Privacy Policy of The Woods Boquete

1. Who we are

Welcome to The Woods Boquete. This Privacy Policy describes how we collect, use, store, share, and protect the personal data of individuals who visit our website, interact with our forms, request information about our properties or services, or communicate with us through digital or in-person channels.

• Website: https://thewoodsboquete.com
• Privacy contact email: [email protected]
• Phone: +507 6490-0499

If you have questions about this Policy or about the processing of your personal data, you may contact us using the contact details indicated above.

2. Scope of this Policy

This Policy applies to personal data that we collect through:

• our website;
• contact, quotation, visit booking, or brochure request forms;
• digital campaigns and advertisements on third-party platforms, including Meta;
• communications by email, phone, WhatsApp, or other digital channels;
• commercial interactions related to the promotion, sale, reservation, or commercial administration of residential units, apartments, amenities, or services linked to the project.

This Policy does not govern third-party websites, platforms, or services that may be linked to or embedded in our website, which have their own privacy policies.

3. What personal data we collect

We may collect the following categories of personal data, depending on your interaction with us:

a. Identification and contact data

• first and last name;
• email address;
• phone number;
• country of residence;
• city or area of interest;
• preferred language.

b. Commercial and real estate interest data

• type of property or unit of interest;
• budget range;
• purchase purpose, such as residence, investment, retirement, rental, second home, or other;
• estimated purchase timeline;
• location preference or property features;
• interest in tours, visits, events, or promotional materials.

c. Technical and browsing data

• IP address;
• cookie identifiers;
• browser and device type;
• operating system;
• pages visited;
• duration of the visit;
• referring URL;
• interactions with advertisements, forms, or content.

d. Communication data

• content of messages sent through forms, email, chat, WhatsApp, or other means;
• recordings or commercial service notes, when permitted by law and duly disclosed.

e. Data required for commercial or pre-contractual evaluation

If you advance to a more formal stage of negotiation, reservation, due diligence, or financial evaluation, we may request additional information, such as:

• billing information;
• data required for preparing contracts or reservations;
• identification documents;
• information necessary for legal compliance, fraud prevention, commercial due diligence, or regulatory requirements.

We do not deliberately request sensitive personal data unless it is strictly necessary, legally permitted, and duly justified.

4. How we collect your data

We collect your data in the following ways:

• when you fill out forms on our website;
• when you request information, a call, a visit, or a proposal;
• when you interact with our ads or campaigns on social media and advertising platforms;
• when you contact us by email, phone, WhatsApp, or social media;
• automatically, through cookies, pixels, SDKs, and similar technologies;
• through marketing, analytics, CRM, automation, or lead generation providers;
• in certain cases, through referrals, brokers, agents, commercial partners, or public/lawful sources.

5. Purposes of processing

We process your personal data for the following legitimate and commercial purposes:

• responding to information requests;
• sending brochures, quotations, floor plans, renders, availability, and promotional material;
• coordinating calls, visits, meetings, or tours;
• commercial follow-up with leads, prospects, and interested parties;
• personalizing the user experience and improving our website;
• measuring the performance of digital campaigns and advertisements;
• creating audiences, remarketing, and advertising optimization, subject to applicable regulations and the user’s cookie preferences;
• managing relationships with clients, investors, agents, or partners;
• preparing proposals, reservations, pre-contractual documents, or contractual documents;
• complying with legal, regulatory, tax, accounting, fraud prevention, or security obligations;
• protecting our rights, assets, operations, and systems;
• maintaining evidence, records, and commercial and legal traceability.

We will not use your data for purposes incompatible with those described here without notifying you or, where applicable, requesting your consent.

6. Legal basis for processing

When applicable regulations so require, we process personal data based on one or more of the following bases:

• the data subject’s consent;
• the performance of pre-contractual or contractual measures requested by the data subject;
• compliance with legal or regulatory obligations;
• our legitimate interest, where applicable and where the rights and freedoms of the data subject do not prevail;
• other bases permitted by applicable law.

