Privacy Policy

Last updated: August 2026

This Privacy Policy explains how DISTRITO SIETE S.A., trading as La Fortuna Adventures (“La Fortuna Adventures”, “we”, “us”, “our”), collects, uses, shares and protects your personal data when you visit [lafortunaadventures.com], contact us, or book a tour with us.

We operate adventure tours in La Fortuna, near Arenal Volcano, Costa Rica, and we welcome guests from around the world. This policy is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and of Costa Rica’s Law No. 8968 on the Protection of Persons with regard to the Processing of their Personal Data.

1. Who we are

The data controller responsible for your personal data is:

DISTRITO SIETE S.A., trading as La Fortuna Adventures Corporate ID (cédula jurídica): 3-101-772807 [DIRECCIÓN EXACTA], La Fortuna, San Carlos, Alajuela, Costa Rica Privacy contact: 

For any question or request about your data, write to info@goadventurepark.com. We answer privacy requests from the same address.

2. What we collect

Identity and contact data: name, email address, phone or WhatsApp number, country of residence, and the name of your hotel or pickup point in La Fortuna.

Booking data: tour selected, date and departure time, number of guests, ages of children travelling with you, pickup location, and the language you prefer with your guide.

Safety and participation data: the information we need to run an activity safely and to confirm you meet the requirements for it. Depending on the tour, this may include your age, your weight where an equipment or harness limit applies, whether you are pregnant, and any injury, medical condition, mobility need or physical limitation you choose to tell us about. You give us this data when you book, when you sign our participation waiver, or when you tell a guide on the day.

Waiver and emergency data: the signed liability waiver and safety briefing acknowledgement required before you take part, together with the name and phone number of the emergency contact you provide on it.

Payment data: our booking platform and its payment provider process your card. We receive confirmation that a payment was made, along with the amount and the last digits of the card. We never see or store full card numbers. If you choose to pay by bank transfer or SINPE Móvil, we also receive the payment reference and the account or phone number that sent it. 

Messages: the content of your emails, contact form submissions and WhatsApp conversations with us.

Reviews and content you publish: what you post about us on review sites and social media, and any photo or comment you send us directly.

Photos and video taken during your tour: images captured by our guides or photographers while you take part. See section 6.

Technical data: IP address, device type, browser, operating system, pages visited, time on site and the site or search that brought you here, collected through cookies and similar technologies.

We do not ask for and do not want any data beyond this. Please do not send us documents such as passports or ID cards unless we ask you for them for a specific legal reason.

3. Why we use your data, and our legal basis

What we do	Data used	Legal basis
Confirm your booking, arrange your hotel pickup, and contact you before, during or after your tour	Identity, contact, booking	Performance of a contract, Art. 6(1)(b) GDPR
Answer your questions by email, contact form or WhatsApp	Identity, contact, messages	Legitimate interest, Art. 6(1)(f): replying to people who contact us
Confirm you meet the age, weight and physical requirements of an activity, adapt the tour to a medical or mobility note, and respond in an emergency	Safety and participation, waiver and emergency data	Your explicit consent, Art. 9(2)(a) GDPR, given when you send us the note or sign the waiver. We use it only to run your tour safely. Also vital interests, Art. 6(1)(d), in a medical emergency
Keep a record of signed waivers and safety briefings	Waiver data	Legitimate interest, Art. 6(1)(f), and legal obligation where insurance or tourism regulation requires it
Send you news, offers or seasonal updates by email	Contact	Your consent, Art. 6(1)(a). You can withdraw it at any time
Issue invoices and meet tax and accounting duties in Costa Rica	Booking, payment confirmation	Legal obligation, Art. 6(1)(c)
Measure how the site is used and improve it, and show relevant ads	Technical	Your consent, Art. 6(1)(a), given through our cookie banner
Publish photos or video that show guests on tour	Images	Your consent, Art. 6(1)(a). See section 6
Keep the site and our bookings secure and prevent fraud	Technical, booking	Legitimate interest, Art. 6(1)(f)

We do not make any decision about you by automated means alone, and we do not profile you in a way that produces legal effects.

4. Booking and payment

Bookings are taken through our booking platform, Peek Pro, which acts as our processor and handles your reservation and payment under its own security and privacy terms. Card details go directly to the payment provider. We do not receive, process or store full card numbers, and we never take card details by email or WhatsApp. If anyone asks you for card details through those channels, it is not us.

5. Safety requirements and waivers

Our activities involve heights, water, animals and physical effort. Before you take part, we ask you to confirm that you meet the requirements of the activity you booked and to sign a participation waiver.

We use this information only to decide whether an activity is safe for you, to adapt it where we can, and to act if something happens during the tour. We share safety relevant notes with the guides running your tour and, in an emergency, with medical services. We do not use it for marketing and we do not share it with anyone else.

If you do not want to give us this information, we may not be able to let you take part in an activity, for your own safety.

