Privacy Policy

1. Data Controller

Beachside Cart Co. operates the website beachsidecartco.com and is responsible for the processing of your personal data.

• Contact email: info@beachsidecartco.com
• Phone / WhatsApp: +506 6113-5334
• Location: Sámara, Guanacaste, Costa Rica

2. Data We Collect

We collect only the data necessary to process your rental booking:

• Full name — provided by your Google account when you sign in.
• Email address — to send your booking confirmation and QR ticket.
• Profile photo — obtained from Google, used only to display your account in the app.
• Booking dates and rental type — to manage fleet availability.
• Payment data — processed directly by Stripe. Beachside Cart Co. never accesses or stores card numbers, CVV, or banking details.

3. Purpose of Processing

We use your data exclusively to:

• Process and manage your golf cart rental booking.
• Send you the confirmation email with the QR pickup ticket.
• Manage the $500 USD security deposit via card authorization (no immediate charge).
• Allow staff to verify your identity at the pickup location using the QR code.

We do not use your data for advertising, marketing, or share it with third parties other than those listed in section 5.

4. Legal Basis for Processing

The processing of your data is based on:

• Contract performance — processing is necessary to complete your booking.
• Explicit consent — granted when signing in with Google and confirming the booking.
• Legitimate interest — for fleet security and deposit management.

5. Third Parties That Receive Your Data

We share data only with the following providers, under data processing agreements:

• Stripe Inc. — payment processing and security deposit management. Stripe Privacy Policy.
• Resend Inc. — transactional email delivery (booking confirmation, QR ticket). Resend Privacy Policy.
• Google LLC — authentication via Google OAuth 2.0. Google Privacy Policy.

We do not sell, rent, or transfer your data to any other third party.

6. Data Retention

We retain your data for the period necessary to manage your booking and up to 2 years after the vehicle return date, for audit, dispute, and legal compliance purposes. After that period, your data is permanently deleted.

7. Your Rights

If you are a resident of the European Union or Costa Rica, you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request the deletion of your personal data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing under certain circumstances.

To exercise any of these rights, email us at info@beachsidecartco.com. We respond within 30 days.

8. Cookies

We use only strictly necessary technical cookies to maintain your authenticated session (bc_access, bc_refresh). We do not use tracking, advertising, or third-party analytics cookies.

9. Security

We implement technical and organizational measures to protect your data: encrypted transmission via HTTPS, authentication with short-lived JWT tokens, and restricted access to data by authorized staff only.

10. Changes to This Policy

We may update this policy periodically. The last updated date will always be visible at the top of this document. For substantial changes, we will notify you by email.