Privacy Policy
Last updated: October 4, 2026
GMTRAVELCR ("we", "us") provides tourist transportation and private transfer services in Costa Rica. This policy explains what personal data we collect when you use our website, book a trip or sign in, how we use it and what your rights are, in accordance with Costa Rica's Law No. 8968 on the Protection of Individuals regarding the Processing of their Personal Data.
1. Data we collect
- Contact details: full name, email address and phone number.
- Trip details: pickup location, destination, date, time, number of passengers, vehicle, selected extras, flight number and any additional notes you provide.
- Account data: if you sign in with Google or another provider, we receive your name, email address and profile picture. We never receive or store your Google password.
- Payment data: card payments are processed by ONVO Pay. We do not store your full card number or security code; we only keep the transaction reference and status.
- Technical data: basic browser and device information, and cookies required to keep you signed in and remember your language preference.
2. How we use your data
We do not use your data for third-party advertising and we do not sell it.
- To manage, confirm and coordinate your bookings and transfers.
- To contact you about your trip status, schedule changes or flight delays.
- To process payments, deposits and, when applicable, refunds.
- To let you sign in securely and manage your account.
- To respond to inquiries, complaints and support requests.
- To comply with legal, accounting and tax obligations.
3. Who we share your data with
We only share the information strictly necessary with providers that help us deliver the service:
- ONVO Pay, for payment processing.
- Auth0 and Google, for sign-in.
- Google Maps Platform, to calculate routes and distances.
- Email and cloud hosting providers, to send you confirmations and store information securely.
- The drivers assigned to your trip, who only receive the data needed to carry out the transfer.
- Competent authorities, when required by law.
4. Use of Google data
If you sign in with Google, we only request basic profile permissions (name, email address and picture). We use this information solely to identify you on our platform and link your bookings to your account. We do not access your Gmail, contacts, calendar or any other Google account data, and we do not transfer this information to third parties except as described in this policy.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Retention and security
We keep your data while your account is active or for as long as needed to provide the service and meet legal and accounting obligations. We apply reasonable technical and organizational measures such as encrypted connections (HTTPS), access control and providers with recognized security standards.
6. Your rights
You may request access to, correction, update or deletion of your personal data at any time, and you may withdraw your consent. To do so, contact us using the details below. We will respond within five business days, as required by Costa Rican law.
7. Minors
Our service is intended for people aged 18 or older. Bookings for minors must be made by a responsible adult.
8. Changes to this policy
We may update this policy from time to time. The current version will always be published on this page with its update date.
Contact
If you have questions about this policy or your data, contact us:
- travelgm25@gmail.com
- +506 8887-3665
- Liberia, Guanacaste, Costa Rica
