Skip to main content
Dante's Watersports & Tours

Privacy Policy

Last updated: October 15, 2026

Dante's Watersports & Tours ("Dante's", "we", "us") runs surf lessons, kayak, boat, waterfall and national park tours in Manuel Antonio, Costa Rica. Most of our guests travel from abroad, so this policy explains how we handle personal data under Costa Rica's Law No. 8968 on the Protection of the Person Regarding the Processing of Personal Data, the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (CCPA).

1. Who is responsible for your data

Dante's Watersports & Tours, Manuel Antonio, Quepos, Puntarenas, Costa Rica, is the data controller. Contact: danteswatersports@gmail.com · (506) 2777-4000.

2. Data we collect

  • Booking and inquiry details: name, email, phone/WhatsApp, travel dates, number of guests, tour interests and messages.
  • National Park tickets: each guest's full legal name, passport number and country of issuance, required by the park authority (SINAC) to issue tickets.
  • Safety information: age, swimming ability and relevant health conditions you choose to share so we can run activities safely. This may be sensitive data and is used only for your safety.
  • Payment information: handled by our payment and booking providers; we do not store full card numbers.
  • Technical data: device, browser and pages visited, collected through essential cookies and — only if you accept — analytics cookies. See our Cookie Policy.
  • Photos: action photos taken during lessons and tours, shared with you and, with your permission, on our website or social media.

3. Why we use it and our legal bases

  • To reply to inquiries, arrange and deliver your tours (performance of a contract / steps before a contract).
  • To purchase National Park tickets and meet Costa Rican legal and tax obligations (legal obligation).
  • To keep guests safe on the water and trails (vital interests and your explicit consent for health details).
  • To improve our website using analytics (your consent, which you can withdraw at any time).
  • To send occasional news or offers only if you opt in (consent).

We do not sell your personal information and do not share it for cross-context behavioural advertising.

4. Who we share it with

Only with parties needed to provide your experience: our guides and partner operators for the tour you booked, transport providers, SINAC for National Park tickets, payment and booking processors, email and messaging services (such as Gmail and WhatsApp), website hosting, and authorities when required by law. Each receives only what it needs.

5. International transfers

We are based in Costa Rica and some service providers operate in the United States or other countries. Where GDPR applies, transfers rely on adequacy decisions, standard contractual clauses or the transfer being necessary to perform the contract you requested.

6. How long we keep it

Booking records are kept for as long as required by Costa Rican tax and accounting rules (generally up to five years). Passport details for park tickets and health information are deleted once they are no longer needed for your tour. Inquiries that do not become bookings are deleted within 24 months.

7. Your rights

  • Everyone (Law 8968): access, rectification, deletion and to object to processing of your data.
  • EU/UK residents (GDPR): access, rectification, erasure, restriction, portability, objection, withdrawal of consent at any time, and complaint to your local supervisory authority.
  • California residents (CCPA): to know what personal information we collect, use and disclose; to delete and correct it; to opt out of sale or sharing (we do neither); to limit use of sensitive information; and not to be discriminated against for exercising these rights.

To use any right, email danteswatersports@gmail.com. We reply within the time the applicable law requires (Law 8968: 5 working days; GDPR: one month; CCPA: 45 days). In Costa Rica you may also contact the Agency for the Protection of Inhabitants' Data (PRODHAB).

8. Security

We use reasonable technical and organisational measures to protect your data, including access limited to staff who need it and encrypted connections on this website.

9. Children

Bookings for minors must be made by a parent or guardian. We do not knowingly collect data directly from children under 16.

10. Changes

We may update this policy; the "Last updated" date above shows the latest version.