How we handle your information.

Who we are

My Adventure Costa Rica is operated by Esteban Umaña Pérez, based in San José, Costa Rica. For any question about this policy, write to info@myadventurecostarica.com.

What we collect

We collect only what you choose to give us, in two situations.

When you submit an inquiry form (the bespoke form on /bespoke or the school proposal form on /schools), we receive the fields you complete — your name, email, country, dates, party composition, budget band, and any free-text notes you write. We do not collect anything from you passively until you submit.

When you book an expedition, the booking is processed by our partner WeTravel. WeTravel collects what is needed to manage a booking and payment: name, contact details, emergency contact, travel documents, and payment information. We never see your payment card data; WeTravel is PCI-DSS compliant and handles all card processing on their own infrastructure.

During the trip, our dedicated photographer takes images. You always choose your photography preference in the bespoke form (full consent, personal-images-only, or no-photography). We honor that preference. Any image of you that may be used publicly is reviewed by you before publication.

What we do not collect

We do not run behavior tracking, advertising pixels, third-party trackers, or any form of "follow you around the web" technology on this site. We do not sell, rent, or share inquiry data with marketing companies. We do not use cookies for tracking. The site loads its fonts and assets from our own infrastructure to avoid sending your IP address to third-party CDNs.

We do use Vercel Analytics, a privacy-first analytics tool that helps us understand which pages are read, from which countries, and on which device types. Vercel Analytics does not use cookies, does not collect personally identifiable information, does not track you across other websites, and does not share data with advertising platforms. It exists so we can know that, for example, "more visitors from Switzerland looked at the trail running expedition this month" — not who they were.

Why we collect what we collect

Inquiry-form data is processed for the legitimate purpose of replying to your inquiry — typically within 24 hours, personally. We retain inquiry data so we can continue the conversation, refer back to prior preferences if you contact us again, and keep an audit trail of consent for photography or marketing.

Booking data is processed under contract once you confirm a booking through WeTravel.

Marketing emails or newsletters: we do not currently send any. If we ever do, we will only send them to people who have explicitly opted in via a check-box, and every email will carry a one-click unsubscribe.

Who else sees your information

The smallest possible list.

Formspree — handles inquiry form delivery from the site to our inbox. Form data lives briefly on Formspree servers in the United States before being delivered. Formspree privacy policy.

Google (Gmail / Google Workspace) — where our inbox lives. Google privacy policy.

WeTravel — booking and payment platform. Used only when you book a trip. WeTravel privacy policy.

Vercel — hosts this website and provides privacy-first analytics. Vercel receives standard request logs (IP address, browser type) for security and operational purposes (retained briefly), plus the anonymized analytics described above. Vercel privacy policy.

No other vendor receives your inquiry data. No advertising platform, no data broker, no behavioral-targeting analytics company.

Where your information is stored

Most of our partners (Formspree, Vercel, Google, WeTravel) operate from servers in the United States. If you are submitting an inquiry from the European Union, the United Kingdom, Switzerland, or Canada, your data crosses an international border. We rely on Standard Contractual Clauses (SCCs) and our partners' equivalent safeguards for these transfers. If you would prefer to keep your inquiry off these systems, you may reach Esteban directly via WhatsApp; that conversation lives on your device and ours, not on Formspree.

How long we keep it

Inquiry data is retained for as long as the conversation is active and up to three years after the last contact, after which we delete it unless retention is required by law or by an active booking. Booking records are retained for seven years per Costa Rican commercial-record requirements. Trip photographs of you are retained per your stated photography consent — when you opt out, your images are not used publicly and are deleted from our marketing libraries within 90 days of the trip ending.

Your rights

If you are in the European Union, the United Kingdom, Switzerland, Canada, California, or any jurisdiction with comparable rights, you may request: a copy of the personal data we hold about you; correction of inaccurate data; deletion of your data ("right to be forgotten"); restriction of processing; portability of your data; or objection to a particular processing activity. These rights are honored regardless of jurisdiction — we apply the most protective standard globally.

To exercise any of these rights, email info@myadventurecostarica.com. We will respond within 30 days, usually faster.

Children

Our public-facing inquiry forms are intended for adults. The only context in which we process information about minors is via the school program path, where institutional consent is provided through the school's Global Service team under a written agreement, and where photography of students follows the school's own consent framework. We do not knowingly accept inquiries directly from anyone under 16.

Security

The site is delivered over HTTPS with HSTS enforced. Form submissions are transmitted to Formspree over TLS. Our internal accounts (Vercel, Formspree, Gmail, WeTravel, our domain registrar) are protected with two-factor authentication. We follow a principle of least privilege internally: only Esteban has administrative access to operational systems.

No system is perfect. If you suspect a security issue, please email us at info@myadventurecostarica.com. We will acknowledge within 48 hours and remediate as fast as we can.

Changes to this policy

If we change anything material, the "last updated" date at the top of this page changes, and we will note the update in plain language. If the change affects how we handle data you have already shared with us, we will email you before it takes effect.

Contact

Esteban Umaña Pérez · Founder
My Adventure Costa Rica
San José, Costa Rica
info@myadventurecostarica.com
WhatsApp: +506 8505 0909