Privacy Policy

Black Car CR is operated by Autotransportes Terranova S.A., based in Nosara, Nicoya, Guanacaste, Costa Rica ("Black Car CR", "we", "us"). We are responsible for the personal information we collect for our transportation services. This policy covers blackcarcr.com, booking.blackcarcr.com and information received through our official reservation and customer service channels.

• Privacy contact: info@blackcarcr.com
• Bookings: bookings@blackcarcr.com
• Telephone and WhatsApp: +506 8641 5222

We maintain electronic and, where necessary, paper records of customers, quotations, reservations, services, payments and related communications. Depending on your request, we collect:

• Your name, email address and telephone number.
• Pickup and destination addresses, accommodation, dates and times.
• Flight details.
• Passenger numbers, luggage and requests such as child seats or pet transport.
• Communications about your trip.

For child seats, please provide only the age or size information needed to select the seat.

Billing information. To issue your invoice we collect the information required, which may include the billing name, identification type and number, email, telephone, billing address and economic activity code when applicable. We also receive order references, payment status and transaction or refund references. If you use an account or reservation management function, we process the information needed for that function.

Technical information. Our website and service providers may collect technical information such as IP address, browser, device information, access times, pages visited, session identifiers and security logs. Optional analytics and advertising collection is described below.

Information we do not request. We do not request passport copies or medical records for ordinary transport bookings. Please do not submit diagnoses or other sensitive information in general booking notes. Contact us to discuss practical assistance needs without providing unnecessary medical details.

We use your information to:

• Prepare quotations, calculate routes and prices, and manage reservations and service changes.
• Assign drivers and vehicles, coordinate pickups, monitor the arrival status of the flight you provide, and communicate with you about your service.
• Process orders and payments, issue invoices and manage refunds.
• Respond to complaints, prevent misuse and fraud, keep necessary accounting records and comply with applicable legal obligations.

Flight monitoring concerns your flight arrival information; it does not imply continuous tracking of your personal movements. We use analytics to understand website performance, and advertising tools to measure or personalize campaigns, only under the applicable consent settings. Information collected for a reservation is not automatically permission to send promotional messages.

Required fields are identified when information is collected. Without the contact and itinerary details necessary for the trip, we may be unable to quote, confirm or provide the service. Without required billing information, we may be unable to issue the requested invoice. Optional information is voluntary.

Where consent is required, we request your express consent, in writing or electronically, before processing. Merely browsing the website does not authorize optional marketing or advertising tracking. You may withdraw consent at any time by emailing info@blackcarcr.com. Withdrawal does not affect processing already lawfully carried out. We will explain any effect on a pending service and any information that must be retained by law.

Authorized reservations, operations, customer service and accounting personnel access information according to their responsibilities. Assigned drivers and transport providers receive only the information needed to carry out your trip, such as passenger contact, itinerary, passenger count and practical pickup instructions.

We use service providers for website hosting, database storage, reservation and order management, payments, maps, communications and billing. Depending on the booking channel and active integration, these services include WordPress and WooCommerce, the infrastructure supporting our Lovable website and Supabase database, Google Maps and Places, email or messaging services, and the payment provider identified at checkout. Google Analytics and Google Ads may receive technical and usage information when those tools are enabled under the relevant consent settings.

Providers acting on our behalf must process information only for the assigned purpose, with appropriate confidentiality and safeguards. Banks, payment providers and platforms that determine their own processing purposes also apply their own privacy notices.

We disclose information to authorities when legally required, and as lawfully necessary to handle claims or protect rights. We do not sell customer personal information. Where a disclosure requires your express authorization, we obtain it before making that disclosure.

Card payments are processed through the external payment services shown during checkout or on the payment link. Black Car CR does not store full card numbers or card security codes in its reservation records. We receive the payment information necessary to identify the order and its status.

Never send a full card number or security code by email, WhatsApp or booking notes. The payment provider's privacy and security terms apply to information entered on its payment interface.

Cookies and similar technologies may support sessions, cart contents, security and other necessary website functions. Optional analytics cookies help measure visits and website use; optional advertising technologies help measure campaigns or personalize advertising. The categories enabled, their providers and durations are described in our Cookie Policy.

Where consent is required, optional technologies are activated only after your choice. You can refuse optional analytics and advertising without losing the ability to request transport. Browser settings can also block or delete cookies, although blocking necessary storage may affect checkout or other website functions.

Google Maps and Places help identify addresses and calculate or display routes. When you use these features, Google may receive your IP address, technical information and location search information. Device location is used only when you choose to provide it through the relevant permission. Google's privacy policy is available at https://policies.google.com/privacy. Information about Google's use of data from partner sites is available at https://policies.google.com/technologies/partner-sites.

Some technology and payment providers may process information outside Costa Rica. The location depends on the provider and service configuration. We require appropriate safeguards for processing on our behalf and obtain authorization for transfers when required by applicable law.

We keep personal information only for as long as necessary for the purpose for which it was collected, including completion of a service, customer support, accounting and tax obligations, lawful claims and security. We delete or anonymize information when those purposes no longer require it, subject to legally applicable retention periods. Backup copies are subject to the applicable backup retention cycle and access restrictions. Cookie and analytics retention depends on the technology and its configuration, as described in our Cookie Policy.

Under applicable Costa Rican law, you may request access to your personal information, information about its purposes and use, correction or updating, deletion where appropriate, confidentiality, and withdrawal of consent.

Send your request to info@blackcarcr.com, identifying the information or reservation concerned and the action requested. We may ask for proportionate evidence of identity or authority to avoid disclosing another person's information.

Requests under Article 7 of Costa Rica's Law No. 8968 are free of charge and will be resolved as appropriate within five business days of receipt. If a legal obligation prevents deletion of particular information, we will explain the reason and restrict its use to the applicable purpose.

You may also submit a complaint to Costa Rica's Agencia de Protección de Datos de los Habitantes (PRODHAB). See https://www.prodhab.go.cr.

Hotels, travel agencies, booking platforms, social networks and messaging or payment services may process information under their own policies. This policy covers Black Car CR's handling of information received from those channels, but not processing independently carried out by those organizations.

We may update this policy to reflect changes in our practices or legal requirements. The current version and update date will be published on this website. Where a new purpose or disclosure requires additional consent, we will request it before that processing begins. Publication of a revised policy does not by itself grant that consent.