Book Now

Privacy Policy

Last updated: July  2026

This Privacy Policy explains how EMBARCACIONES PANASH LIMITADA, trading as Panache Sailing (“Panache Sailing”, “we”, “us”, “our”), collects, uses, shares and protects your personal data when you visit panachesailing.com, contact us, or book a tour with us.

We sail from Marina Flamingo, Guanacaste, Costa Rica, and we welcome guests from around the world. This policy is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and of Costa Rica’s Law No. 8968 on the Protection of Persons with regard to the Processing of their Personal Data.

1. Who we are

The data controller responsible for your personal data is:

EMBARCACIONES PANASH LIMITADA Corporate ID (cédula jurídica): 3102494898 Marina Flamingo, Guanacaste, Costa Rica Privacy contact: info@panachesailing.com

For any question or request about your data, write to info@panachesailing.com. We answer privacy requests from the same address.

2. What we collect

  • Identity and contact data: name, email address, phone or WhatsApp number, country of residence, and the name of your hotel or pickup point.
  • Booking data: tour selected, date, number of guests, ages of children travelling with you, pickup location, and the language you prefer on board.
  • Dietary and health notes: only the information you choose to send us, such as a food allergy, a dietary preference, a mobility need, or a medical condition our crew should know about for your safety.
  • Payment data: our booking platform and its payment provider process your card. We receive confirmation that a payment was made, along with the amount and the last digits of the card. We never see or store full card numbers.
  • Messages: the content of your emails, contact form submissions and WhatsApp conversations with us.
  • Reviews and content you publish: what you post about us on review sites and social media, and any photo or comment you send us directly.
  • Technical data: IP address, device type, browser, operating system, pages visited, time on site and the site or search that brought you here, collected through cookies and similar technologies.

We do not ask for and do not want any data beyond this. Please do not send us documents such as passports or ID cards unless we ask you for them for a specific legal reason.

3. Why we use your data, and our legal basis

What we do

Data used

Legal basis

Confirm your booking, arrange your hotel pickup, and contact you before, during or after your sailing

Identity, contact, booking

Performance of a contract, Art. 6(1)(b) GDPR

Answer your questions by email, contact form or WhatsApp

Identity, contact, messages

Legitimate interest, Art. 6(1)(f): replying to people who contact us

Prepare food safely and adapt the tour to allergies, dietary needs or a medical or mobility note

Dietary and health notes

Your explicit consent, Art. 9(2)(a) GDPR, given when you send us the note. We use it only to run your tour safely

Send you news, offers or seasonal updates by email

Contact

Your consent, Art. 6(1)(a). You can withdraw it at any time

Issue invoices and meet tax and accounting duties in Costa Rica

Booking, payment confirmation

Legal obligation, Art. 6(1)(c)

Measure how the site is used and improve it, and show relevant ads

Technical

Your consent, Art. 6(1)(a), given through our cookie banner

Publish photos or video that show guests on board

Images

Your consent, Art. 6(1)(a). See section 5

Keep the site and our bookings secure and prevent fraud

Technical, booking

Legitimate interest, Art. 6(1)(f)

We do not make any decision about you by automated means alone, and we do not profile you in a way that produces legal effects.

4. Booking and payment

Bookings are taken through our booking platform, [PEEK PRO / PLATAFORMA], which acts as our processor and handles your reservation and payment under its own security and privacy terms. Card details go directly to the payment provider. We do not receive, process or store full card numbers, and we never take card details by email or WhatsApp. If anyone asks you for card details through those channels, it is not us.

5. Photos and video on board

Our crew and our photographers sometimes take photos and video during a sailing, and we may use them on our website and social media. If you prefer not to appear, tell any crew member on the day or write to info@panachesailing.com, and we will not use images in which you are identifiable. If an image of you is already published and you ask us to remove it, we will do so.

6. Who we share your data with

We do not sell your personal data, and we do not share it for anyone else’s marketing.

