Our application asks thirty four questions, several of them about your psychiatric history, your medication and your body. That is more sensitive than most people hand to a doctor they have met. So this policy is written the way the rest of the site is: plainly, specifically, and without the parts a lawyer would pad it with. Here is what we collect, who is allowed to read it, and the things we will never do with it.
Nothing here is collected to build a marketing profile. Every field on the application exists because a doctor has to weigh it before offering a place. If a question does not affect that decision or your safety in ceremony, we do not ask it.
Psychiatric history, current medication, cardiac and neurological history, substance use, and what you are hoping for. Used solely for physician screening and for keeping you safe during ceremony.
Your name, email, country and time zone, and an emergency contact. Used to run your screening call, coordinate arrival, and reach someone if there is a medical event on site.
Handled by a regulated payment processor. We see that a payment succeeded and the plan you chose; we never see or store your full card number. Nothing is charged before a physician confirms a place.
Aggregate page views and rough region, gathered by privacy-respecting analytics that do not build a profile of you. No cross-site tracking, and no advertising pixels. Details in the cookies section.
The same small resident team you meet on the Osa is the entire list of people who can see any part of your file. Each role sees only the part it needs. No one at our other houses, and no outside company, sees your medical answers.
Reads every one of the thirty four answers to decide whether to offer a place. This is the only person who sees your medical history in full.
See the parts that bear on holding you safely in the room, shared by the physician on a need-to-know basis. They do not see the full file, and they never see payment details.
Sees your name, arrival details and dietary notes to arrange transfers and rooms. No access to medical answers or the reasons behind a decision.
A payment processor, an email provider and encrypted file storage. Each is contractually bound to process data only on our instructions, and none is permitted to use it for their own purposes.
Psychiatric history and medication are special-category personal data under both European and Californian law, and we handle them accordingly, whether or not the law where you live requires it.
Stored encrypted, in transit and at rest, separate from your marketing or booking record.
Read in full by the screening physician, and never merged into any list used to email you.
Never given to insurers, employers, immigration or any authority, except a narrow legal order we would resist.
Deleted at the end of the season if you are declined or do not proceed, without you having to ask.
By submitting the application you give explicit consent for the physician to process these answers for screening. You can withdraw that consent at any time by writing to us; withdrawing it before a decision simply ends your application.
The rest of this policy explains what we do. This is the shorter, more important list of what we do not, and it does not change with a season or a new marketing hire.
We never sell, rent or trade your data, and we do not hand it to data brokers or list resellers. There is no version of our business that involves this.
No Facebook pixel, no Google Ads tag, no third-party trackers. Reading this page will not follow you around the internet afterwards.
A declined applicant receives a reason and a referral list, never a drip campaign. We do not run automated sequences designed to wear you down.
Your answers are not fed into any advertising model or third-party AI system. They are read by a person, for one purpose, and then kept or deleted as described here.
Retention is set to the purpose, not to a default of forever. These are the periods we work to; you can ask us to delete sooner at any point.
Medical answers deleted at the end of that season.
Kept for your safety across the twelve-month integration period, then reviewed.
Held as long as tax and accounting law requires, then deleted.
Kept while it is useful to you and us, and deleted on request.
Wherever you live, we extend the same rights, the ones written into Europe’s GDPR and California’s CCPA, to everyone who applies. To use any of them, email support@eclmedia.agency. We may ask one or two questions to confirm it is really you, then act within 30 days at no charge.
Ask for a copy of everything we hold about you, in a readable file you can take elsewhere.
Fix anything inaccurate or out of date. For medical answers this matters for your safety, so tell us early.
Have your data deleted, except the narrow records we are legally required to keep, such as invoices.
Withdraw consent or object to a use at any time. You can unsubscribe from every email in one click.
Write to us first and we will make it right. You also have the right to complain to a data protection authority: in the EU or UK your national regulator, in California the Attorney General, and in Costa Rica the Agencia de Protección de Datos de los Habitantes (Prodhab). We would rather you came to us first, but this is your right and we will not stand in its way.
We run five houses, one in Costa Rica and four in Peru. They share a booking system but not your file. If we think Peru is the better answer for you and suggest it, we ask your consent before passing anything to that house, and you are free to say no and apply yourself.
Because the house is in Costa Rica, your data is processed there and with reputable providers whose servers may sit in the US or EU. Where the law requires it, we use standard contractual clauses to protect that transfer.
Encryption in transit and at rest, access limited by role, and multi-factor sign-in for staff. No system is perfect; if a breach ever affects your data we will tell you and the relevant regulator promptly, and say plainly what happened.
No. We do not sell, rent or trade your information to anyone, we do not share it with data brokers, and we run no third-party advertising pixels that would follow you around the internet after you leave the site. Your file exists to decide whether we can hold you safely, and for nothing else.
Only the licensed physician who screens applications, and, where it bears on your care in ceremony, the two facilitators and integration lead who will be in the room with you. Medical answers are never visible to marketing, to a payment processor, or to staff at our other houses, and they are not shared with insurers or employers under any circumstances.
Email support@eclmedia.agency and ask. We confirm the request, delete everything we are not legally required to keep, and complete it within 30 days. If you were declined or chose not to proceed, we delete the medical portion of your application automatically at the end of that season without you having to ask.
The site uses a small number of strictly necessary cookies and privacy-respecting analytics that count visits without building a profile of you. There are no Facebook, Google Ads or other retargeting pixels on this site, and you can refuse non-essential cookies with the site still working. More in the cookies section above.
Ayahuasca Retreats Costa Rica is the controller of the information described here. Write to us for access, correction, deletion, or anything in this policy you want explained, and a person will answer, not a form.
When this policy changes we update the date at the top and keep the previous version on file. If a change materially affects how we handle information you have already given us, we email everyone with an active application or booking before it takes effect, rather than quietly editing the page and hoping you do not notice.