Privacy Policy

Kinkára Sanctuary (operated under Inversiones Kinkara S.A., Santa Elena de Pérez Zeledón, San José, Costa Rica) acts as the responsible data controller for all personal data submitted through this website. For any privacy inquiries, data requests, or regulatory communications, our dedicated Data Protection Officer can be reached directly at privacy@kinkara.com.

We practice strict data minimization under Costa Rican Law 8968 and GDPR Article 5. We collect personal data strictly when you voluntarily submit forms on our website for two distinct purposes: (a) Priority Waitlist Registrations (Parent Full Name, Email Address, WhatsApp Phone Number, Family Size, Target Cohort, and optional dietary/mobility notes); and (b) Retreat Buyout RFP Inquiries (Organizer Full Name, Organization/Brand Name, Work Email, WhatsApp Phone, Retreat Focus, Estimated Guest Count, Target Nights, Preferred Season, and custom facility notes). We never sell, lease, or monetize your contact information.

Kinkára operates a privacy-first web experience. We do not use third-party tracking cookies, behavioral tracking pixels (such as Meta Pixel or Google Ads trackers), or cross-site fingerprinting technologies. Initial paint delivers a 0 KB client JavaScript baseline for static pages. Because we do not deploy non-essential tracking cookies or profiling scripts, no intrusive cookie consent banner is required on our website.

To guarantee security and deliver reliable communications, we utilize selected infrastructure service providers acting as data processors under strict confidentiality contracts: (a) Cloudflare Turnstile for automated, non-intrusive bot defense without biometric profiling or tracking cookies; (b) Directus CMS & PostgreSQL hosted in SOC-2 compliant encrypted cloud infrastructure for secure database management; and (c) Resend for transactional email notifications. All data transmissions are encrypted using TLS 1.3 protocol.

Under Costa Rican Law 8968 (Ley de Protección de la Persona frente al Tratamiento de sus Datos Personales) and GDPR, you possess irrevocable rights of Access, Rectification, Cancellation, and Opposition (ARCO Rights). You may request a complete export of your personal data, request corrections, or demand immediate deletion by emailing privacy@kinkara.com. Inquiries and waitlist submissions are retained only as long as necessary to fulfill retreat scheduling or legal accounting obligations.