We share only what is needed, and only with:

  • our booking and payment platform;
  • our transport partners, who receive your name, pickup point and time so they can collect you;
  • our crew, who receive the guest list and any safety relevant note for the day;
  • our email, hosting, messaging and analytics providers;
  • our accountants, and any authority we are legally required to report to.

Each of these acts under a contract or terms that require them to protect your data and use it only for the purpose we agreed.

7. International transfers

We are based in Costa Rica and several of our providers store data in the United States or the European Union. This means your data may be transferred outside your country and outside the European Economic Area. Where such transfers involve personal data of people in the EEA or the United Kingdom, they rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision covering the destination country. For transfers from Costa Rica, we apply the conditions set by Law No. 8968.

8. How long we keep your data

  • Booking and invoicing records: for the period required by Costa Rican tax and accounting law, currently [X] years after the tour.
  • Enquiries that do not become bookings: up to [24] months, so we can pick up the conversation if you come back to us.
  • Marketing contacts: until you unsubscribe or ask us to delete you, and for a short period afterwards so we do not contact you again by mistake.
  • Dietary and health notes: deleted after your tour, unless they form part of an incident report we must keep.
  • Analytics data: for the retention period set in our analytics tool, currently [14] months.

When a period ends we delete the data or anonymise it so it can no longer identify you.

9. How we protect your data

We keep your data on services that require individual accounts and passwords, we limit access to the people who need it to run your tour, and we ask our providers to maintain security measures appropriate to the data they handle. No system is perfect, but if a breach ever affected your rights we would notify you and the relevant authority as the law requires.

10. Your rights

Wherever you live, you can ask us to:

  • Access the personal data we hold about you and get a copy of it.
  • Correct anything that is wrong or incomplete.
  • Delete your data, when we no longer need it for the purposes above.
  • Restrict or object to how we use it, including objecting to direct marketing at any time.
  • Receive your data in a portable, machine readable format, or have us send it to another provider.
  • Withdraw your consent at any time, for marketing, for cookies, or for the use of your image. Withdrawing consent does not affect what we did lawfully before.

To exercise any of these, email info@panachesailing.com. We reply free of charge and within one month, and we may ask you to confirm your identity first so we do not give your data to someone else.

If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your national data protection supervisory authority.

11. If you are in Costa Rica

Costa Rican residents hold the same rights of access, rectification, deletion and objection under Law No. 8968 and its regulation (Executive Decree 37554-JP), and may file a complaint with the Agencia de Protección de Datos de los Habitantes (PRODHAB), part of the Ministry of Justice and Peace. Requests for access are answered within the time limits set by that law.

12. If you are in the United States, Canada or elsewhere

We apply the standards described above to every guest, wherever you book from. We do not sell or share your personal data as those terms are used in United States privacy laws. To make any request about your data, use the same address: info@panachesailing.com.

13. Cookies and analytics

Our site uses cookies and similar technologies. Necessary cookies make the site and the booking process work, and they are always active. Analytics and marketing cookies are only set if you accept them in our cookie banner.

We currently use: [GOOGLE ANALYTICS 4 / GOOGLE TAG MANAGER / META PIXEL / OTRAS].

You can accept or reject non essential cookies when you first arrive, and change your choice at any time from the cookie settings link in our footer. You can also block or delete cookies in your browser settings, though parts of the site may then stop working properly.

14. Children

Our site and our booking process are meant for adults. Children are very welcome on board, but their booking must be made by a parent or guardian, who provides any information about them. We do not knowingly collect data directly from children. If you believe a child has sent us personal data, write to info@panachesailing.com and we will delete it.

15. Changes to this policy

If we change how we handle your data, we will update this page and change the date at the top. If the change is significant, we will make it visible on the site or tell you by email.

16. Contact

Questions about this policy or about your data? Email info@panachesailing.com or write to us at Marina Flamingo, Guanacaste, Costa Rica.