PRIVACY POLICY
Last updated: August 12, 2026
At VISTA NALU, we value your privacy and handle personal information with care, transparency and respect.
This Privacy Policy explains what personal data we collect, how we use it, which service providers we use and what rights you may have when you visit our website, contact us, join our mailing list, make an inquiry, make or manage a booking, complete online check-in or stay with us.
1. Who we are
This website and the VISTA NALU accommodation service are operated by:
VISTA NALU LIMITADA
Legal entity ID: 3-102-823463
Operating address: Calle Castillo, 180 meters northeast of Griss Lodge, Santa Teresa de Cóbano, Puntarenas 60111, Costa Rica
Email: info@vistanalu.com
Phone / WhatsApp: +506 8606 8932
Website: www.vistanalu.com
Represented by Melanie Künzli and Silvan Künzli.
VISTA NALU LIMITADA is responsible for the processing of personal data collected through this website and related booking, communication and guest-service channels.
Depending on your location and how you interact with us, applicable data protection laws may include Costa Rican data protection law and, where applicable, Swiss, European Union or United Kingdom data protection rules.
2. What personal data we collect
Depending on how you interact with us, we may collect the following information:
Contact details:
Name, email address, phone number, WhatsApp contact or social media handle.
Booking and inquiry details:
Preferred travel dates, number of guests, selected accommodation, accommodation preferences, special requests, length of stay and any information you choose to share with us.
Guest registration and online check-in data:
Main guest and additional guest names, date of birth, country or nationality, approximate arrival time, method of transport, parking needs and other information requested through our online check-in process. Where required for registration, security or legal compliance, we may also request identification or passport information.
Payment and transaction data:
Amounts due or paid, payment status, transaction references and limited payment information needed to administer a booking. Full payment-card details are processed by the applicable payment provider and are not stored by VISTA NALU.
Newsletter information:
Your email address, subscription preferences and related newsletter activity, such as whether a newsletter was opened or a link was clicked.
Technical website data:
IP address, browser type, device information, operating system, pages visited, time spent on the website and general usage data.
Communication data:
Messages you send us by email, contact form, WhatsApp, Instagram, social media, booking platform, Smoobu or other communication channels.
3. How we collect personal data
We collect personal data when you:
visit our website;
submit a contact or inquiry form;
request availability or booking information;
make or manage a direct booking;
complete the Smoobu Online Check-in form or use the digital Guest Guide;
join our mailing list;
contact us by email, WhatsApp, Instagram, social media or another communication channel;
interact with our website, newsletter or digital content.
Some technical information may be collected automatically through cookies and similar technologies.
4. Why we use your personal data
We use personal data only where we have a valid reason to do so, including your request or consent, a contractual or pre-contractual relationship, a legal obligation or our legitimate interest in operating and improving VISTA NALU.
We may use your data to:
respond to inquiries and availability requests;
prepare, confirm and administer bookings;
process or coordinate payments and issue electronic tax documents;
manage online check-in and guest registration;
communicate with you before, during and after a stay;
provide customer and guest support;
coordinate requested concierge services and local experiences;
send updates if you have subscribed to our mailing list;
improve our website, operations and guest experience;
prevent misuse, fraud or security issues;
comply with legal, tax, accounting, registration, insurance or administrative obligations;
manage complaints, incidents, damage claims or emergencies.
5. Newsletter and Mailchimp
If you subscribe to our newsletter or waitlist, we use your email address to send you updates about VISTA NALU, opening news, selected stays, offers or relevant stories.
Our newsletter is managed through Mailchimp, a service provided by Intuit Mailchimp. When you subscribe, your email address and related newsletter data may be processed by Mailchimp.
Mailchimp may process information such as your email address, subscription status, newsletter preferences, email openings, link clicks and technical data related to newsletter delivery.
You can unsubscribe at any time by using the unsubscribe link included in our emails or by contacting us at info@vistanalu.com.
6. Contact forms, bookings and direct communications
When you contact us through the website, email, WhatsApp, Instagram, social media or a booking channel, we use the information you provide to respond to your message and manage your request or booking.
We may keep communication records for booking administration, guest service, quality management, payment documentation, incident handling or legal documentation.
If you contact us through WhatsApp, Instagram or another third-party platform, the respective platform provider may also process your personal data according to its own privacy policy.
7. Website hosting, Squarespace and cookies
This website is built and hosted on Squarespace.
Squarespace may collect and process technical data necessary to securely provide and operate this website. This may include information such as your browser, network, device, IP address and pages viewed on this website.
