Last updated: 30 October 2026.
This Privacy Policy explains how Arte mas Sano S.A., operating as Cinthia Rodríguez Therapeutic Sanctuary, handles personal information collected through cinthiatherapeuticsanctuary.com and our booking and customer-service channels.
1. Who is responsible for your information
The data controller is Arte mas Sano S.A., located in Playa Matapalo, Savegre, Puntarenas, Costa Rica, 60602. Contact us at hello@cinthiatherapeuticsanctuary.com or WhatsApp +506 8344 9162.
2. Information we collect
When you contact us or make a reservation, we may process your name, email address, telephone number, message, service selected, appointment dates and times, number of sessions or participants, and the location needed to provide the service. For retreats and villa services, this may include accommodation or venue details that you provide.
For purchases, we process billing information required for the transaction or invoice, order details, payment status, transaction references and information needed to administer changes or refunds. Please provide only the information requested and necessary for your inquiry or booking.
The website and its service providers may process technical information such as an IP address, browser or device information, session identifiers and security logs to operate the site, maintain a booking or shopping session, process payments and help prevent abuse.
3. Why we use this information
- Respond to inquiries and prepare personalized quotations.
- Arrange, confirm and deliver sessions, retreats and travel services.
- Communicate about your reservation, payment, changes, cancellation or service-related follow-up.
- Process payments, invoices and refunds, and address complaints.
- Operate and protect the website and comply with applicable legal obligations.
Your information forms part of our customer-service, reservation and administrative records. We request informed consent where required by Costa Rican law and explain the relevant purpose when information is collected. Information required by law, including billing records where applicable, is handled to meet those obligations.
Required fields are identified in the relevant form. Without the contact, booking or payment information needed for a request, we may be unable to answer it, confirm an appointment or complete the purchase. Optional details are not required to use the service.
4. Health-related conversations
Cinthia discusses relevant well-being considerations directly and privately with you. We do not maintain health questionnaires or clinical files, and these conversations are not recorded. Please do not submit diagnoses, medical records or other sensitive health information through website forms, email or WhatsApp.
If you voluntarily send health information in a written message, it may be stored by that communication service. Contact us if you need it removed; we will address the request subject to applicable legal obligations. We do not use health information for advertising or audience creation.
5. Who may access your information
Access is limited to Cinthia and authorized personnel or service providers who need the information to carry out the purposes described here. We share only the information necessary for the relevant task.
- Website and hosting: the site runs on WordPress and WooCommerce, uses WooCommerce Bookings for reservations and WPForms for contact forms, and is hosted with SiteGround. Installed software does not by itself mean that every software vendor receives all customer data.
- Payments: PayPal and Tilopay process the payment information needed for transactions made through their services. Banks and SINPE Móvil process transfers when you choose those methods. Payment providers apply their own privacy and security terms.
- Communications: email providers and WhatsApp handle messages sent through their services. Avoid sharing unnecessary sensitive information in those channels.
- Administration and legal requirements: authorized accounting or support providers may receive information necessary for their tasks, and authorities may receive information when disclosure is legally required.
We do not sell customer information. We do not disclose your private booking details to other guests or unrelated businesses for their marketing.
6. International processing
Our business is based in Costa Rica. Some technology, messaging and payment providers may process information in other countries, under their own applicable terms and safeguards. We will provide information about the relevant recipients and obtain authorization for transfers where required by applicable law.
7. Cookies, preferences and external services
The site uses cookies or similar technologies for functions such as maintaining a booking or shopping session, security and remembering language or currency preferences. Payment providers may use their own technologies when you use their payment services.
You can manage cookies in your browser. Blocking functional cookies may prevent parts of the booking or payment process from working. External links to WhatsApp, social networks, maps or review platforms take you to services governed by their own privacy policies. Embedded third-party content, such as maps, may also communicate technical data to its provider when loaded.
If we introduce optional analytics, advertising cookies or tracking, we will identify the providers and purposes and offer the choices or consent controls required before using those technologies. A future service will not be treated as active merely because it is mentioned in this policy.
8. Advertising and future marketing
At present, customer information is used for inquiries, reservations, service communications and the related administrative purposes described above. We do not currently use customer contact lists for promotional campaigns or to build advertising audiences.
If we later offer promotional email or WhatsApp messages, or propose sharing contact information with an advertising platform to create or expand audiences, we will first provide a specific notice and request separate, voluntary consent where required. Booking a session or accepting booking conditions does not by itself authorize these uses. You may decline marketing without losing access to a service and may withdraw marketing consent at any time.
9. Retention and security
We retain personal information for the period necessary to handle your inquiry or reservation, provide the service, resolve relevant issues and satisfy applicable accounting, tax and legal obligations. Records that must be retained for a legal obligation are not kept for unrelated marketing purposes. Information that is no longer needed is to be deleted or anonymized, subject to legitimate retention requirements.
We use appropriate access controls and organizational and technical measures to protect information. No online service or transmission can be guaranteed completely secure. Please do not send passwords, full card details or unnecessary identification documents through our contact channels.
10. Your rights
You may request access to your personal information, correction or updating of inaccurate information, and deletion where appropriate. You may also withdraw consent and exercise your rights concerning disclosure or transfer of your data, subject to applicable legal obligations.
Send a request to hello@cinthiatherapeuticsanctuary.com, explaining the right you wish to exercise. We may request proportionate verification of your identity to protect your information. Requests are handled free of charge and resolved within the applicable legal period; under Costa Rican Law No. 8968, the relevant period is five business days from receipt.
If a request cannot be fulfilled in whole or in part because information must be retained by law, we will explain the reason. You may also submit a complaint to Costa Rica’s Agencia de Protección de Datos de los Habitantes (PRODHAB).
11. Changes to this policy
We will update this page when our practices change and indicate the revision date. Material new purposes that require consent will be presented before the information is used for those purposes. An update alone does not authorize retrospective marketing use of existing customer data.