Privacy Policy

01

Who is responsible

The data controller is 4rentpanama.com S.A., the company that operates Ocean Properties and this website.

The processing described here is subject to Ley 81 de 26 de marzo de 2019, on the protection of personal data in the Republic of Panama.

02

What we collect, and why

Only what you type into a form. There is no hidden collection anywhere on this site.

If you send a private enquiry

Your name, email, telephone, the lots you are interested in and your message, if you write one. We use it to answer you, to arrange a viewing if you want one, and to follow up on that conversation. Nothing else.

If you are an intermediary registering a buyer

Your name, agency, email and telephone; your buyer’s name and their email or telephone; the lots, and whether you have already introduced them. We use it to review the registration, to decide it, and to keep evidence of when it arrived and which version of the terms you accepted.

In that second case you are giving us a third party’s data. You are responsible for having told your buyer that you are registering them and for having their agreement to do so.

In both cases we also record

The date and time in Panama, the page the form came from, the language, the version of this policy you accepted, whether the anti-bot check passed, and a one-way fingerprint of your IP address — never the address itself. Section 05 explains that.

03

What we do not do

We do not sell your data. We do not share it with advertisers. We do not build profiles of you, we do not track you across other websites, and we do not use your data to decide anything about you automatically.

We do not send newsletters or marketing campaigns from the data collected here. If we write to you, it is about the enquiry or the registration you sent us.

04

Cookies

This site sets no analytics cookies and no advertising cookies. There is no Google Analytics, no Tag Manager, no Meta pixel, no session recording and no heat mapping. Our pages do not write cookies of their own, and they do not store anything in your browser.

One third party does set something, and it is necessary: Cloudflare Turnstile, the check that confirms a form was sent by a person and not by a machine. Without it the forms would be filled by bots within days.

Nothing on this site asks you to accept cookies, because there is nothing optional to accept.

05

Your IP address

We never store it. What we store is a one-way fingerprint: the address is combined with a secret value that only we hold and then passed through a cryptographic function. The result cannot be turned back into an address.

It exists for one purpose: to notice that the same source is sending hundreds of forms, and stop it. It is not used to locate you or to identify you.

06

Who else touches your data

Four suppliers, each doing one job:

None of them may use your data for their own purposes. Because these suppliers operate internationally, your data may be processed outside Panama.

07

How long we keep it

Not indefinitely, and not by hand. Each record carries its own expiry date, and a scheduled job enforces it.

08

What happens when the time is up

The record is not deleted. It is anonymised: the registration number, the dates and the audit trail survive, and everything that identifies a person disappears. That way there is still proof that a registration existed, without keeping whose it was.

One exception overrides every period above: if a record is under legal hold — because there is a claim, a dispute or an obligation attached to it — it is not touched until that hold is lifted.

09

Your rights

You may ask us to show you what we hold about you, to correct it, to erase it, to stop using it, or to hand it to you in a portable form.

Write to [email protected] from the address you used, or tell us which address you used. We answer within thirty calendar days. We will not ask you to justify the request.

If a record is under legal hold, or if the law requires us to keep it, we will tell you so, tell you why, and tell you when that ends — rather than simply refusing.

10

How it is protected

The forms travel encrypted. The records live in a database that is not reachable from the public internet. The internal screen where registrations are reviewed sits behind an identity check and is closed to everyone who is not expressly authorised. Every decision on a registration is recorded with who made it and when, and that record cannot be overwritten.