In Panama, Law 81 of 2019 and its regulations establish principles, rights, and obligations for the processing of personal data, including duties of information, purpose limitation, proportionality, security, and data subject rights.

7. Cookies, pixels, and similar technologies

Our website may use first-party and third-party cookies, tags, scripts, pixels, and similar technologies to:

• enable essential website functions;
• remember preferences;
• analyze traffic and browsing behavior;
• measure conversions;
• display personalized or relevant advertising;
• perform remarketing on platforms such as Meta or other advertising networks.

Types of cookies we may use

• Strictly necessary cookies: allow the basic operation of the website.
• Functional cookies: remember settings and preferences.
• Analytics or performance cookies: help us understand how users use the website.
• Advertising or targeting cookies: help measure and personalize advertisements.

When required by applicable law, we will request your consent before activating non-essential cookies, especially advanced analytics and advertising cookies. Modern regulatory guidance requires clearly explaining what cookies do and obtaining active consent for non-essential cookies.

You can manage your preferences through our cookie banner or cookie preference center, as well as through your browser settings. Please note that disabling certain cookies may affect the operation of the website.

8. Digital advertising, Meta Pixel, and audiences

We may use advertising and measurement tools offered by third parties, including Meta business tools, to understand the performance of our campaigns, measure conversions, create audiences, perform remarketing, and optimize advertisements.

These tools may collect or receive information about your interactions with our website and advertisements, including online identifiers, browsing events, and conversions. Where applicable, this processing will be subject to your cookie consent or another valid basis under applicable law.

In certain U.S. jurisdictions, some behavioral advertising or cross-context behavioral advertising practices may trigger special notice and opt-out obligations. Meta recognizes that its business tools involve specific privacy and data-use considerations, and California law requires more detailed notices where there is a “sale” or “sharing” of personal information under that law.

9. Who we share your data with

We may share your personal data, to the extent necessary and legitimate, with:

• affiliated companies, parent companies, subsidiaries, or entities linked to the project;
• hosting, analytics, CRM, email marketing, automation, call center, or technology support providers;
• marketing, advertising, and media agencies;
• advertising platforms and social networks;
• legal advisors, accountants, auditors, or consultants;
• authorized brokers, real estate agents, or commercial partners;
• financial, fiduciary, notarial, or compliance entities, when necessary for pre-contractual or contractual processes;
• administrative or judicial authorities, when there is a legal obligation or valid requirement.

We require our providers and data processors to handle data in accordance with instructions, reasonable security measures, and appropriate contractual obligations.

We do not sell personal data in the traditional sense of commercialized contact lists as an independent database. However, depending on how certain advertising or measurement tools are configured, some jurisdictions may consider that “sharing” occurs for behavioral advertising purposes. In those cases, we will provide the notices and options required by applicable regulations.

10. International data transfers

Due to the digital nature of our operations and the use of technology providers, your personal data may be stored or processed outside Panama, including in the United States or other jurisdictions where our providers, CRM platforms, analytics services, cloud hosting, or advertising tools operate.

When we carry out international data transfers, we will seek to ensure that they are performed under reasonable and appropriate mechanisms and safeguards in accordance with applicable law, including contractual clauses, security controls, access limitation, and provider evaluation.

11. How long we keep your data

We will retain your personal data only for the time necessary to fulfill the purposes described in this Policy, including legitimate commercial purposes, handling requests, following up on opportunities, legal compliance, defense of claims, fraud prevention, and recordkeeping.

As a general guideline:

• contact inquiries and forms: for as long as necessary to handle the request and provide reasonable commercial follow-up;
• client or reservation data: during the contractual relationship and for applicable legal, tax, accounting, and evidentiary periods;
• marketing data: until you withdraw your consent, validly object, or we no longer need it;
• cookies and trackers: according to their technical duration and the user’s preferences;
• security records and logs: for reasonable security, audit, and incident prevention periods.

When the data is no longer necessary, we may delete it, anonymize it, or block it as appropriate.