We use necessary cookies to ensure that the website functions properly and securely. These cookies cannot be disabled through our cookie banner.
Non-essential analytics and performance cookies are restricted until you provide consent where required. When you first visit our website, you can choose to “Accept all”, “Decline all” or “Manage cookies” to set your preferences. You can change your selection through the “Cookie Settings” option available on the website.
Cookies are small files stored on your device. You can also adjust your browser settings to block or delete cookies. Please note that some parts of the website may not function properly without necessary cookies.
8. Smoobu, booking administration and online check-in
We use Smoobu to manage direct bookings and reservation data, automate selected guest communications, provide online check-in and operate the digital Guest Guide.
Depending on the booking and the information you provide, Smoobu may process guest names, contact details, booking dates, accommodation details, guest numbers, date of birth, country or nationality, arrival information, transport and parking information, communication data and other online check-in fields configured by VISTA NALU.
VISTA NALU determines which guest information is requested through Smoobu and uses it only for the purposes described in this Privacy Policy.
9. Other service providers
We use selected third-party service providers to operate our website, communicate with guests and provide our services. These may include:
Squarespace for website hosting, website functionality, technical security and website analytics;
Smoobu for property-management functions, booking administration, guest communication, online check-in and the digital Guest Guide;
Mailchimp for newsletter and email marketing;
payment providers and financial institutions for payment processing;
email, messaging and communication tools used for guest communication;
WhatsApp, Instagram and other social media platforms for direct communication;
operational or task-management tools used to coordinate housekeeping, maintenance and guest-related tasks;
local service partners when necessary to provide a service requested by you;
professional advisers such as accountants, tax advisers, insurers or legal advisers.
These providers may process personal data only as necessary to provide their services, support our operations or comply with legal requirements.
We do not sell your personal data.
10. International data transfers
Because we operate internationally and use online service providers, your personal data may be processed or stored outside your country of residence, including in Costa Rica, Switzerland, the European Economic Area, the United Kingdom or the United States.
Where required, we rely on appropriate safeguards provided by our service providers, such as contractual data-protection commitments, data-processing agreements, standard contractual clauses or similar mechanisms.
11. How long we keep personal data
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.
In general:
inquiry data is kept for as long as needed to respond and manage potential bookings;
booking, payment and guest-registration data may be kept for administrative, accounting, tax, legal, insurance or security purposes;
newsletter data is kept until you unsubscribe or request deletion, subject to any records needed to document your preference;
communication records may be kept for guest service, quality management, complaint handling or documentation purposes;
technical website data is kept according to the settings and retention periods of our website and service providers.
12. Sharing personal data
We may share personal data only when necessary with:
service providers supporting our website, booking system, communication, newsletter, payments or operations;
authorised team members and local operational partners where access is necessary to provide the requested stay or service;
professional advisers such as accountants, legal advisers, insurers or tax consultants;
competent authorities where required by law.
We do not share more personal data than reasonably necessary for the relevant purpose.
13. Your rights
Depending on your location and applicable law, you may have the right to:
request access to your personal data;
request correction of inaccurate data;
request deletion of data where legally available;
object to certain processing;
request restriction of processing;
withdraw consent where processing is based on consent;
request a copy of your data where applicable;
unsubscribe from marketing communications at any time.
To exercise your rights, please contact us at info@vistanalu.com.
You may also have the right to lodge a complaint with the competent data-protection authority in your country or region, including the Agencia de Protección de Datos de los Habitantes (PRODHAB) in Costa Rica, the Federal Data Protection and Information Commissioner in Switzerland or the relevant supervisory authority in the European Union or United Kingdom.
We may need to verify your identity before responding to certain requests.
14. Data security
We take reasonable technical and organizational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no online transmission or storage system can be guaranteed to be completely secure.
15. Links to external websites
Our website may contain links to third-party websites, social media platforms or external services.
We are not responsible for the privacy practices, content or security of external websites. Please review their privacy policies before providing personal data.
16. Minors
Our website is not directed at minors. Where personal information about a minor is necessary for a booking, guest registration or legal requirement, it must be provided by or with the authorisation of a parent or legal guardian.
We do not knowingly use minors’ personal data for marketing purposes.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, booking systems, service providers, legal obligations or operational processes.
The latest version will always be available on this page.
18. Contact
For questions about this Privacy Policy or how we handle personal data, please contact:
VISTA NALU LIMITADA
Email: info@vistanalu.com
Operating address: Calle Castillo, 180 meters northeast of Griss Lodge, Santa Teresa de Cóbano, Puntarenas 60111, Costa Rica