This Privacy Policy explains how ISA Travel Costa Rica S.A. (“Isa Travel”, “we”, “us”) collects, uses and protects your personal data when you visit our website or contact us. We handle your data in line with Costa Rica’s Law No. 8968 on the Protection of the Person against the Processing of Personal Data and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Who we are
The data controller is ISA Travel Costa Rica S.A., a company incorporated in Costa Rica (cédula jurídica 3-101-840323), with registered address at San Rafael Abajo, Desamparados, San José, Costa Rica. You can reach us at info@isatravelcr.com, by phone at +506 8782 2000, or on WhatsApp.
2. What information we collect
- Information you give us. When you request a quote or contact us, we collect your name, email address, phone or WhatsApp number, number of travellers, and any trip details you choose to share. If you subscribe to our newsletter, we collect your email address. If you message us on WhatsApp, we receive your number and the content of your messages.
- Information collected automatically. When you browse the site, we may collect device and usage data, such as IP address, browser type and pages viewed, through cookies and analytics tools.
We do not knowingly collect special-category data or personal data from children.
3. How we use your information
- To respond to your enquiries and prepare travel quotes;
- To arrange and deliver the services you book (transfers, day tours, multi-day packages);
- To send you our newsletter and offers, where you have subscribed;
- To operate, secure and improve our website;
- To comply with our legal, tax and regulatory obligations in Costa Rica.
4. Legal basis for processing
Where the GDPR applies (for example, visitors in the EU/EEA), we rely on: your consent (newsletter and optional cookies); the performance of a contract or steps taken at your request (handling your booking); our legitimate interests (responding to enquiries, and improving and securing the site); and compliance with legal obligations. Under Costa Rican Law No. 8968, we process your data on the basis of your informed consent and to provide the services you ask for. You can withdraw your consent at any time.
5. Cookies and analytics
We use essential cookies to run the site and, with your consent, analytics cookies (Google Analytics) to understand how the site is used and improve it. When you first visit, our cookie banner lets you accept or reject analytics cookies; essential cookies are always on because the site needs them to work. You can change your choice at any time using the “Cookie settings” link in the footer, or by blocking cookies in your browser. If you visit from the EU/EEA, analytics cookies are only set after you consent.
6. Who we share your data with
We do not sell your personal data. We share it only with:
- Service providers that help us operate, such as website hosting, email delivery, analytics and messaging, under appropriate confidentiality terms;
- Local suppliers and partners (such as drivers, guides and hotels), strictly as needed to deliver a service you have requested;
- Authorities or advisors, where we are required to do so by law.
7. International transfers
Some of our providers process data on servers located outside Costa Rica, including in the United States and the European Union. Where required, we put appropriate safeguards in place to protect your data during such transfers.
8. How long we keep your data
We keep enquiry and booking data for as long as needed to provide our services and to meet legal and accounting obligations, and we keep newsletter data until you unsubscribe. As a general rule, we retain enquiry data for up to 24 months of inactivity, after which we delete or anonymise it.
9. Security
We apply reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Your rights
Depending on where you live, you may have the right to access, correct, update or delete your personal data, to object to or restrict its processing, to data portability, and to withdraw consent. In particular:
- Costa Rica. You may exercise your rights under Law No. 8968 and, if needed, file a complaint with the Agency for the Protection of Data of the Inhabitants (PRODHAB).
- EU/EEA (GDPR). You may also lodge a complaint with your local data-protection supervisory authority.
- California (CCPA/CPRA). You may have rights to know about, delete, and opt out of the “sale” or “sharing” of personal information; we do not sell personal information.
To exercise any right, contact us at info@isatravelcr.com.
11. Payments
We do not currently take online payments through this website. Any payment for confirmed services is arranged directly with our team.
12. Third-party links
Our site may link to third-party services (such as WhatsApp or partner sites). We are not responsible for their privacy practices; please review their own policies.
13. Changes to this policy
We may update this policy from time to time. The “last updated” date above shows the latest revision, and significant changes will be highlighted on this page.
14. Contact us
Questions about this policy or your data? Email info@isatravelcr.com, call +506 8782 2000, or message us on WhatsApp. See also our Terms.