Privacy Policy.

1. What data we collect

We collect personal data only when you interact with our website. The main point of collection is the B2B quote request form at /products/quote. Through that form we collect:

• Your full name and company name
• Your business email address
• Your destination market (country) and preferred incoterm
• The products you are interested in and estimated volume in reefers
• Preferred packaging type

We do not collect payment information, government IDs, or any sensitive personal data. We do not use tracking pixels, behavioral analytics scripts, or third-party advertising cookies.

2. How we use your data

The data collected through the quote form is used solely to:

• Respond to your B2B inquiry and prepare a commercial quote
• Follow up on that quote if you do not respond within a reasonable period
• Record the lead in our internal CRM (Odoo) for pipeline management

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not send newsletters or marketing communications without your explicit separate consent.

3. Legal basis for processing

Under the Costa Rican Ley 8968 (Protección de la Persona frente al Tratamiento de sus Datos Personales) and, where applicable, the EU General Data Protection Regulation (GDPR), we process your data on the following bases:

• Legitimate interest: responding to a business inquiry you initiated
• Pre-contractual measures: preparing the quote you requested
• Legal obligation: retaining records as required by Costa Rican commercial and tax law

4. Data retention

Quote-inquiry records are kept in our CRM for a maximum of 5 years from the date of the last interaction, or as required by Costa Rican tax and commercial regulations, whichever is longer. If a quote does not convert to a business relationship and you ask us to delete your data, we will do so within 30 days, subject to any legal retention obligations.

5. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal retention requirements)
• Object to processing based on legitimate interest
• Portability of data you have provided to us

To exercise any of these rights, email avega@crfarmexport.com with the subject line "Data Request". We will respond within 30 calendar days.

6. Cookies and local storage

This website uses only a functional session cookie set by Odoo (our platform), which is required to keep your browsing session alive. This cookie does not track you across sites and is deleted when you close your browser. We do not use analytics cookies, advertising cookies, or any persistent tracking. For full details see our Cookie Policy.

7. Data security

Our website runs on Odoo.sh, a cloud platform with encryption in transit (TLS 1.2+) and at rest. Access to your data in our CRM is restricted to CR Farm Products staff who need it to respond to your inquiry. We review access controls regularly.

8. International transfers

Our server infrastructure is operated by Odoo S.A. (Belgium) on Odoo.sh. By submitting a quote request, your data may be stored on servers located in the European Economic Area. Odoo S.A. is compliant with GDPR as a data processor. We do not transfer your data to any other countries outside the EEA or Costa Rica.

9. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of the page reflects the most recent update. Material changes will be noted in the "Last updated" date. Continued use of the website after a change constitutes acceptance of the updated policy.

10. Contact

For any questions about this Privacy Policy or your personal data:

• Email: avega@crfarmexport.com
• Phone: +506 2462-1338
• Address: Muelle, costado oeste del CEN Sinaí, San Carlos, Alajuela, Costa Rica ZIP 21002

If you are based in the European Union and believe your data rights have not been respected, you may also lodge a complaint with your local data protection authority.