This Privacy Policy explains how Malpais Properties collects, uses, shares, stores and protects personal information when you visit our website, contact our team or use our real estate services.
Effective date: August 21, 2026 Last updated: August 21, 2026
1. Who We Are
For purposes of applicable data-protection law, Malpais Properties is the controller of personal information processed through this website and our real estate inquiry services.
Business: Malpais Properties
Office: Shopping Center Playa del Carmen, next to the pharmacy, Malpais, Costa Rica
This policy applies to personal information collected through:
MalpaisProperties.com and its property, agent, contact, review and blog pages;
website contact forms and property-inquiry forms;
email, telephone and WhatsApp communications initiated through the website;
requests for showings, consultations or information about buying or selling property;
newsletter or marketing sign-ups, when offered; and
website analytics, cookies and similar technologies, subject to your choices.
This policy does not govern independent websites or services that you visit through an external link.
3. Information We Collect
Information You Provide
Name and contact details;
country or general location;
property interests, preferred area and budget;
buying, selling or investment objectives;
messages, questions and correspondence;
showing or consultation preferences;
marketing preferences; and
information voluntarily submitted in a review.
Information Collected Automatically
IP address and approximate location;
browser, device and operating-system information;
referring page and pages visited;
date, time and duration of visits;
cookie choices and identifiers; and
website performance, security and error information.
We ask you not to send passport copies, banking credentials, highly sensitive personal information or payment-card information through a general website form. When additional documentation is required for a transaction, our team or your professional advisers should provide an appropriate secure method.
4. How We Use Personal Information
We may use personal information to:
respond to questions and property inquiries;
identify properties that may match stated preferences;
arrange consultations, showings and follow-up communications;
assist owners who inquire about listing or selling property;
maintain records of communications and client relationships;
coordinate, at your request, with independent attorneys, notaries, escrow providers, surveyors, inspectors, engineers, accountants or other professionals;
operate, secure, troubleshoot and improve the website;
measure website use and marketing performance when permitted;
send property or market updates when you have requested them or when otherwise permitted by law;
prevent spam, fraud, abuse and security incidents; and
comply with legal, regulatory, tax, accounting or professional obligations.
We do not sell personal information in exchange for money.
5. Legal Bases for Processing
Where the EU General Data Protection Regulation, UK data-protection law or a similar law applies, we rely on one or more of the following legal bases:
Legal basis
Typical use
Steps requested before a contract or performance of a contract
Responding to a request for real estate services, arranging a showing and supporting an active client relationship.
Legitimate interests
Answering relevant inquiries, maintaining business records, improving the website, protecting systems and preventing fraud, after considering individual rights.
Consent
Optional analytics or marketing cookies, newsletters and other activities for which consent is requested. Consent may be withdrawn.
Legal obligation
Complying with applicable legal, regulatory, tax, accounting, anti-fraud or recordkeeping requirements.
Legal claims or vital interests
Establishing or defending legal rights, or protecting a person in an emergency where applicable.
Costa Rica’s Law No. 8968, the Law on Protection of the Person concerning the Processing of Personal Data, may also govern our processing. It recognizes rights concerning access, correction, deletion and consent to certain disclosures of personal data.
6. Cookies, Analytics and Similar Technologies
Our website may use cookies and similar technologies to operate essential functions, remember privacy choices, protect forms, understand website use and evaluate marketing.
Strictly Necessary
These technologies support security, network management, form operation and privacy preferences. They cannot always be disabled through our consent tool.
Functional
These may enable features such as maps, videos, language preferences or enhanced website functions.
Analytics
These help us understand visits, page performance and navigation. Where required, they remain disabled until consent is provided.
Marketing
These may measure advertising or support relevant marketing. Where required, they remain disabled until consent is provided.
You can accept, reject or manage optional technologies through the cookie-consent tool displayed on the website. You may change your choice later using the “Cookie Settings” link in the website footer. You can also control cookies through your browser, although disabling necessary cookies may affect website operation.
For the current categories, providers, purposes and durations, please review our Cookie Policy.
