Privacy Policy
How Dreamcatcher Hotel / Atrapasuenos handles website, booking inquiry and communication data.
Last updated: June 17, 2026
Who we are
Dreamcatcher Hotel / Atrapasuenos operates in Santa Teresa, Costa Rica. Official guest support channels include WhatsApp at +506 8844 4004 and email at info@dreamcatcherhotel.com. Legal review is still required before final production use.
Data we may collect
Depending on how you use the site, we may receive your name, email, phone or WhatsApp, country or language preference, booking dates, number of guests, room or villa preference, inquiry message, technical data such as IP/browser/device, analytics events and cookie preferences. Full card data is not stored by this website.
Why we use it
We use data to respond to inquiries, route room searches to Kross, coordinate stays, provide guest support, send booking-related communications, improve website performance and measure marketing performance when consent is provided.
Processors and third parties
Relevant providers may include Kross for reservations, WhatsApp/Meta for messaging, Airtable/Toro OS V2 for internal operational data, Vercel for hosting, and Google Analytics/GTM/Ads or Meta Pixel only if configured and consented. Stripe or payment processors apply only if used in the final reservation/payment flow.
Costa Rica privacy context
Costa Rica Law No. 8968 protects people regarding personal data processing, and PRODHAB is the Costa Rican data protection authority. This page is an operational privacy-by-design draft and must be reviewed by legal counsel before final production use.
International transfers and retention
Some providers may process data outside Costa Rica. We keep information only as long as reasonably needed for booking, guest support, legal, security and operational purposes. Final retention periods should be aligned with legal review and operating procedures.
Your rights and security
You may request access, correction, deletion or opposition where applicable. We use reasonable safeguards and restrict access to operational systems. We do not knowingly collect children's personal data without guardian context.