6. Photos and video on tour

Our guides and our photographers take photos and video during our tours, and we may use them on our website and social media. Photos of your tour may also be offered to you for purchase or download.

If you prefer not to appear, tell any guide on the day or write to [privacy@lafortunaadventures.com], and we will not use images in which you are identifiable. If an image of you is already published and you ask us to remove it, we will do so.

Photographs taken during the Maleku cultural experience are subject to the wishes of the community members present. Our guides will tell you when photography is welcome and when it is not.

7. Who we share your data with

We do not sell your personal data, and we do not share it for anyone else’s marketing.

We share only what is needed, and only with:

• our booking and payment platform;
• our transport partners, who receive your name, pickup point and time so they can collect you;
• our guides and operations team, who receive the guest list and any safety relevant note for the day;
• the partner property where your tour ends with pool access, which receives the number of guests and, where required, the name of the booking so you can be admitted;
• our email, hosting, messaging and analytics providers;
• our accountants, our insurers, and any authority we are legally required to report to.

Each of these acts under a contract or terms that require them to protect your data and use it only for the purpose we agreed.

8. International transfers

We are based in Costa Rica and several of our providers store data in the United States or the European Union. This means your data may be transferred outside your country and outside the European Economic Area. Where such transfers involve personal data of people in the EEA or the United Kingdom, they rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision covering the destination country. For transfers from Costa Rica, we apply the conditions set by Law No. 8968.

9. How long we keep your data

• Booking and invoicing records: for the period required by Costa Rican tax and accounting law, currently [X] years after the tour.
• Signed waivers and incident reports: for [X] years after the tour, as required by our insurance and by the limitation periods that apply to injury claims.
• Enquiries that do not become bookings: up to [24] months, so we can pick up the conversation if you come back to us.
• Marketing contacts: until you unsubscribe or ask us to delete you, and for a short period afterwards so we do not contact you again by mistake.
• Safety and medical notes: deleted after your tour, unless they form part of an incident report we must keep.
• Analytics data: for the retention period set in our analytics tool, currently [14] months.

When a period ends we delete the data or anonymise it so it can no longer identify you.

10. How we protect your data

We keep your data on services that require individual accounts and passwords, we limit access to the people who need it to run your tour, and we ask our providers to maintain security measures appropriate to the data they handle. No system is perfect, but if a breach ever affected your rights we would notify you and the relevant authority as the law requires.

11. Your rights

Wherever you live, you can ask us to:

• Access the personal data we hold about you and get a copy of it.
• Correct anything that is wrong or incomplete.
• Delete your data, when we no longer need it for the purposes above.
• Restrict or object to how we use it, including objecting to direct marketing at any time.
• Receive your data in a portable, machine readable format, or have us send it to another provider.
• Withdraw your consent at any time, for marketing, for cookies, or for the use of your image. Withdrawing consent does not affect what we did lawfully before.

To exercise any of these, email [privacy@lafortunaadventures.com]. We reply free of charge and within one month, and we may ask you to confirm your identity first so we do not give your data to someone else.

If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your national data protection supervisory authority.

12. If you are in Costa Rica

Costa Rican residents hold the same rights of access, rectification, deletion and objection under Law No. 8968 and its regulation (Executive Decree 37554-JP), and may file a complaint with the Agencia de Protección de Datos de los Habitantes (PRODHAB), part of the Ministry of Justice and Peace. Requests for access are answered within the time limits set by that law.

13. If you are in the United States, Canada or elsewhere

We apply the standards described above to every guest, wherever you book from. We do not sell or share your personal data as those terms are used in United States privacy laws. To make any request about your data, use the same address: [privacy@lafortunaadventures.com].

14. Cookies and analytics

Our site uses cookies and similar technologies. Necessary cookies make the site and the booking process work, and they are always active. Analytics and marketing cookies are only set if you accept them in our cookie banner.

We currently use: [GOOGLE ANALYTICS 4 / GOOGLE TAG MANAGER / META PIXEL / OTRAS].

You can accept or reject non essential cookies when you first arrive, and change your choice at any time from the cookie settings link in our footer. You can also block or delete cookies in your browser settings, though parts of the site may then stop working properly.

15. Children

Our site and our booking process are meant for adults. Children are very welcome on our tours, subject to the minimum age of each activity, but their booking must be made by a parent or guardian, who provides any information about them and signs the participation waiver on their behalf. We do not knowingly collect data directly from children. If you believe a child has sent us personal data, write to [privacy@lafortunaadventures.com] and we will delete it.

16. Changes to this policy

If we change how we handle your data, we will update this page and change the date at the top. If the change is significant, we will make it visible on the site or tell you by email.

17. Contact

Questions about this policy or about your data? Email [privacy@lafortunaadventures.com] or write to us at [DIRECCIÓN EXACTA], La Fortuna, San Carlos, Alajuela, Costa Rica.