Privacy Policy

Drake Bay Greenleaf Lodge (“we”, “our”, “us”) is committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy explains what data we collect, how we use it, how we protect it, and the rights you have regarding your personal information.

By using our website drakebaygreenleaf.com, submitting a contact form, or making a reservation, you agree to the practices described in this Privacy Policy.

Drake Bay Greenleaf Lodge Drake Bay, Osa Peninsula, Costa Rica
Email: [email protected]
Phone: +506 8826‑8024

We are the data controller responsible for processing your personal information.

We collect personal and technical information to operate our website, respond to inquiries, and provide lodging and tour services.

1. Information You Provide Directly
   • Full name
   • Email address
   • Phone number
   • Message content (contact form)
   • Reservation details (dates, number of guests, preferences)
   • Tour inquiries (birdwatching, hiking, snorkeling, etc.)
2. Information Collected Automatically
   When you visit our website, we automatically collect:
   • IP address
   • Browser type and version
   • Device type
   • Operating system
   • Pages visited
   • Time spent on pages
   • Referring URLs
   • General location (non‑precise)
3. Cookies and Tracking Technologies
   We use cookies and similar technologies to:
   • Improve website performance
   • Analyze traffic (Google Analytics)
   • Measure marketing effectiveness (Meta Pixel)
   • Remember user preferences
   • Support booking functionality

You can disable cookies through your browser settings.

We use your information for the following purposes:

1. To Provide Services
   • Responding to contact form submissions
   • Processing room or bungalow reservations
   • Coordinating tours and activities
   • Sending booking confirmations and updates
2. To Improve Our Website
   • Analyzing usage patterns
   • Enhancing user experience
   • Fixing technical issues
3. For Marketing and Communication
   • Sending relevant information about your reservation
   • Showing personalized ads (if you consent)
   • Measuring advertising performance
4. Legal and Security Purposes
   • Preventing fraud
   • Complying with legal obligations
   • Protecting our website and users

If you are located in the European Union, we process your data under the following legal bases:

• Consent: When you submit a form or accept cookies
• Contract: When you make a reservation or request a service
• Legitimate Interest: Website analytics, security, and service improvement
• Legal Obligation: When required by law

We do not sell your personal information.
We may share data with trusted third‑party providers who help us operate our business:

1. Service Providers
   • Website hosting
   • Email service providers
   • Booking and reservation systems
   • Payment processors (if applicable)
2. Analytics & Marketing Tools
   Google Analytics
   • Meta Pixel (Facebook/Instagram Ads)
   • These providers may process data outside Costa Rica.

We retain your information only as long as necessary:

• Contact form submissions: 12 months
• Reservation data: as required by Costa Rican law
• Analytics data: 26 months
• Cookies: according to browser settings

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion
• Withdraw consent
• Request a copy of your data
• Object to certain processing activities

To exercise your rights, contact us at:
[email protected]

We take reasonable steps to protect your information, including:

• SSL encryption
• Restricted access to personal data
• Secure hosting environment
• Regular security monitoring

However, no system is 100% secure.

Your information may be processed in countries outside Costa Rica, including the United States or Europe, depending on the location of our service providers. We ensure that appropriate safeguards are in place.

Our website may contain links to third‑party sites. We are not responsible for their privacy practices.

We may update this Privacy Policy periodically. The “Last updated” date will reflect the most recent changes.

If you have questions about this Privacy Policy or how we handle your data, contact us at: [email protected]