Privacy Policy

Who is responsible for your data

4rentpanama.com, S.A., operating as Ocean Properties and OP Capital, is responsible for the personal data collected through this site. In this policy, “we” and “us” refer to that company.

Scope of this Policy

This Privacy Policy applies to personal data collected through:

• pedasioceanproperties.com
• Private enquiry forms for Land at Playa Destiladeros
• Intermediary Buyer Registration forms
• Email, WhatsApp and other direct communications with Ocean Properties or OP Capital
• Personalized technical-sheet links made available to registered intermediaries
• Transactional emails sent in connection with enquiries, Buyer Registrations and related operational communications

This Policy does not apply to third-party websites, platforms or services that may be linked from our website. Their privacy practices are governed by their own policies.

Personal data we collect

The data we collect depends on how you interact with us.

Private enquiries

When you submit a private enquiry, we may collect:

• Full name
• Email address
• WhatsApp number or telephone number
• Lot or lots of interest
• Message or enquiry details
• Language preference
• The page or source from which the enquiry was submitted
• Technical information necessary to protect the form and website, such as an IP-derived security hash, browser type, device information, referrer and submission time

Intermediary Buyer Registrations

When an intermediary submits a Buyer Registration, we may collect:

• Intermediary’s full name
• Agency or brokerage name
• Professional email address
• Telephone number or WhatsApp number
• Buyer’s full name
• Buyer’s email address and/or telephone number
• Lot or lots of interest
• Buyer-presentation status
• Optional notes submitted by the intermediary
• Accepted version of the broker terms
• Registration number
• Submission, review, confirmation and expiry timestamps
• Audit-log information related to the registration process
• Technical information necessary for security and evidentiary purposes, including an IP-derived security hash, browser information and submission time

We do not request passport numbers, national identification numbers, nationality, buyer country of residence, buyer budget, tax status or KYC documentation through the initial enquiry or Buyer Registration forms.

Why we use personal data

We use personal data only where necessary for legitimate and identified purposes, including:

• Responding to private enquiries
• Coordinating property information, availability and private viewings
• Identifying the lot or lots in which a person is interested
• Operating and protecting our website and forms
• Preventing spam, fraud and duplicate submissions
• Processing and reviewing intermediary Buyer Registrations
• Recording the date, time, terms version and status of a Buyer Registration
• Managing communications with intermediaries
• Providing registered intermediaries with personalized technical-sheet access and approved sales materials
• Managing internal sales follow-up, viewings and related operational activity
• Meeting legal, contractual, accounting, evidentiary and compliance obligations
• Protecting the rights, property, security and legitimate interests of 4rentpanama.com, S.A., buyers, intermediaries and third parties

We do not use personal data to make automated decisions that produce legal or similarly significant effects on individuals.

Legal basis and consent

We process personal data under the Personal Data Protection Law of Panama (Law 81 of 26 March 2019) and, where you are in the European Economic Area, the United Kingdom or Switzerland, under the General Data Protection Regulation and its national equivalents.

Each purpose has its own legal basis:

Responding to enquiries and coordinating viewings

Steps taken at your request before entering into a commercial relationship. We do not rely on consent for this: you asked us to reply.

Processing and reviewing intermediary registrations

Steps taken at the intermediary’s request before entering into a contract, and our legitimate interest in administering the published broker terms fairly.

Website security, spam prevention and fraud prevention

Our legitimate interest in protecting the site, its forms and the people who use them.

Audience measurement and advertising measurement

Your consent where consent is required in your region; elsewhere, our legitimate interest in knowing how our property listings perform. See section 13.

Accounting, tax, evidentiary and compliance records

Compliance with a legal obligation.

Establishing, exercising or defending legal claims

Our legitimate interest in defending our rights, and the legal obligations that apply to the underlying records.

When you submit a private enquiry, we use your details to respond to it and to coordinate a private viewing. The basis for that is your own request, not your consent. The box you tick on the form confirms that this Policy was shown to you before you sent it; it is a record of notice, not a consent to processing.

When an intermediary submits buyer contact details through a Buyer Registration, the intermediary confirms that they are authorized to provide those details for the purpose of the registration.

Consent may be withdrawn at any time. Withdrawal of consent does not affect processing already carried out lawfully before withdrawal, nor processing required for legal obligations, evidentiary purposes or the establishment, exercise or defense of legal claims.

Buyer Registration and intermediary records

Buyer Registration records are used to document the presentation of a buyer by an intermediary and to administer the published broker terms.

A Buyer Registration is not a purchase agreement, an offer to sell, a guarantee of commission or a confirmation of eligibility until Ocean Properties or OP Capital confirms eligibility in writing under the published broker terms.

We may use registration records to:

• Check for possible duplicate or pre-existing buyer records
• Review eligibility under the published broker terms
• Record acceptance of the applicable terms version
• Maintain a timestamped audit trail
• Record review decisions, confirmations, clarifications, expiry and related communications
• Protect the integrity of the registration process in the event of a dispute

We do not disclose the identity, contact information or registration details of another buyer or intermediary to a submitting intermediary.

How we share personal data

We do not sell personal data.

We may share personal data only with parties that need it for the purposes described in this Policy, including:

• Authorized personnel of Ocean Properties and OP Capital involved in sales, operations, administration, legal review or compliance
• Service providers that support website hosting, content delivery, security, spam prevention, database storage, email delivery or communications
• Professional advisers, including legal, tax, accounting or insurance advisers, where necessary
• Competent authorities, courts, regulators or other parties where disclosure is required by law or necessary to protect legal rights
• A buyer or intermediary only where disclosure is necessary for the specific transaction and permitted by applicable law

Service providers process data only under instructions and safeguards appropriate to their role.

