In short
- We only ask for what your booking needs: your name, phone number, email (optional) and delivery location.
- We use it to manage your rental and arrange delivery. We do not sell it or use it for advertising.
- If you pay online, your card details go from your browser straight to Tilopay: our server never receives or stores them.
- We use no tracking cookies and no analytics tools.
- You can ask to see, correct or delete your data at any time.
This summary is only a guide. The full text below is what applies.
Who is responsible for your data
The customer database is controlled by Classic Car Costa Rica, operating in Tamarindo, Guanacaste, Costa Rica.
You can reach us on WhatsApp, at +506 7174-7372.
This policy complies with Costa Rica’s Law No. 8968 on the Protection of Individuals Regarding the Processing of their Personal Data, and its regulations.
What we collect
When you book, you give us:
- Full name and phone number: required, because we cannot confirm or arrange your booking without them.
- Email address: optional.
- Delivery location: the hotel, condo or address where we bring the cart.
- Booking details: dates, cart, price and status.
- Online payment details, if you choose to pay online: the order number, amount, outcome and authorisation code Tilopay reports to us.
At delivery we check your driver’s license and ID or passport to confirm the requirements are met. We do not keep copies in this system.
We do not collect sensitive data. You enter your card details either on Tilopay’s page or in a payment form inside our page. That form is driven by Tilopay’s payment script, which loads in your browser from Tilopay’s servers and sends the details directly to Tilopay. Our own code does not read those fields, and your card details never reach our server.
What we use it for
- To confirm and manage your booking.
- To process your online payment, if you choose that option.
- To contact you by phone or WhatsApp about delivery, pick-up or any change.
- To recognise you if you book again, so you don’t have to repeat your details.
- To meet our legal, accounting and tax obligations.
We do not use your data to send you advertising, and we do not sell it or share it with third parties for commercial purposes.
Your consent
We process your data with your free, express and informed consent, as Article 5 of Law No. 8968 requires. You give it by ticking the acceptance box on the booking form, and we record the date and the version of this policy you accepted.
You can withdraw your consent at any time through the same contact channels. Withdrawal does not apply retroactively, and if you withdraw before the rental, we will not be able to complete the booking.
Who we share it with
Only the Classic Car staff who manage bookings see your data. The following may also be involved:
- The hosting provider this system runs on, which stores the data on our behalf.
- Tilopay, which processes online payments: if you pay that way, it receives your name, email, phone number, the delivery location as billing address, the amount and the order number. It receives your card details directly from your browser, either on its own page or through its payment form inside ours, under its own terms.
- WhatsApp (Meta), when you message us or we message you there, under its own terms.
- Competent authorities, only when a law or court order requires it.
How long we keep it
We keep your data for as long as our business relationship lasts and for as long as our legal, accounting and tax obligations require. After that we delete or anonymise it.
Your rights
Under Article 7 and following of Law No. 8968, you can:
- Access the data we hold about you.
- Correct data that is incomplete or wrong.
- Delete data that is no longer needed, unless the law requires us to keep it.
- Withdraw your consent.
To exercise these rights, contact us through any of our channels with your name and the phone number you booked with. This is free, and we will reply within the time limits set by law.
If you believe we have not handled your request properly, you can file a complaint with Costa Rica’s data protection agency (PRODHAB).
Security
We take reasonable technical and organisational measures to protect your data: an encrypted connection, password-protected panel access for authorised staff only, and a log of who changes each booking.
Minors
Only people over 21 can make a booking. We do not knowingly collect data from minors.
Changes to this policy
If the way we handle your data changes, we will update this page and its date. If the change affects the purposes you consented to, we will ask for your consent again.
See also our Terms and Conditions.