsing and check-out), we will collect the following direct data:

• Full legal billing name.
• Mobile or telephone number for emergency contact.
• Email address for ticket crossing or service vouchers.
• Structured information on reservations, tastes, allergen requests, preferences, and historical stay status.
• Encrypted payment traceability (being executed intermediately by third-party banking gateways and PCI DSS; never fully stored on our side).

3. Declaration of Purpose of Treatment

The data entrusted to our staff is handled digitally and physically exclusively for organizational purposes such as:

• Materializing, processing, securing, and legally billing your reservation line.
• Providing a high standard and effective follow-up of the Customer Service and *Guest Management* area.
• Transmitting key tourism logistics and value information during the full experience.
• Auditing, civil obligations, central accounting of the Ministry of Finance of Costa Rica, and tax protection.

4. Applied Inviolable Principles (Law 8968)

The user transfers their prerogatives in a treatment agreement when issuing a purchase/reservation in the web system. Having subscribed to this, we fully comply with the guiding principles of the law:

• Informed Authorization: No one will be forcibly entered into commercial databases without consent or previous manifested causal transaction.
• Final Proportionality: Your data will never be used for experiments, prohibited predictive profiles, or spurious purposes outside the hospitality model described.
• Master Data Quality: We ensure that our database houses certain and accurate variables about you.
• High Computer Security: Server protocol to avoid security breaches and cybercrime attacks.

5. Zero Transfer to External Third Parties

We guarantee through this social contract that your information in the factual possession of Villa Peuchere is NOT a sellable, rentable, or sharable commercial asset.

Only exceptions: Issuing banks or payment software for gateway commissions, or official coercive instruction by the Judicial Branch (O.I.J.), Prosecutor's Office, courts, or another entity by prevailing mandate.

7. Temporary Disposition and Historical Archive

Unless your figure dictates a higher accounting justified history (around 5 years according to CR Taxation), registries will be maintained until the relevant commercial consumption.

8. Additional Technology (“Cookies” & Vercel Logs)

We require the silent technological injection of cache protocols known as *cookies* and temporary web session monitors to trace native behaviors within our site and prevent platform errors. The customer at all times enjoys global control of their browser or device preventing the function.