12. Information security

We apply reasonable technical, organizational, and administrative measures to protect personal data against loss, unauthorized access, alteration, improper disclosure, or destruction. These measures may include access controls, encryption where reasonable, permission management, backups, monitoring, and confidentiality agreements.

However, no electronic transmission or storage system is absolutely infallible. Therefore, although we seek to protect your data, we cannot guarantee absolute security.

13. Your privacy rights

Subject to applicable law and reasonable verification processes, you may request:

• access to your personal data;
• rectification or updating of inaccurate data;
• cancellation or deletion, where appropriate;
• objection to processing in certain circumstances;
• restriction of use, where applicable;
• withdrawal of consent, when processing depends on it;
• portability, where applicable;
• information about third parties with whom we share your data, where permitted by law.

To exercise your rights, write to us at: [email protected]

We may request reasonable information to verify your identity before processing the request.

14. Additional notice for California residents

If you are a California resident, and to the extent that the CCPA/CPRA applies to our activity, you may have additional rights, including:

• knowing the categories of personal information we collect;
• knowing the purposes of processing;
• requesting access to specific personal information, subject to exceptions;
• requesting deletion;
• requesting correction of inaccurate information;
• opting out of the “sale” or “sharing” of personal information, where applicable;
• limiting certain uses of sensitive personal information, where applicable;
• not being discriminated against for exercising your rights.

California regulations require businesses to disclose, at a minimum, the categories of information collected, the purposes, and whether that information is sold or shared; in addition, where “sale/sharing” exists, specific opt-out notices are required.

If our operations or advertising tools trigger those obligations, we will enable appropriate mechanisms, for example a link such as:

“Do Not Sell or Share My Personal Information / No vender ni compartir mi información personal”

and/or equivalent tools in our privacy preference center.

To exercise your California rights, contact us at: [email protected]

15. Direct marketing and promotional communications

We may send you communications about properties, project updates, availability, events, news, investment opportunities, and promotional content by email, phone, messaging, or similar means, in accordance with applicable law.

You may unsubscribe from our promotional emails through the unsubscribe link included in those messages or by contacting us directly. Even if you unsubscribe from promotional messages, we may continue sending you non-promotional communications related to active requests, reservations, contracts, customer service, security, or legal compliance.

16. Minors

Our website and services are intended for adults and are not designed for children. We do not deliberately collect personal data from minors in violation of applicable law.

If we discover that we have collected personal data from a minor without the legally required authorization, we may delete it or take appropriate measures. In the United States, COPPA imposes specific requirements for websites directed to children under 13 years of age or that have actual knowledge that they collect data from them.

If you believe that a minor has improperly provided us with personal data, contact us at: [email protected]

17. Embedded content and third-party services

Our website may include embedded content or third-party integrations, such as maps, videos, forms, widgets, analytics platforms, social networks, or anti-spam services. Such third parties may collect information in accordance with their own privacy policies.

We are not responsible for the privacy, security, or content practices of third parties. We recommend reviewing their policies before interacting with those services.

18. Comments, forms, and media files

If we enable comments, forms, or other interactive spaces on the website, we may collect the information entered by the user, as well as technical data related to the request, spam prevention, security, and website administration.

If you upload images or files to the website, avoid including unnecessary sensitive or geolocation metadata, as certain files may contain embedded information that can be extracted.

19. Legal compliance, fraud prevention, and defense of rights

We may process and retain personal data when necessary to:

• comply with laws, regulations, resolutions, or legitimate requirements;
• respond to competent authorities;
• prevent fraud, abuse, spam, security incidents, or misuse;
• investigate claims or disputes;
• exercise or defend legal rights.

20. Changes to this Policy

We may update this Privacy Policy periodically to reflect legal, regulatory, technological, operational, or commercial changes. The current version will be the one published on this website with its update date.

When changes are material, we may take additional measures to inform you, if appropriate or legally required.

21. Contact

For questions, requests, or the exercise of privacy rights, you may write to us at: