Privacy Policy
What we collect when you use this site, why, and what you can ask us to do with it.
Last updated
Who we are
This site is run by WildRoots Property Management, the trading name of 3-101-836967 Sociedad Anónima, a company registered in Costa Rica with cédula jurídica 3-101-836967 and based in Bahía Ballena, Uvita, Osa, Puntarenas. We look after vacation and long-term rental homes on the South Pacific coast and take enquiries for them here.
For anything in this policy, write to info@wildrootscr.com or message us on WhatsApp at +506 8734-7178.
What we collect when you send an enquiry
When you send an enquiry from a home's page or from the contact page, we receive what you type: your name, your email address, your phone or WhatsApp number if you give one, and your message. An enquiry about a home also carries the home, the dates and the number of guests you chose. An enquiry from a homeowner also carries where the house is.
With it we record the page the enquiry was sent from and the type of browser used. We do not store your IP address. Where a record of it is kept at all, it is a one-way scrambled value that cannot be turned back into the address and is used only to spot abuse of the form.
We use this to answer you, to confirm availability and price, and to arrange a stay or a management agreement if you want one. We do not use it for anything else, and we do not sell it or pass it to advertisers.
If you enquire about a home we offer on behalf of its owner, which its page states, we pass your enquiry to that owner so that they can answer you.
If you message us on WhatsApp instead, that conversation takes place on WhatsApp and is also subject to its own privacy terms.
When you stay in a home we manage
The owner of a home we manage has a private account with us in which they see their home's bookings. For your stay they see its dates, the number of guests, where it was booked (for example Airbnb or direct with us) and your first name. They do not see your surname, your contact details or what you paid.
What happens when you only browse
You can read every page without telling us who you are. Choosing dates on a calendar sends those dates and the guest count to our booking system to check availability and price; no name or contact detail goes with them.
Like every website, the servers that deliver these pages keep short technical logs (for example the address a request came from and the page requested) for security and to keep the site running.
Analytics and cookies
We would like to know which pages people find useful, and we use Google Analytics for that. It is switched off until you choose Allow on the banner at the foot of the page. If you choose No thanks, nothing is loaded and the site works exactly the same.
If you allow it, Analytics counts the pages you view and records that an enquiry was sent or a WhatsApp link was used, and from which page. It never receives your name, your contact details or anything you wrote.
Your choice is remembered in your own browser, not on our servers. To change it, clear this site's stored data in your browser settings and the banner will ask again.
The enquiry forms are protected from automated spam by Cloudflare Turnstile. To tell a person from a program it looks at technical signals from your browser and may set a short-lived cookie. It is not used for advertising.
Who else handles your information
We use a small number of service providers to run the site. They act on our instructions and only handle what their job needs:
- Vercel hosts the website.
- Supabase stores the enquiries, in a database in the United States.
- Resend delivers the email that tells our team a new enquiry has arrived.
- Cloudflare provides the spam check on the forms.
- Google provides analytics, only if you allow it, and the email service our team answers you from.
- GitHub holds a private weekly backup copy of the enquiries, which is deleted automatically after 90 days.
- Hostaway is our booking system. It supplies availability and prices, runs the checkout that "Book now" opens at book.wildrootscr.com, and holds your details once a stay is booked.
- ChargeAutomation and Tilopay take card payments for stays booked direct with us. Your card details go to them, not to us.
Where it is kept and for how long
Several of these providers keep data in the United States or other countries outside Costa Rica. By sending an enquiry you agree to it being stored there.
We keep an enquiry for as long as it takes to answer it and deal with what follows. If you become a guest or a client, we keep what the stay or the agreement requires for as long as the law requires. You can ask us to delete an enquiry at any time.
Your rights
You can ask us what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Write to info@wildrootscr.com and we will answer within the time the law sets.
These rights are yours under Costa Rica's Law 8968 on the protection of personal data. If you live in the European Union or the United Kingdom, you have the equivalent rights under the data protection law there. If you are not satisfied with our answer, you can complain to Costa Rica's data protection agency, PRODHAB, or to the authority where you live.
Children
This site is for adults arranging a stay or the management of a home. We do not knowingly collect information from anyone under 18.
Changes to this policy
If what the site collects changes, this page changes with it and the date at the top is updated. Anything significant will be made clear on the site.
See also our terms of use.