Skip to content
Bike & Bed Arenal — home

Privacy policy

Last updated: 5 November 2026

This sets out plainly what data of yours we keep, what for, for how long, and how to ask us to delete it.

1 · Who is responsible

The data controller is PURE CYCLING INVESMENT S.A., a company incorporated in Costa Rica, which operates the Bike & Bed Arenal hotel.

2 · What we ask for

Only what comes through our two forms. Nothing else, and nothing you cannot see on screen.

In the enquiry form — when you ask about availability — we ask for your name, your WhatsApp, the dates you are looking at and how many of you there are. Email and message are optional.

In the online check-in — once you have booked — we also ask for your ID or passport, and optionally your nationality, date of birth, allergies or dietary restrictions, and an emergency contact.

We ask for the ID because Costa Rica requires every lodging to register each guest who stays. The emergency contact is separate: it is so we know who to call if something happens to you during your stay.

Both forms also have a hidden anti-spam field that is not stored: it only serves to discard automated submissions.

3 · What we use it for

To answer your enquiry, arrange your stay, and comply with the guest registration the law requires. Nothing else.

We do not sell, rent or share your data with anyone for advertising, and we will not send you promotions: we do not ask for that permission, so we do not have it.

4 · Where it is kept and who else sees it

Three technical providers, which process the data on our instructions and for nothing else:

  • Supabase — the database where your information is stored.
  • Resend — the service that sends confirmation emails.
  • Vercel — where the site is hosted.

As their servers are outside Costa Rica, there is an international transfer of data, which is why it is stated here.

The ID number is stored separately. It lives in a different table from the contact records, with access restricted to the server: it does not appear in the system activity log and is not exported alongside the rest of the contact information.

5 · How long we keep it

24 months from the last contact. After that it is deleted or anonymised.

Check-in records are kept for the period required by the applicable lodging regulations, and where that period is longer, the law prevails.

6 · Cookies

Just one, and it does not track you.

bnb_idioma stores the language you chose — Spanish or English — so we do not ask you again. It lasts a year and contains no data about you: just the letters es or en.

There are no advertising, social or third-party cookies.

7 · What this site does NOT do

Worth saying, because almost no site can:

  • No Google Analytics, no Meta Pixel, no analytics or remarketing tool of any kind.
  • No social buttons that follow you. The Instagram and WhatsApp links are ordinary links: they load nothing and tell no one until you tap them.
  • Fonts are served from our own domain, not from Google Fonts. Your browser makes no request to Google when you arrive.

8 · Your rights

Law No. 8968 on the Protection of Individuals with regard to the Processing of their Personal Data gives you the right to know what data of yours we hold, correct it if it is wrong, ask us to delete it and withdraw your consent whenever you want.

9 · How to exercise them

Write to info@bikeandbedhotels.com from the address you used, or send a WhatsApp to +506 6153 6064.

We reply within 5 working days.

If you are not satisfied with the response, you can turn to the Agencia de Protección de Datos de los Habitantes (PRODHAB).

10 · Changes

If this changes, the date above is updated. Significant changes are notified to anyone who has given us an email address.