Privacy Policy

We process your personal data in accordance with Costa Rica's Law on the Protection of Individuals with regard to the Processing of their Personal Data (Law 8968). This policy explains what we collect, why, and who we share it with.

Your name, email, phone number and shipping address; your tax details if you ask for an electronic invoice; the orders you place; and, if you create an account, your saved addresses and cards (see section 3). We also receive basic technical data such as your IP address and browser, which we keep for security.

To process and deliver your orders, send you the purchase confirmation and updates about your order, issue the electronic invoice when you request it, handle cancellations and returns, answer your messages and prevent fraud. We only send you news and offers if you subscribe to our newsletter, and you can unsubscribe at any time.

Card payments are processed by BAC Credomatic through its PowerTranz gateway, which is PCI DSS certified. Your card number, expiry date and CVV travel encrypted to the processor and are never stored on our servers or seen by our team, and every payment is verified with your bank's 3-D Secure authentication. If you save a card, we keep only a token issued by the bank, the brand, the last four digits, the cardholder name and the expiry date.

Only with the providers we need in order to sell to you: BAC Credomatic and PowerTranz (payments), Correos de Costa Rica (shipping), NS Factura and the Ministry of Finance (electronic invoices, when you request one), our email provider (to send you your order emails) and our hosting and database providers. We never sell your data.

Our site uses HTTPS encryption, and access to your data is restricted to the people who need it. We keep your data while your account is active and for as long as tax and accounting law requires us to keep the records of a sale.

We only use the cookies the store needs to work: your session, your cart, your language and your currency. Our contact form uses Google reCAPTCHA to block spam, which may set its own cookies. We do not use advertising cookies.

Some of our providers store data on servers outside Costa Rica. We only work with providers that protect it under equivalent security standards.

You can ask to access, correct or delete your personal data, or withdraw your consent, by writing to info@delohanabikinis.com. We reply within 5 business days. You can also file a complaint with the Agency for the Protection of Individuals' Data (PRODHAB).

If we change this policy, we publish the new version here with its date.