Last updated:
Happy Routes Costa Rica (“Happy Routes”, “we”) organizes private tours and transfers in Costa Rica. This policy explains what personal data we collect on happyroutescr.com, what we use it for, who we share it with and what rights you have.
You don't need to create an account to book, schedule a call or write to us.
1. Data we collect
We only collect the data you give us or that is generated when you use the site:
- Bookings: name, email, phone or WhatsApp, country (optional), travelers' names, number of people, service, date and time, and any comments or special needs you choose to share.
- Pickup location: if a service includes pickup, the name, address and coordinates of the place you choose in the location search, plus any instructions you write.
- Planning calls: name, email, time zone and, if you provide them, phone, travel dates, number of travelers, arrival location, places you're considering, interests, approximate budget, whether you have accommodation or a car, and your comments.
- Contact form: name, email, phone (optional), subject and message.
- Payments: the payment status and transaction identifiers our payment provider returns to us. We never receive or store card numbers.
- Communications: the emails and messages you exchange with our team.
- Site usage: technical and interaction information that we use in aggregate to measure and improve the site (see section 4).
- Technical and security data: to protect the site against abuse we count attempts per IP address, stored only as an encrypted value (not the address itself), and keep technical error logs with contact details removed.
2. How we use your data
- To manage your booking: confirm it, assign a vehicle and guide, pick you up at the right place and deliver the service.
- To process payments, cancellations and refunds under our Terms.
- To prepare and hold the planning calls you schedule.
- To answer your messages and requests.
- To email you about your booking, call or request (confirmations, changes, cancellations). We don't send marketing emails.
- To understand, in aggregate, how the site is used and to improve it (analytics and measurement).
- To keep the site secure, prevent fraud and abuse, and meet legal, accounting and tax obligations.
3. Providers that process data for us
We may use external service providers to operate, maintain, protect and improve our services.
These providers may process information only when needed to provide the services we have engaged them for, and they are bound by their own contractual, security and privacy obligations.
The categories of providers we may use include:
- hosting, infrastructure and storage services;
- payment processing and management;
- email and communication services;
- mapping, location and geographic features;
- analytics and site-usage measurement tools;
- security, monitoring, fraud-prevention and error-detection services;
- technical tools needed to operate, maintain and improve the platform.
When you pay, you enter your payment details directly in our payment provider's window, which also handles them under its own privacy policy; we never receive or store card numbers. The pickup location search sends what you type to our mapping provider to suggest places.
Operating partners: when needed to deliver the service, we share the minimum data required with guides, drivers or local providers (for example, name, number of people and pickup location).
We aim to share only the information each purpose requires, and we do not allow our providers to use personal data for purposes incompatible with the service we engaged them for.
To protect the security of our technology infrastructure, we do not publish a detailed list of the providers, internal systems or technical configurations we use.
4. Site analytics and measurement
We use analytics tools to understand, in aggregate, how people use our website and to improve our services.
We may collect technical and interaction information such as:
- pages visited;
- selected language;
- general device type;
- approximate country or region;
- referring site or source;
- interactions with buttons and site features, including clicks on WhatsApp buttons;
- tour or transfer views;
- starting and progressing through the booking process;
- interactions with contact forms or planning calls;
- page load times and technical performance.
We may also measure booking-related events to understand, in aggregate, at which steps people continue or leave the process.
We do not intentionally send information such as the following to our analytics tools:
- name;
- email address;
- phone number;
- exact pickup address;
- exact coordinates;
- traveler notes or internal notes;
- booking tracking numbers, tokens or private management links;
- payment identifiers;
- private call links;
- passwords, credentials or access keys.
Page addresses are sent without the parameters or fragments that can contain private data, and only a limited set of properties is recorded for each event.
Analytics information is used to measure site performance, understand how our services are used, find opportunities for improvement and evaluate how well different features and content work. We do not use it to create individual advertising profiles, we do not use session recording or device-identification (fingerprinting) techniques, and we do not sell personal data for advertising purposes.
5. International transfers
Some of our providers may store or process data outside Costa Rica, for example in the United States. We choose them for their security measures and share only what each service needs.
7. How long we keep data
We keep booking and payment data for as long as needed to deliver the service and to meet accounting, tax and legal obligations. Contact messages and planning call details are kept while they are useful to assist you and for a reasonable period afterwards. Technical and security logs are kept only as long as needed to protect the site, and analytics information is used in aggregate and kept only as long as needed to analyze site usage. When we no longer need data, we delete or anonymize it.
8. Security
We apply technical and organizational measures to protect your data: encrypted connections, panel access only for authorized staff according to their role, and error logs without contact details. No system is completely infallible, but we work to reduce the risks.
9. Your rights
Under applicable law, including Costa Rica's Law on the Protection of Individuals regarding the Processing of their Personal Data (Law No. 8968), you can ask us to access, correct, update or delete your data, and object to certain uses. Write to bookings@happyroutescr.com; we may ask for information to confirm your identity. We must keep some data to meet legal or accounting obligations.
10. Minors
Bookings, calls and messages must be made by adults. If a trip includes minors, the adult who books gives us their details (for example, their name) and confirms they are authorized to do so.
11. Changes to this policy
We may update this policy when our services or the law change. We will publish the current version on this page with its update date.
12. Contact
If you have questions about this policy or your data, write to us at bookings@happyroutescr.com.