This Privacy Policy explains what personal data this website collects, why, and how you can exercise your rights over it. It is written to reflect this website’s actual, current configuration rather than a generic template, and takes into account Costa Rica’s Law No. 8968 on the Protection of Individuals with regard to the Processing of their Personal Data.
1. Who operates this website
This website is operated by Two Little Monkeys Chocolate, a family-run cacao farm and chocolate-making experience near La Fortuna, Costa Rica.
2. Website domain
3. Contact email
For any question about this Privacy Policy or your personal data, contact us at twolittlemonkeyschocolate@gmail.com.
4. Categories of data we collect
Depending on how you interact with this website, we may collect: contact details you give us directly (such as your name, email address, or phone number); order and billing/shipping details if you make a purchase; product reviews you choose to submit; and standard technical information generated automatically by your browser and device.
5. Information provided through forms
This website does not currently use a dedicated data-collecting contact form. Visitors reach us directly through a WhatsApp link or a mailto email link, both of which send your message through WhatsApp or your own email provider rather than storing it on this website.
6. Tour and reservation inquiries
When you enquire about or request the Chocolate Tour, the information you share (such as your name, preferred dates, and group size) is used only to plan and confirm your visit.
7. WhatsApp communications
If you contact us via WhatsApp, your conversation is handled through WhatsApp’s own platform, operated by Meta. Please review WhatsApp’s own privacy policy for information on how it processes your data. We use the content of these conversations only to respond to you and coordinate your visit or order.
8. WooCommerce customer and order data
If you place an order through our online shop, our store platform (WooCommerce, running on WordPress) processes the order details you provide — such as the products ordered, quantities, and order total — together with the billing and shipping information described below.
9. Account registration
At the time this policy was drafted, this website does not offer customer account registration, and orders are processed as guest checkout. If account registration is enabled in the future, this policy will be updated to describe what account data is stored and how.
10. Billing and shipping information
At checkout we collect the billing and shipping information necessary to process your order, which may include your name, address, email, and phone number. This information is used to fulfil your order and, where required, to comply with accounting or tax obligations.
11. Payment-processing information
This website does not process payments or store card details. Payments for tour reservations are made on our reservation site.
12. Product reviews or comments
If product reviews are enabled and you submit one, we collect the name, email address, rating, and review text you provide. The review text and display name may be shown publicly alongside the product; your email address is not published.
13. Technical logs and device data
Like most websites, our hosting infrastructure automatically logs standard technical information when you visit, such as your IP address, browser type, device information, and the pages you request. This is used for security, troubleshooting, and keeping the website running reliably.
14. Cookies and similar technologies
This website uses functional cookies set by WordPress and WooCommerce — for example, to keep items in your shopping cart and to remember your session while browsing. At the time this policy was drafted, we do not use analytics, advertising, or marketing cookies.
15. Analytics
This website uses Koko Analytics, a privacy-friendly visit counter hosted on our own server. It counts page views and the websites that send visitors, without cookies and without identifying individual visitors or tracking you across other sites. We do not use Google Analytics, Meta Pixel, or any advertising tracking tool. If that changes, this Privacy Policy will be updated first.
16. Marketing
This website does not currently operate an email newsletter or other marketing-communications tool, and does not use your data for marketing purposes.
17. Embedded third-party services
This website loads web fonts from Google Fonts (fonts.googleapis.com) so that pages display correctly. Loading a font from Google’s servers may expose your IP address and browser information to Google as the request is made. No other embedded third-party service (such as maps or video players) is currently used.
18. Social-network links
This website links to our social media and messaging profiles (currently Instagram, Facebook, and WhatsApp, where configured). If you click through, that platform’s own privacy policy applies to your activity there.
19. Purposes for processing your data
We process personal data to: operate and maintain this website; respond to tour and reservation inquiries; process and fulfil orders; display product reviews you choose to submit; maintain the security of this website; and comply with applicable legal and accounting obligations.
20. Recipients or categories of recipients
We do not sell personal data. We share personal data only with service providers strictly necessary to operate this website and fulfil orders — for example, our hosting provider, Google (for web fonts), and, once enabled, a payment processor and/or shipping carrier — and with WhatsApp/Meta when you choose to message us there.
21. Payment providers
22. Hosting and infrastructure providers
23. Email delivery services
24. Shipping providers
25. Data retention
We keep personal data only for as long as reasonably necessary for the purposes described in this policy — for example, order records may be kept for the period required by applicable accounting or tax rules.
26. Security safeguards
We take reasonable technical and organizational measures to protect personal data against loss, misuse, or unauthorized access, consistent with standard WordPress and WooCommerce security practices and our hosting provider’s own safeguards. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
27. Confidentiality
Access to personal data is limited to those who need it to operate this website and fulfil your order or request.
28. Your data rights
Under Costa Rica’s Law No. 8968, you generally have the right to access, correct (rectify), and request deletion (cancellation) of your personal data, and to object to certain processing, in each case to the extent applicable to the data we hold about you.
29. How to exercise your rights
To request access, correction, deletion, or to ask any other question about your personal data, contact us at twolittlemonkeyschocolate@gmail.com. We will respond to verified requests within a reasonable time.
30. Children’s information
This website is not directed at children, and we do not knowingly collect personal data from children online. Families with children are welcome on the Chocolate Tour itself, where any information needed to plan the visit is provided by an accompanying adult.
31. International data transfers
Some of the service providers described above (such as Google, for web fonts) may process data outside Costa Rica. Where this occurs, we expect those providers to maintain appropriate safeguards for personal data as part of their own privacy practices.
32. External links
This website may link to external websites, including social media and messaging platforms. We are not responsible for the privacy practices of any external website.
33. Changes to this policy
We may update this Privacy Policy from time to time, for example as the website’s features or service providers change. The “Last updated” date at the top of this page reflects the most recent revision.
34. Contact
For any privacy-related question or request, please write to twolittlemonkeyschocolate@gmail.com.