What we collect
When you contact us through our website, we collect your name and email address. If you take our frequency survey, we note which path resonated with you. Booking inquiries may also include your phone number and travel dates.
When you browse our site, certain information is collected automatically, including your IP address, browser type, pages visited, and how you navigate between them. This data is gathered through cookies and tracking tools, described below.
How we use it
We use your information to respond to inquiries, send updates you have requested, remember your preferences, analyze how visitors use our website, and measure the performance of our advertising.
We do not sell your personal data.
Cookies & Tracking
When you first visit our site, a consent banner asks whether you accept or decline non-essential cookies. If you decline, no tracking tools load and no data is sent to third parties.
If you accept, the following tools are activated:
Google Analytics 4 collects data about how you browse our site — pages visited, time spent, navigation patterns. This information is processed by Google and may be stored on servers in the United States.
Meta Pixel measures the effectiveness of our advertising on Facebook and Instagram. It tracks actions such as page views, form submissions, and inquiry clicks. We have enabled Advanced Matching, which means information you enter in forms (such as your name and email) may be shared with Meta in hashed form for ad measurement and audience building. Data is transmitted to Meta Platforms in the United States and Ireland.
You can change your cookie preference at any time by clearing your browser's local storage for our site, which will cause the consent banner to reappear.
Who we share data with
We share data only with service providers that help us operate — including Google (analytics and advertising), Meta (advertising measurement), Cloudbeds (booking management), Resend (email delivery), and Vercel (website hosting). Your data may be transferred to and processed in the United States.
Your rights
Depending on where you are located, you may have the right to access, correct, or delete your personal data, and to withdraw consent for tracking at any time.
These rights are provided under Costa Rica's Law No. 8968, the EU's General Data Protection Regulation (GDPR), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and applicable US state privacy laws.
To exercise any of these rights, write to us at concierge@serenanosara.com. We will respond within 30 days.
Children's privacy
Our website is not directed at individuals under 18. We do not knowingly collect personal data from children.
Changes
If we update this policy, we will note the revised date above. Continued use of our site after changes are posted indicates acceptance.