7. When We Share Information
We may disclose relevant personal information to:
authorized Malpais Properties team members who need it to respond or provide services;
website hosting, email, form, security, backup, analytics, communications and technology providers acting on our behalf;
property owners, listing representatives or cooperating real estate professionals when necessary to address a property inquiry;
independent professional advisers when you request an introduction or when coordination is necessary for a transaction;
government authorities, regulators, courts or law-enforcement agencies when disclosure is required or legally permitted; and
a successor or prospective purchaser in connection with a legitimate business sale, merger or reorganization, subject to appropriate confidentiality.
Service providers are expected to use personal information only for the services they provide and to apply appropriate safeguards. Independent professionals have their own privacy responsibilities and policies.
8. International Data Transfers
Malpais Properties operates in Costa Rica. If you contact us from the European Economic Area, United Kingdom, Switzerland or another country, your information will be transferred to and processed in Costa Rica. Some technology providers may also process information in the United States or other countries.
Privacy laws in those destinations may differ from the laws in your country. Where required, we seek to use recognized safeguards, which may include adequacy decisions, approved contractual protections such as Standard Contractual Clauses, provider participation in an applicable transfer framework, or another legally permitted mechanism.
You may contact us for additional information about safeguards relevant to your information.
9. How Long We Keep Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing requested services, maintaining appropriate business records, resolving disputes and meeting legal obligations.
Record type
Retention approach
General inquiries
Reviewed periodically and deleted or anonymized when no longer reasonably needed for follow-up or recordkeeping.
Active client and transaction records
Kept during the relationship and afterward as required for legal, tax, accounting, professional or dispute-resolution purposes.
Marketing contacts
Kept until consent is withdrawn, the person unsubscribes or the record is otherwise no longer needed, subject to a limited suppression record.
Cookie and consent records
Kept for an appropriate period to remember choices and demonstrate consent where required.
Security logs
Kept for a limited period appropriate to fraud prevention, troubleshooting and website security.
Actual retention may be longer when a law requires it or when records are reasonably necessary for a legal claim. When information is no longer required, we take reasonable steps to delete or anonymize it.
10. Information Security
We use reasonable administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. Measures may include restricted access, account controls, software updates, spam protection, backups and appropriate service-provider selection.
No website, email system or internet transmission is completely secure. Please do not send confidential financial information, passwords or identity documents through ordinary email or a general contact form.
11. Your Privacy Rights
Depending on where you live and the law that applies, you may have the right to:
receive information about how your personal data is processed;
request access to and a copy of your personal data;
correct inaccurate or incomplete data;
request deletion when the information is no longer required or processing is unlawful;
request restriction of processing in certain circumstances;
object to processing based on legitimate interests;
object at any time to direct marketing;
withdraw consent without affecting earlier lawful processing;
receive eligible information in a portable format;
not be subject to certain decisions based solely on automated processing; and
complain to an appropriate data-protection authority.
To exercise a right, email jeanel@malpaisproperties.com with the subject “Privacy Request.” Please describe your request and the email address or other information used to contact us. We may need to verify your identity before acting. We will respond within the period required by applicable law.
In Costa Rica, concerns may be directed to the Agencia de Protección de Datos de los Habitantes (PRODHAB). Individuals in the EEA or UK may also contact the supervisory authority in the country where they live, work or believe an infringement occurred.
12. Email and Direct Marketing
We may send property listings, market updates or other promotional communications when you request them, consent to receive them or when another lawful basis permits the communication.
You can unsubscribe using the link in a marketing email or by contacting us. Unsubscribing from promotional messages does not prevent service communications necessary to respond to an active inquiry or support an existing transaction.
We may retain limited information on a suppression list to honor an unsubscribe request.
13. Third-Party Websites and Services
The website may link to or integrate services such as Google Maps, social-media platforms, WhatsApp, video providers or independent professional websites. When you choose to interact with a third-party service, that provider may collect information under its own privacy policy.
Where required, nonessential third-party content should remain blocked until you provide the appropriate cookie or privacy consent. We are not responsible for the privacy practices of independent third parties.
14. Children’s Privacy
Our website and real estate services are directed to adults and are not intended to collect personal information from children. If you believe a child has provided personal information through the website, please contact us so we can review and delete it where appropriate.
15. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, technology, providers or legal obligations. The revised policy will be published on this page with an updated “Last updated” date. When a change materially affects how information is used, we will provide additional notice where required.
16. Contact Malpais Properties
For questions about this policy or to make a privacy request, contact:
Malpais Properties Shopping Center Playa del Carmen, next to the pharmacy Malpais, Costa Rica