Search here...

Privacy Policy (and Cookies)

Last updated: 02/01/2026

1. Who we are

The website Otintiko (multi-vendor marketplace) is operated by ALAM HUB SRL (cédula jurídica: 3-102-929575), located at Cartago Province, La Unión, Tres Ríos 30301, Residencial Loma Verde, Costa Rica.

2. Scope

This policy explains how we collect, use, share, and protect personal data when you visit Otintiko, create an account, place an order, contact support, or use our services.

It also covers processing related to test phases (access, mini-surveys, bonus/coupon) and, where applicable, strictly necessary data exchanges when certain services are operated by external providers (for example via the e-benefiko.otintiko.com subdomain).

3. Data we collect

Account data: first/last name, email, password (encrypted), language preferences.
Business data: company name, identification number (cédula/DIMEX), and related data required for verification.
Order data: purchased items, amounts, status, history, invoices/credit notes.
Address data: billing and/or shipping address, phone number (required).
Support: messages through the contact form / your account, and attachments if you provide them.
Test-phase data: mini-survey participation, responses provided, and related information (e.g., campaign identifiers, progress tags).
Newsletter: email and preferences if you subscribe (newsletter/partners).
Technical data: security logs, IP address, session identifiers, cookies (see Section 9).

4. Why we use your data

Service / contract performance: manage your account, process orders, handle payments, arrange delivery or pickup.
Test phase / access: verify eligibility (e.g., business consistency), manage access to the test phase, send communications needed to run the test (themes, mini-surveys), and deliver the associated bonus/coupon.
Service emails: send emails necessary for the operation of the service (access, validation, test-phase information, support, bonus/coupon), regardless of whether you subscribe to the newsletter.
Support: answer requests, manage incidents and claims.
Security: fraud prevention, site and account security.
Marketing (with consent): send newsletters and/or partner communications if you subscribe, with opt-out at any time.
Analytics (if enabled and with consent): improve the website and user experience (tool: Google Analytics).

5. Who we share data with

We only share what is necessary depending on how you use the service:

Sellers (E-Benefiko): to prepare and fulfill your order, the seller may access the information displayed in the seller order page, including order reference/status, items (products, quantities, prices), selected shipping method, shipping cost/weight, and your necessary contact details (name, email, phone) and billing and/or shipping addresses.
Payment: BAC Credomatic (online payment solution). Card data is processed by BAC; Otintiko does not store full card details and only receives confirmation information (status, reference, amount).
Shipping: Correos de Costa Rica and/or Click & Collect (the seller), depending on the selected method (name, address, phone, and information required for delivery/pickup).
Hosting: Hostinger International Ltd., 61 Lordou Vironos Street, Larnaca 6023, Cyprus (VAT Reg #: CY10301365E).
External providers (services operated outside Otintiko): when you request or use a service operated by an external provider (for example via e-benefiko.otintiko.com), we may share strictly necessary data with that provider to deliver and support the service (for example: identity, email, phone, business data, and information related to the request/service). Provider-specific terms and information are available on the relevant subdomain.
Emails:
- Service / transactional emails (access, validation, account and test-phase information, support, bonus/coupon): via a transactional sending infrastructure (for example Mailchimp Transactional) and/or the site’s technical infrastructure.
- Newsletter / partners (if subscribed): Mailchimp, with opt-out at any time.

6. Confidentiality & e-commerce obligations (Costa Rica)

In line with applicable Costa Rican e-commerce requirements, we implement security measures to protect data confidentiality, including in our relationships with sellers and service providers when needed to operate the marketplace.

7. Retention periods

We keep personal data only as long as necessary for the purposes described above, then delete or anonymize it. Some data may be kept longer when required by specific rules or in case of disputes. As guidance:

Account: while the account remains active. If you close your account, deletion/anonymization occurs within a reasonable time, except for data linked to orders that must be retained.
Orders / invoices: 5 years (tax/accounting obligations).
Support: generally up to 2 years after case closure (after-sales follow-up), unless a dispute exists.
Test-phase data (mini-surveys / bonus): retained for a reasonable period to run the campaign and improve the service, then deleted or anonymized.
Newsletter: until you unsubscribe (we may keep proof of opt-out if needed).
Technical logs: generally up to 12 months (security, diagnostics).
“Right to be forgotten” limit: unless exceptions apply, data that may affect the individual should not exceed 10 years after the purpose ends.

8. Your rights and how to exercise them

You may request access, correction, or deletion of your data. For any request (including account deletion), please use our contact form.

We may ask for identity verification (e.g., confirmation via the account email). We handle requests as quickly as possible and, in principle, within 5 business days from receipt.

Note: some data cannot be deleted immediately when it must be retained (e.g., invoice/tax requirements, dispute management).

9. Cookies

We use cookies and similar technologies to run the site, secure your session, and—depending on your choices—measure audience and improve the experience.

9.1 Strictly necessary cookies

PHPSESSID (otintiko.com): PHP session cookie required for site operation (session).
PrestaShop-… (.otintiko.com): essential PrestaShop cookies (session, cart, authentication, checkout preferences).
sf_redirect (otintiko.com): technical cookie that may appear during admin/maintenance actions.

9.2 Analytics (if enabled and with consent)

If you accept analytics, Google Analytics may set cookies to generate statistics (e.g., visits, pageviews). You can refuse these cookies via the consent banner.

9.3 Third-party cookies

Some cookies may come from embedded third-party resources (for example: video players, fonts, measurement tools, social media buttons). If you do not want this, please refuse non-essential cookies.

9.4 Managing your preferences

You can accept or refuse non-essential cookies through the consent banner. You can also delete or block cookies in your browser settings. Blocking necessary cookies may impact site functionality.

9.5 Providers and international transfers

Some providers (hosting, email delivery, technical tools) may process data from countries outside Costa Rica. In such cases, we apply appropriate safeguards and limit shared data to what is strictly necessary.

10. Security

We implement appropriate security measures (restricted access, account protection, HTTPS encryption) to protect your data against unauthorized access, alteration, or loss.

11. Updates

We may update this policy. The latest update date is shown at the top of this page.