Complimentary shipping on orders over $150·Made in Costa Rica
RIPA

Legal

Privacy Policy.

Last updated: June 2026

Casa RIPA S.A. ("RIPA", "we") is the data controller of personal data you share with us through ripa.cr. We treat your information with care, in accordance with Costa Rica's Ley N.º 8968, Protección de la Persona frente al Tratamiento de sus Datos Personales, its Reglamento, and the oversight of the Agencia de Protección de Datos de los Habitantes (PRODHAB). Where you are located in the European Union or the United Kingdom, we additionally honor the GDPR principles.

1. Data we collect

  • Identification: name, email, phone, shipping & billing address.
  • Transaction: order history, payment status (we do not store card numbers).
  • Account: password (hashed), preferences, fit profile, wishlist.
  • Technical: device, IP address, browser, navigation analytics.
  • Communications: messages you send us through the contact form, email, or WhatsApp.

2. Purpose & legal basis (Art. 5 Ley 8968)

We process your data with your informed, express and unequivocal consent, given when you create an account, place an order, or subscribe to The Letter. Purposes:

  • Fulfilling and shipping your orders, and handling returns.
  • Customer care and after-sales communication.
  • Account management and security.
  • Marketing communications (only with your consent — easily withdrawn).
  • Improving the site through aggregated analytics.

3. Data sharing

We share only the minimum data necessary with our service providers: payment processor (ONVO), shipping carriers (Correos de Costa Rica, DHL), email and hosting providers. Each is bound by confidentiality and security obligations. We do not sell your data.

4. International transfers

Some providers (hosting, analytics) process data outside Costa Rica. We rely on contractual safeguards equivalent to those of Ley 8968 and, where applicable, the GDPR.

5. Retention

We keep your data only as long as needed for the purposes above and for the legal retention periods (e.g. tax records, 4 years under Costa Rican law). Accounts inactive for 5 years are anonymized.

6. Your rights (Art. 7 Ley 8968)

You have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Delete data that is no longer necessary;
  • Object to or restrict certain processing;
  • Withdraw consent at any time, with future effect;
  • Portability of your data in a structured format.

Write to privacidad@ripa.cr to exercise any of these rights. We respond within five business days, as required by Ley 8968.

7. PRODHAB complaints

If you consider that your rights have not been properly attended, you may file a complaint with the Agencia de Protección de Datos de los Habitantes (PRODHAB), Ministerio de Justicia y Paz, San José, Costa Rica — prodhab.go.cr.

8. Security

We apply technical and organizational measures: encryption in transit, role-based access, audit logs, and regular reviews. Sensitive data is stored with strict access controls.

9. Cookies

See our Cookie Policy.

10. Controller & contact

Casa RIPA S.A. · Barrio Escalante, San José, Costa Rica · privacidad@ripa.cr.