Privacy Policy
Last updated: July 2026
At VISTA NALU, we value your privacy and handle personal information with care, transparency and respect.
This Privacy Policy explains what personal data we collect, how we use it, which service providers we use and what rights you may have when you visit our website, contact us, join our mailing list or make an inquiry.
1. Who we are
This website is operated by:
VISTA NALU LIMITADA
Legal entity ID: 3-102-823463
Santa Teresa, Cóbano, Puntarenas
Costa Rica
Represented by:
Melanie Künzli and Silvan Künzli
Email: info@vistanalu.com
Website: www.vistanalu.com
VISTA NALU LIMITADA is responsible for the processing of personal data collected through this website and related communication channels.
Depending on your location and how you interact with us, applicable data protection laws may include Costa Rican data protection law, Swiss data protection law and/or European data protection rules.
2. What personal data we collect
Depending on how you interact with us, we may collect the following information:
Contact details:
Name, email address, phone number, WhatsApp contact or social media handle.
Booking and inquiry details:
Preferred travel dates, number of guests, accommodation preferences, special requests, length of stay, selected accommodation and any information you choose to share with us.
Newsletter information:
Your email address, subscription preferences and related newsletter activity, such as whether a newsletter was opened or a link was clicked.
Technical website data:
IP address, browser type, device information, operating system, pages visited, time spent on the website and general usage data.
Communication data:
Messages you send us by email, contact form, WhatsApp, Instagram, social media or other communication channels.
3. How we collect personal data
We collect personal data when you:
visit our website,
submit a contact or inquiry form,
join our mailing list,
contact us by email, WhatsApp, Instagram or social media,
request availability or booking information,
interact with our website, newsletter or digital content.
Some technical information may be collected automatically through cookies and similar technologies.
4. Why we use your personal data
We use your personal data for the following purposes:
to respond to inquiries,
to communicate with you about availability, bookings or stays,
to send updates if you have subscribed to our mailing list,
to improve our website and guest experience,
to manage direct booking requests,
to provide customer support,
to share relevant information before, during or after a stay,
to prevent misuse or security issues,
to comply with legal, tax, accounting or administrative obligations.
We only use your personal data where we have a valid reason to do so, such as your request, your consent, a contractual or pre-contractual relationship, a legal obligation or our legitimate interest in operating and improving VISTA NALU.
5. Newsletter and Mailchimp
If you subscribe to our newsletter or waitlist, we use your email address to send you updates about VISTA NALU, opening news, selected stays, offers or relevant stories.
Our newsletter is managed through Mailchimp, a service provided by Intuit Mailchimp. When you subscribe, your email address and related newsletter data may be processed by Mailchimp.
Mailchimp may process information such as your email address, subscription status, newsletter preferences, email openings, link clicks and technical data related to newsletter delivery.
You can unsubscribe at any time by using the unsubscribe link included in our emails or by contacting us at info@vistanalu.com.
6. Contact forms and direct inquiries
When you contact us through the website, email, WhatsApp, Instagram or social media, we use the information you provide to respond to your message and manage your request.
We may keep communication records for administrative purposes, guest service, booking history, quality management or legal documentation.
If you contact us through WhatsApp, Instagram or another third-party platform, the respective platform provider may also process your personal data according to its own privacy policy.
7. Website hosting, Squarespace and cookies
This website is built and hosted on Squarespace.
Squarespace may collect and process technical data that is necessary to securely provide and operate this website. This may include information such as your browser, network, device, IP address and pages viewed on this website.
Squarespace may also use cookies and similar technologies. Necessary cookies help the website function properly. Analytics or performance cookies may be used depending on our website settings and your cookie preferences.
Cookies are small files stored on your device. You can adjust your browser settings to block or delete cookies. Please note that some parts of the website may not function properly without necessary cookies.
8. Service providers
We use selected third-party service providers to operate our website, communicate with guests and manage our services. These include:
Squarespace for website hosting, website functionality, technical security and website analytics,
Mailchimp for newsletter and email marketing,
email and communication tools for guest communication,
WhatsApp, Instagram and social media platforms for direct communication,
professional advisors such as accountants, tax advisors or legal advisors,
local operational partners when necessary to provide guest services.
These providers may process personal data only as necessary to provide their services, support our operations or where legally required.
We do not sell your personal data.
9. International data transfers
Because we operate internationally and use online service providers, your personal data may be processed or stored outside your country of residence, including in Costa Rica, Switzerland, the European Economic Area, the United Kingdom or the United States.
Where required, we rely on appropriate safeguards provided by our service providers, such as contractual data protection commitments, data processing agreements, standard contractual clauses or similar mechanisms.
10. How long we keep personal data
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.
In general:
inquiry data is kept for as long as needed to respond and manage potential bookings,
booking-related data may be kept for administrative, accounting, tax and legal purposes,
newsletter data is kept until you unsubscribe or request deletion,
communication records may be kept for guest service, quality management or documentation purposes,
technical website data is kept according to the settings and retention periods of our website and service providers.
11. Sharing personal data
We may share personal data only when necessary with:
service providers supporting our website, communication, newsletter or operations,
professional advisors such as accountants, legal advisors or tax consultants,
authorities if required by law,
local operational partners when necessary to provide guest services.
We do not share more personal data than necessary for the respective purpose.
12. Your rights
Depending on your location and applicable law, you may have the right to:
request access to your personal data,
request correction of inaccurate data,
request deletion of your data,
object to certain processing,
request restriction of processing,
withdraw consent where processing is based on consent,
request a copy of your data,
unsubscribe from marketing communications at any time.
To exercise your rights, please contact us at:
info@vistanalu.com
We may need to verify your identity before responding to certain requests.
13. Data security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.
However, no online transmission or storage system can be guaranteed to be completely secure.
14. Links to external websites
Our website may contain links to third-party websites, social media platforms or external services.
We are not responsible for the privacy practices, content or security of external websites. Please review their privacy policies before providing personal data.
15. Minors
Our website and services are not directed at minors. We do not knowingly collect personal data from minors without appropriate consent.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, services, legal obligations or operational processes.
The latest version will always be available on this page.
17. Contact
For questions about this Privacy Policy or how we handle personal data, please contact:
VISTA NALU LIMITADA
Email: info@vistanalu.com
Santa Teresa, Cóbano, Puntarenas
Costa Rica