Hosting, infrastructure and service providers

Our website and operational systems may use infrastructure and services provided by third parties, including:

• Hosting and content-delivery providers
• Cloudflare services for security, form protection, access control, Workers and database infrastructure
• Cloudflare Turnstile for bot and abuse prevention
• Google Analytics 4 (Google LLC) for aggregated measurement of how visitors use this website
• Google Ads (Google LLC) for measuring whether visits that originate from our advertisements lead to an enquiry
• Email-delivery services used for transactional communications
• Bunny CDN or related content-delivery infrastructure for approved property media
• WhatsApp when you choose to contact us through WhatsApp

These providers may process technical information or personal data as necessary to provide their services. Processing may occur in Panama or in other jurisdictions where these providers operate, subject to applicable safeguards.

International transfers

Because we use internet-based hosting, security, database, email and communications providers, personal data may be processed outside Panama.

Where personal data is transferred internationally, we take reasonable steps to use service providers and safeguards appropriate to the nature of the information and the purposes described in this Policy.

Where a transfer starts in the European Economic Area, the United Kingdom or Switzerland and reaches a country without an adequacy decision, it relies on the European Commission’s standard contractual clauses, which are incorporated into the data-processing agreements of the providers listed in section 8. You may request a copy of the relevant clauses at [email protected].

How long we keep your data

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy.

Private buyer enquiries with no meaningful follow-up are retained for 24 months from the last interaction.

Private buyer enquiries that become qualified leads or include a private viewing are retained for 5 years from lead closure or the last relevant interaction.

Broker Buyer Registrations that are rejected, withdrawn, not confirmed or otherwise do not become confirmed are retained for 24 months from the decision date.

Confirmed Broker Buyer Registrations are retained for 5 years from the expiry date of the six-month confirmed registration period.

Broker Buyer Registrations connected to a promise of sale, completed sale, deposit, commission, invoice, accounting record, claim or dispute are retained for at least 5 years from completion of the transaction or the last applicable obligation.

Records of the Policy shown at the time of submission, broker buyer-contact authorization records, consent records where consent applies, and registration audit logs are retained for the same period as the associated enquiry or Buyer Registration.

Transactional-email delivery logs are retained for 24 months from the email event.

Security, rate-limit and Turnstile-related operational logs are retained for 90 days.

Blocked spam or honeypot submissions are retained for 30 days.

Accounting records, payment records, invoices and supporting documentation are retained for at least 5 years from the relevant transaction or legal obligation.

Security

We use reasonable administrative, technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

These measures may include:

• Access controls for internal systems
• Protected internal routes and authorized-user access
• Server-side form validation
• Bot and spam protection
• Secure database storage
• Timestamped records and audit logs for intermediary registrations
• Password, credential and secret-management controls
• Data minimization and limited collection at the initial-contact stage

No method of transmission or storage is completely secure. If you believe your interaction with us has been compromised, please contact us promptly at [email protected].

Your rights

Subject to applicable law, you may request:

• Access to the personal data we hold about you
• Correction or updating of inaccurate, incomplete or outdated data
• Cancellation or deletion of personal data where applicable
• Objection to certain processing
• Restriction of processing, where applicable
• Withdrawal of consent
• Portability of your personal data, where applicable
• Information about the purposes and recipients of the processing

To exercise a right, contact:

[email protected]

Please include enough information for us to verify your identity and locate the relevant record. We may request reasonable information to verify a request and protect the security of personal data.

Some requests may be limited where retention or processing is required by law, necessary to protect the rights of others, necessary to preserve an intermediary-registration audit record, or necessary for the establishment, exercise or defense of legal claims.

How long we take to reply

Under the Personal Data Protection Law of Panama we reply within ten business days. If the General Data Protection Regulation applies to you, we reply within one month, which may be extended by two further months for complex requests; we will tell you within the first month if that happens.

Complaints

If you believe we have handled your personal data incorrectly, we would rather hear it first at [email protected]. You may also complain to a supervisory authority:

• Panama — National Authority for Transparency and Access to Information (ANTAI), Directorate for the Protection of Personal Data
• Spain — Spanish Data Protection Agency (AEPD)
• France — National Commission on Informatics and Liberty (CNIL)
• Any other country — the supervisory authority of your place of residence or work

Cookies and similar technologies

Our website may use essential technical cookies or similar technologies necessary for security, form functionality, language preference, accessibility and basic website operation.

We may also use security technologies, including Cloudflare Turnstile, to protect forms from spam and abuse.

Measurement. We use Google Analytics 4 to understand, in aggregate, how visitors reach and use this website (pages viewed, approximate country, device type, and whether an enquiry form was submitted), and Google Ads conversion measurement to know whether a visit that began with one of our advertisements led to an enquiry. These tools may set cookies and collect your IP address and device identifiers. We do not use them to build advertising profiles of you, and we do not sell personal data.

Consent by region. If you visit from the European Economic Area, the United Kingdom, Switzerland or the province of Québec, these tools run in a restricted mode that does not store cookies or identifiers on your device unless you give consent; only aggregated, non-identifying signals are collected. Elsewhere, including Panama, the United States and the rest of Canada, they run with cookies enabled under our legitimate interest in measuring the performance of our property listings.

Your choices. You can block or delete cookies in your browser settings, install the Google Analytics opt-out browser add-on, and manage how Google uses data for advertising at adssettings.google.com. Blocking these cookies does not affect your ability to browse this website or send an enquiry. Google's own handling of this data is described in Google's Privacy Policy.

Children

Our services and property enquiries are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact [email protected] so that we can review the matter.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, systems, legal obligations or data practices.

The current version will be published on this page with its effective date. Material changes will be reflected by updating the effective date and, where appropriate, by providing additional notice.

Contact

For privacy questions, requests or concerns, contact: