Privacy Policy

1. Data controller

GASI Sports, legal ID [cédula jurídica pendiente], with registered address at [dirección pendiente], San José, Costa Rica. Email: hola@gasisports.com.

2. Data we collect

• Account: name, email and password (encrypted; we never see it).
• Orders: name, phone, delivery address, products, sizes and amounts. Card details are processed directly by the payment gateway; we don't store them.
• Contact and quotes: whatever you send us through forms, email or WhatsApp (name, phone, club, inquiry).
• Browsing and cookies: technical data (device, browser, pages visited, errors). See the Cookie Policy.

We don't intentionally collect sensitive data or data from minors.

3. How we use it

• To process and deliver your purchases, issue receipts and handle warranty claims with QUAD.
• To answer quotes, questions and requests from clubs or academies.
• To manage your account and order history.
• To keep the site secure and fix errors.
• With your consent: usage analytics and marketing communications (you can withdraw it anytime).

4. Legal basis

We process your data with your informed consent (article 5 of Law 8968), which you give when you create an account, submit a form or accept cookies, and as needed to fulfill the purchase you request and to meet legal and tax obligations.

5. Who we share it with

We don't sell your data. It is only shared with service providers (processors), under contract and for these purposes:

• Supabase — database and account authentication.
• Vercel — website hosting.
• ONVO Pay — card payment processing.
• Resend — transactional emails (confirmations, password recovery).
• Sentry — technical error logging.
• Courier companies, only with the data needed for delivery.

Some of these providers host data outside Costa Rica (for example, in the United States). By accepting this policy you consent to that transfer, always with equivalent security measures.

6. How long we keep it

Account data, for as long as the account is active. Order and billing data, for the period required by tax regulations. Inquiries without a purchase, up to 2 years. After that we delete or anonymize it.

7. Your rights

You can exercise your rights of access, rectification, cancellation (erasure) and objection at any time, and withdraw your consent. Email us at hola@gasisports.com or reach us on WhatsApp, stating your name and your request. We reply within 5 business days at most, as required by law.

If you believe we didn't address your request, you can contact Costa Rica's data protection agency (PRODHAB).

8. Security

We use encrypted connections (HTTPS), encrypted passwords, access restricted to authorized staff and providers with recognized security standards.

9. Changes

If we change this policy, we'll publish the new version here with its update date.