Privacy Policy
Last updated: May 4, 2026
This privacy policy explains what personal data is collected when you use pavones-surf-camp.com, why it is collected, how it is used, and what rights you have over your data.
Data Controller
The data controller responsible for this website is:
Jake Carter
Pavones, Puntarenas, 00111, Costa Rica
Data We Collect
Contact form submissions
When you submit an inquiry through the contact form on this website, the following data is collected:
- Your name
- Your email address
- The content of your message
- The date and time of submission
This data is used solely to respond to your inquiry and, where relevant, to connect you with the local surf camp operators in Pavones.
Google Analytics
This website uses Google Analytics 4, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics collects the following data anonymously:
- Pages visited and time spent on site
- Approximate geographic location (country and region level only)
- Device type, browser, and operating system
- Traffic source (how you arrived on the site)
This data is used to understand how visitors interact with the website and to improve its content and performance. Google Analytics does not collect your name, email address, or any directly identifying information. Data is processed by Google in accordance with their privacy policy, available at https://policies.google.com/privacy .
Google Search Console
This website uses Google Search Console, a webmaster tool provided by Google LLC. Search Console processes aggregated data about how the site appears in Google search results. It does not collect personally identifiable information about individual visitors.
How We Use Your Data
| Data | Purpose | Legal basis |
|---|---|---|
| Contact form submissions | Responding to your inquiry and connecting you with camp operators | Consent (given at time of submission) and legitimate interest |
| Google Analytics data | Improving website content and performance | Consent (via cookie banner) and legitimate interest |
Data Retention
Contact form submissions are retained for as long as necessary to handle your inquiry and for a reasonable period thereafter. If you would like your data deleted sooner, contact info@pavones-surf-camp.com .
Google Analytics data is retained in accordance with the retention settings configured in the Google Analytics account. Google's default retention period is 14 months and can be adjusted at the account level.
Data Sharing
Your personal data is not sold to third parties.
Contact form data may be shared with local surf camp operators in Pavones solely for the purpose of responding to your trip inquiry. These operators receive only the information you provided in your message.
Analytics data is processed by Google LLC in accordance with their privacy policy and data processing terms. Google may process this data in the United States and other countries.
Cookies
Cookies are small text files stored on your device when you visit a website. This website uses the following cookies:
| Cookie type | Source | Purpose | Duration |
|---|---|---|---|
| Analytics | Google Analytics | Measures site traffic and visitor behavior anonymously | Up to 2 years |
| Preferences | Google Analytics | Remembers your cookie consent choice | Up to 1 year |
Cookie consent
On your first visit to this website, you will be asked to consent to the use of non-essential cookies via a consent banner. You may accept, decline, or adjust your preferences at any time by clicking the cookie settings link in the footer.
Google Analytics cookies will only be set after you have given your consent. If you decline, no analytics cookies will be stored on your device and no analytics data will be collected during your visit.
You can also manage or delete cookies at any time through your browser settings. Note that disabling cookies may affect the functionality of some websites. Instructions are available in the help documentation of your browser.
Your Rights
Under GDPR (European Union visitors)
If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation:
- Right of access: you may request a copy of the personal data we hold about you
- Right to rectification: you may request correction of inaccurate or incomplete data
- Right to erasure: you may request that your personal data be deleted
- Right to restriction: you may request that we limit processing of your data in certain circumstances
- Right to data portability: you may request your data in a structured, commonly used, machine-readable format
- Right to object: you may object to processing based on legitimate interest
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, contact: info@pavones-surf-camp.com
You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence. A directory of EU data protection authorities is available at https://edpb.europa.eu .
Under Costa Rica Law No. 8968 (Costa Rican residents)
Under the Ley de Protección de la Persona frente al tratamiento de sus datos personales (Law No. 8968), residents of Costa Rica have the right to access, correct, and request deletion of their personal data. Complaints may be addressed to:
PRODHAB (Agencia de Protección de Datos de los Habitantes)
Third-Party Services
This website uses the following third-party services that may process personal data:
| Service | Provider | Purpose | Privacy policy |
|---|---|---|---|
| Google Analytics 4 | Google LLC | Website analytics | https://policies.google.com/privacy |
| Google Search Console | Google LLC | Search performance monitoring | https://policies.google.com/privacy |
| Hostinger | Hostinger International Ltd. | Website hosting | https://www.hostinger.com/privacy-policy |
Applicable Law
This privacy policy is governed by the laws of Costa Rica, including Law No. 8968 on the Protection of Individuals against the Processing of their Personal Data. Users located in the European Union benefit from the protections afforded by the General Data Protection Regulation (GDPR), regardless of where the data controller is based.
Changes to This Policy
This privacy policy may be updated from time to time to reflect changes in our practices or applicable law. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.
Contact
For any questions about this privacy policy or to exercise your data rights, contact:
Jake Carter
This privacy policy was prepared as a working template and should be reviewed by a qualified legal professional before publication. Regulations vary by jurisdiction and change over time. Jake Carter and the author of this document accept no liability for reliance on this document without independent legal verification.