Privacy Notice

Last updated: August 13, 2026

Data controller

Costa Rentals, located at La Punta, Nuevo León, Brisas de Zicatela, 70934 Puerto Escondido, Oaxaca, Mexico, is responsible for processing your personal data under Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP). You can reach us at info@costarentals.mx.

What data we collect and why

This site has no forms or user accounts of its own. As you browse, we collect data generated by normal use of the site (which pages you visit, from what device, for how long), and we use it to understand how the site is used and improve it.

We also have a support chat on the site. If you choose to use it and leave us your name and an email or phone number, we do collect that data — see the next section.

If you book, that data (name, email, card, dates) is collected and processed directly by Cloudbeds, not by us.

Support chat

The site has a chat staffed by an automated assistant that answers questions about the properties, the area, and availability. Using it is optional.

If during the conversation you leave us your name and an email or phone number, we use that data for one purpose only: to reply to you about your stay. We don't use it for advertising, we don't sell it, and we don't share it with anyone outside the providers listed below, who only process it on our behalf.

The content of the conversation is stored so we can reply to you and so we can review and improve the quality of the answers. Please don't enter card details or sensitive information in the chat: booking and payment happen on Cloudbeds.

Along with the conversation we record technical details of the visit: your IP address, the country you connect from, your device and browser type, the page where you opened the chat and, if you arrived through an ad, that campaign's parameters. We use them for two things: to understand which channels bring us inquiries, and to detect abusive use of the chat. We don't cross-reference them with third-party data or use them to build a profile of you.

You can ask us to access, correct, or delete what you left in the chat by writing to info@costarentals.mx — see "Your rights" below.

Third parties receiving data and international transfers

We use third-party services, all based in the United States, which means an international transfer of the data each one collects:

• Google Analytics (Google LLC): measures visits and browsing behavior in aggregate, to understand which pages perform best.

• Meta Pixel (Meta Platforms, Inc.): measures site visits to measure the performance of our advertising on Facebook and Instagram.

• Cloudbeds (Cloudbeds, Inc.): processes your full booking (personal, payment, and contact data) when you click "Book" and continue on their platform. Their handling of that data is governed by Cloudbeds' own privacy policy, not by this notice.

• Wilo: operates the site's support chat on our behalf. To do so it relies on Supabase, Inc. (where the conversation and any contact details you leave are stored), on OpenRouter, Inc. and Anthropic, PBC (which process the text of the conversation to generate the replies), and on Resend (which emails us the notice that you left an inquiry).

As for your name, email, or phone number: Google Analytics and Meta Pixel don't receive them from us — only browsing data. Cloudbeds receives whatever you enter yourself when booking. The chat providers receive them only if you choose to leave them in the conversation.

Cookies and tracking technologies

Google Analytics and Meta Pixel use cookies and similar technologies to anonymously recognize your browser across visits. You can block or delete these cookies in your browser settings; the site works the same without them, though we stop receiving that usage data.

Your rights

Under Mexican law you have the right to access, rectify, cancel, or object ("ARCO" rights) to the processing of your personal data, and to withdraw your consent where applicable. To exercise any of these rights, email us at info@costarentals.mx with your request.

If your request relates to data from an existing booking, you may also need to contact Cloudbeds directly, since they process and store that data.

Changes to this notice

We may update this privacy notice at any time. The last-updated date appears at the top of this page.