Privacy policy.
We respect your privacy. This page explains what data we collect, why, and what your rights are.
1. Who we are
The data controller of this website is Costa Rica Development, headquartered in Santa Teresa, Puntarenas, Costa Rica. For any privacy-related question, you can contact us at stephane@crdgroupe.com.
2. What data we collect
Through the contact channels (email, WhatsApp, cal.com)
- Your name and email address when you write to us
- Your phone number if you choose to share it (WhatsApp, video call)
- The content of your messages and conversation history
- Your stated interest (project name, type of inquiry)
Through anonymous analytics (Plausible)
We use Plausible Analytics, a privacy-friendly analytics tool. It does not use cookies, does not collect personal data, and is fully compliant with GDPR. The data collected is aggregated and anonymous:
- Pages visited and order of navigation
- Country of origin (not the IP address itself, just a derived country code)
- Type of device (mobile / desktop / tablet)
- Referring website (where you arrived from)
- Approximate time spent on the site
3. Why we collect this data
- To respond to your inquiries — about the projects, the group, the partnership program
- To improve the website — understand which pages work, where visitors come from
- To comply with our legal obligations — keep records of commercial exchanges
We do not use your data for advertising, profiling, or any commercial purpose beyond what is necessary to handle your inquiry.
4. Legal basis
The processing of your personal data is based on:
- Your consent — when you write to us or contact us through our channels
- Our legitimate interest — to improve the website and understand visitor behavior (using anonymous analytics only)
5. Retention period
- Contact emails and conversation history: kept for 3 years after the last interaction, unless deletion is requested earlier
- Analytics data: aggregated and anonymous, kept for 2 years
- Contractual data (in case of property purchase): kept per legal obligations in Costa Rica (10 years minimum)
6. Third parties involved
The following third-party tools may receive partial data when you interact with the site:
- Plausible Analytics (Estonia, EU) — anonymous traffic analytics. Privacy policy
- Cal.com (USA) — when you book a video call. Privacy policy
- WhatsApp / Meta (USA) — when you reach out via WhatsApp. Governed by Meta's policies.
- Google Fonts (USA) — for typography rendering. No personal data is collected by our usage.
- OVH SAS (France) — website hosting provider
7. Your rights
In accordance with GDPR (and equivalent regulations), you have the following rights regarding your personal data:
- Right of access — to know what data we hold about you
- Right of rectification — to correct any inaccurate data
- Right to erasure — to request deletion of your data
- Right to data portability — to receive your data in a structured, common format
- Right to object — to processing based on legitimate interest
- Right to withdraw consent — at any time, without affecting prior lawful processing
To exercise any of these rights, write to us at stephane@crdgroupe.com. We respond within 30 days.
8. Cookies
This website does not use advertising cookies, profiling cookies, or third-party tracking cookies.
The only technical storage used is localStorage and sessionStorage on your device, to remember:
- That you have already seen the welcome animation (so we don't replay it on every page)
- Your language preference (if applicable)
You can clear these at any time from your browser settings. We do not access them remotely.
9. Security
The website is hosted on OVH (France) with HTTPS encryption. We follow industry-standard practices to protect any data we collect. However, no system is impenetrable; if you believe there has been a security incident, please contact us immediately.
10. Changes to this policy
This policy may be updated as the website evolves or as the regulation changes. The date of the last update is indicated at the bottom of this page.
11. Complaints
If you consider that your rights under data protection law have not been respected, you can file a complaint with the supervisory authority of your country of residence. For visitors from the European Union, you can find the list of supervisory authorities on the European Data Protection Board website.
Last updated: June 2026