Privacy Policy

This Privacy Policy describes how NuvoHauz handles information when you use the NuvoHauz website at nuvohauz.com. For purposes of this Privacy Policy, NuvoHauz operates this website and determines how information submitted through the website is used.

This policy applies to your use of the public website, direct booking requests for Riu House, secure reservation-status pages linked from booking communications, privacy-oriented website analytics, and contact paths such as email or WhatsApp links shown on the site.

If you choose Airbnb, WhatsApp, or other third-party services linked from NuvoHauz, those services apply their own privacy practices once you leave this website. NuvoHauz does not control how those providers handle information you give them directly.

When you submit a Riu House booking request, the website collects the fields you enter in the booking form. An adult guest organizing the stay provides any child-related information for occupancy planning.

The booking request may include:

• Full name
• Email address
• Phone or WhatsApp number
• Country of residence
• Check-in and checkout dates
• Number of adults and children
• Ages of children (when children are included)
• Reason for trip (selected category)
• Whether outside visitors are expected (selected option)
• Optional message or notes about the stay
• Language preference used on the website (EN, ES, FR, or DE)
• Confirmations that you agree to house rules and understand the request is not an instant confirmation

The website also sends a technical request identifier with your submission to help prevent duplicate requests if you retry. The identifier is generated automatically in your browser; you do not type it in, and it is not your name or email.

After submission, the system stores a request reference and may provide a signed reservation-status link so you can follow your request. Payment card numbers are not collected through this website. If a request is approved, payment instructions may be sent separately by email according to NuvoHauz’s process.

Like most websites, NuvoHauz relies on hosting infrastructure that may process request metadata—such as IP address, user agent, requested path, timestamps, and security signals—to deliver pages, prevent abuse, and maintain reliability. NuvoHauz does not use that infrastructure data to build advertising profiles.

NuvoHauz uses Vercel Web Analytics on public pages. Pageview events strip query strings from URLs, and pageviews are not recorded for /admin routes or /reservation/status routes. Vercel describes this analytics product as cookie-free for visitors.

The site also records privacy-oriented custom analytics events—for example, navigation to direct booking, language changes, WhatsApp link clicks, and high-level booking funnel steps. These events are designed not to include guest names, email addresses, phone numbers, reservation tokens, or actual stay dates. Stay-related events may include night counts, guest counts, or failure categories only.

Your language choice may be stored in your browser’s localStorage under the key nuvohauz-locale so the site remembers EN, ES, FR, or DE on return visits.

Restricted administrative areas use an essential HTTP-only authentication cookie. This cookie is not used for advertising and is not issued through the public booking form.

NuvoHauz does not currently use Google Analytics, Google Ads tracking, Meta Pixel, or advertising cookies on public pages.

The booking request process may use automated anti-spam and security checks. Rejected abuse submissions are not saved as routine booking requests.

NuvoHauz uses information for purposes that match how the website and booking system work, including:

NuvoHauz does not use automated decision-making or profiling that produces legal or similarly significant effects solely by automated means.

Depending on your location and the activity, NuvoHauz may rely on one or more of the following, where applicable law requires a basis:

Taking steps at your request before entering or managing a booking arrangement; performing or administering a booking arrangement you request; NuvoHauz’s legitimate interests in operating, securing, and improving the website and direct booking experience, balanced against your rights; compliance with legal obligations; and consent where consent is required by law (for example, for optional activities that are not necessary to process your booking request).

Submitting a booking request is voluntary, but NuvoHauz cannot review a request without the information needed to evaluate dates, occupancy, and contact details.

NuvoHauz uses service providers that process information on NuvoHauz’s behalf to run the website and booking workflow, including:

Vercel for hosting and privacy-oriented analytics; Supabase for storing booking requests, availability blocks, pricing configuration used for quotes, and related reservation records; Resend for transactional email delivery to guests and booking notifications; and infrastructure or email providers’ subprocessors as described in their own documentation.

If you open a WhatsApp link, WhatsApp and Meta process information according to their own privacy practices. NuvoHauz may receive the message and contact information you choose to send through WhatsApp. If you open an Airbnb listing or make a reservation through Airbnb, Airbnb processes your information according to its policies and may provide NuvoHauz with information needed to respond to inquiries or manage a reservation as the host.

NuvoHauz may disclose information when reasonably necessary to comply with law, respond to lawful requests, protect rights and safety, investigate abuse, work with professional advisers, or resolve disputes.

NuvoHauz does not sell personal information.

NuvoHauz serves visitors and accommodation guests across different countries. Service providers may process information in countries other than your own, including the United States or other locations where they operate.

When information is transferred internationally, NuvoHauz relies on appropriate contractual or other safeguards offered by service providers where applicable, but NuvoHauz does not represent that all data remains exclusively in one country unless required by a specific provider configuration.

NuvoHauz retains information only as long as reasonably needed for booking administration, guest and host communications, security, fraud prevention, and legal, tax, accounting, or dispute needs. The website does not automatically delete booking database records on a fixed public schedule.

Signed guest reservation-status links stop working after a security-defined expiration: through the end of the checkout date plus thirty calendar days in Costa Rica time, subject to a minimum remaining validity window enforced by the application. Expiration of a status link does not necessarily delete the underlying booking record.

When an approved payment hold expires without verified payment, the application’s hold-expiration logic (currently a one-hour approval hold) updates the request status according to NuvoHauz’s booking rules.

NuvoHauz uses reasonable technical and organizational measures to protect information, including server-side validation of booking requests, signed reservation-status tokens, protected admin authentication with HTTP-only session cookies, overlap checks on availability, and limited analytics payloads.

No method of transmission or storage is completely secure. NuvoHauz cannot guarantee absolute security.

Depending on where you live and applicable law, you may have rights to request access, correction, deletion, restriction, objection, or portability, or to withdraw consent where processing is based on consent.

To exercise these rights, contact the Privacy Administrator at renovations.alfa@gmail.com. NuvoHauz may need to reasonably verify your identity before fulfilling a request and may ask for information tied to your booking request (such as your email address and request reference). NuvoHauz does not require sensitive identity documents by default.

You may also have the right to contact a privacy or data-protection authority in your jurisdiction. NuvoHauz does not identify a single exclusive authority for all visitors.

The website is intended for adults arranging accommodations. NuvoHauz does not knowingly solicit booking requests directly from children.

When child ages are collected, they are provided by an adult booking guest for occupancy and accommodation planning related to the stay.

Public marketing pages do not set advertising cookies. Vercel Web Analytics is described as cookie-free for visitors. The language selector stores your locale preference in localStorage (nuvohauz-locale), not in a public tracking cookie.

Restricted administrative areas use an essential HTTP-only authentication cookie. This cookie is not used for advertising and is not issued through the public booking form.

NuvoHauz does not currently display an advertising-cookie consent banner because the public website does not use advertising or cross-site tracking cookies identified in the current website audit. If advertising or additional analytics technologies are introduced, NuvoHauz will review applicable consent requirements and update this policy.

Links to Airbnb, WhatsApp, and other third-party sites are governed by those providers’ privacy policies and terms. Review their policies before sharing information with them.

NuvoHauz may update this Privacy Policy when practices change materially. The effective date and last updated date at the top of this page will change when updates are posted.