Privacy
What this site collects, who it goes to, and how to have it removed.
Last updated 31 August 2026
In short
- This is a single-property website. We are not an agency and we do not run a mailing list.
- If you send an enquiry, we receive your name, email, phone (if you give it) and message. We use it to reply to you.
- We never sell, rent or trade personal information, and we do not share it for advertising.
- We measure how many people visit and where they arrive from. Two tools do this. One sets no cookies at all.
- In Europe, the UK, Switzerland and Quebec, analytics stay switched off unless and until you agree to them.
- Write to [email protected] and we will show you what we hold, correct it, or delete it.
Who is responsible
The Sanctuary Estate is a private property in Nosara, Guanacaste, Costa Rica, offered for sale by its owner. This website, thesanctuaryestate.com, is published and operated from Costa Rica by Subramuniya Sanctuary SRL, which is the data controller for the information described here.
For anything in this notice, write to [email protected]. A person reads that address.
What we collect
When you send an enquiry
The contact form asks for your name, your email address, an optional phone number, and your message. We receive exactly what you type and nothing more. There is no account to create, no password, and no hidden field.
Enquiries reach us by email through Web3Forms, which passes the message to our inbox. Web3Forms handles the submission on our behalf and does not use your details for its own purposes.
When you simply read the site
Two things measure visits, and it is worth being precise about the difference between them.
Cloudflare Web Analytics counts page views, the country a visit comes from, the referring site, the browser and device type, and how quickly pages load. It sets no cookies, stores nothing on your device, and cannot follow you to another website or recognise you when you return.
Google Analytics 4 records the same kind of information and, in addition, sets a cookie so that a returning visitor is counted once rather than twice. It also records a single event when an enquiry is sent successfully — the fact that one happened, never the name, email or message behind it.
If you are in the European Economic Area, the United Kingdom, Switzerland or Quebec, Google Analytics is switched off by default. Nothing is stored and nothing is sent unless you consent. Elsewhere it runs on arrival, as is customary and permitted.
Neither tool receives your name or your email address. Google Analytics truncates IP addresses; we never see a full one.
What we do not do
There is no advertising pixel on this site, no retargeting, no data broker, no third-party marketing tag, and no profiling. We do not build a picture of who you are. If that ever changes — for instance, if the estate advertises to reach qualified buyers — this page will be updated before the change is made, not after.
Cookies and similar technologies
The complete list, as of the date above:
- Google Analytics — sets its own cookies to recognise a returning visitor. Off by default in the regions named above.
- Vimeo — the short film on this site is hosted by Vimeo. Its player sets cookies once you press play, under Vimeo's own privacy policy. Do not play it and it sets nothing.
- Cloudflare — may set a cookie for security and to keep the site fast and available. It is strictly functional and is not used to track you.
You can clear or block cookies in your browser at any time. The site works perfectly well without them; only the Vimeo player will notice.
Why we use what we collect, and on what basis
- To reply to your enquiry and to have a conversation about the property. Where European or UK law applies, our basis is your consent in sending the enquiry and our legitimate interest in answering it.
- To understand how the listing is found — how many people arrive, from which countries, and whether they came from a search, from Instagram, or directly. Our basis is your consent where consent is required, and legitimate interest elsewhere.
- To keep the site running and secure. Our basis is legitimate interest.
We do not use automated decision-making, and we do not profile visitors.
Who else sees it
Only the services that make the site work. We name them rather than hide behind the phrase "our service providers":
- Cloudflare — hosting, security and visit measurement.
- Google — Google Analytics, and the typefaces this site uses, which are served from Google's servers. Loading a page therefore reveals your IP address to Google, as it would on most websites.
- Web3Forms — delivery of enquiries from the contact form.
- Vimeo — the film, if you play it.
Beyond those, we may share your details with our own advisers — a real estate broker, a lawyer, a notary — but only where you are pursuing a purchase and only as far as that requires. We will not do so quietly; you will know.
We may also disclose information where the law requires it. That is the whole list.
Where your information goes
The estate is in Costa Rica. The services above are operated principally from the United States and run on servers around the world. If you write to us from Europe or the United Kingdom, your information will be handled outside those regions. Each of the providers named above operates under the standard contractual clauses or an equivalent transfer mechanism.
How long we keep it
- Enquiries: for as long as the conversation is live, and up to twenty-four months after we last hear from you — a property sale is unhurried, and people come back. Ask us sooner and we will delete it sooner.
- Analytics: held by Cloudflare and Google on their own schedules. We keep no separate copy, and none of it is tied to your name.
Your rights
Wherever you are, you may ask us what we hold about you, ask us to correct it, or ask us to delete it. Write to [email protected]. We will answer within thirty days and we will not ask you why.
If you are in the European Economic Area or the United Kingdom
Under the GDPR and the UK GDPR you also have the right to restrict or object to processing, to receive your data in a portable form, to withdraw consent at any time, and to complain to your national supervisory authority.
If you are in California
Under the CCPA and CPRA you may request the categories and specific pieces of personal information we have collected, ask for it to be deleted or corrected, and know that we will not discriminate against you for asking.
We do not sell personal information, and we do not share it for cross-context behavioural advertising — there is no advertising technology on this site to do so with. There is accordingly nothing to opt out of, though we honour Global Privacy Control signals regardless.
If you are in Costa Rica
Law No. 8968 on the Protection of the Person against the Processing of their Personal Data gives you the right to access, rectify and consent to the handling of your information, and to raise a concern with the Agencia de Protección de Datos de los Habitantes (PRODHAB).
Security
The site is served only over an encrypted connection. Enquiries travel encrypted and land in a password-protected mailbox with two-factor authentication. We keep no customer database, no payment details and no financial information — there is very little here to lose, which is the best protection of all. No system is perfect, and we will not pretend otherwise; if something did go wrong in a way that affected you, we would tell you.
Children
This site is meant for adults considering the purchase of a property. It is not directed at children, and we do not knowingly collect information from anyone under sixteen.
Other sites
Where this site links elsewhere — to Instagram, to Vimeo, to a broker — those pages have their own policies, and this one stops at our edge.
Changes
If what we collect changes, this page changes first, and the date at the top changes with it.
Contact
Subramuniya Sanctuary SRL
The Sanctuary Estate
Nosara, Guanacaste, Costa Rica
[email protected]