Privacy Policy

Who is responsible for your data

4rentpanama.com, S.A., operating as Ocean Properties and OP Capital, is responsible for the personal data collected through this site. In this policy, “we” and “us” refer to that company.

Scope of this Policy

This Privacy Policy applies to personal data collected through:

• pedasioceanproperties.com
• Private enquiry forms for Land at Playa Destiladeros
• Intermediary Buyer Registration forms
• Email, WhatsApp and other direct communications with Ocean Properties or OP Capital
• Personalized technical-sheet links made available to registered intermediaries
• Transactional emails sent in connection with enquiries, Buyer Registrations and related operational communications

This Policy does not apply to third-party websites, platforms or services that may be linked from our website. Their privacy practices are governed by their own policies.

Personal data we collect

The data we collect depends on how you interact with us.

Private enquiries

When you submit a private enquiry, we may collect:

• Full name
• Email address
• WhatsApp number or telephone number
• Lot or lots of interest
• Message or enquiry details
• Language preference
• The page or source from which the enquiry was submitted
• Technical information necessary to protect the form and website, such as an IP-derived security hash, browser type, device information, referrer and submission time

Intermediary Buyer Registrations

When an intermediary submits a Buyer Registration, we may collect:

• Intermediary’s full name
• Agency or brokerage name
• Professional email address
• Telephone number or WhatsApp number
• Buyer’s full name
• Buyer’s email address and/or telephone number
• Lot or lots of interest
• Buyer-presentation status
• Optional notes submitted by the intermediary
• Accepted version of the broker terms
• Registration number
• Submission, review, confirmation and expiry timestamps
• Audit-log information related to the registration process
• Technical information necessary for security and evidentiary purposes, including an IP-derived security hash, browser information and submission time

We do not request passport numbers, national identification numbers, nationality, buyer country of residence, buyer budget, tax status or KYC documentation through the initial enquiry or Buyer Registration forms.

Why we use personal data

We use personal data only where necessary for legitimate and identified purposes, including:

• Responding to private enquiries
• Coordinating property information, availability and private viewings
• Identifying the lot or lots in which a person is interested
• Operating and protecting our website and forms
• Preventing spam, fraud and duplicate submissions
• Processing and reviewing intermediary Buyer Registrations
• Recording the date, time, terms version and status of a Buyer Registration
• Managing communications with intermediaries
• Providing registered intermediaries with personalized technical-sheet access and approved sales materials
• Managing internal sales follow-up, viewings and related operational activity
• Meeting legal, contractual, accounting, evidentiary and compliance obligations
• Protecting the rights, property, security and legitimate interests of 4rentpanama.com, S.A., buyers, intermediaries and third parties

We do not use personal data to make automated decisions that produce legal or similarly significant effects on individuals.

Legal basis and consent

Where required, we process personal data based on your consent, the performance of steps requested before entering into a commercial relationship, our legitimate interests in managing property enquiries and intermediary relationships, or compliance with applicable legal obligations.

When you submit a private enquiry, you consent to Ocean Properties using your details to respond to your enquiry and coordinate a private viewing.

When an intermediary submits buyer contact details through a Buyer Registration, the intermediary confirms that they are authorized to provide those details for the purpose of the registration.

Consent may be withdrawn at any time. Withdrawal of consent does not affect processing already carried out lawfully before withdrawal, nor processing required for legal obligations, evidentiary purposes or the establishment, exercise or defense of legal claims.

Buyer Registration and intermediary records

Buyer Registration records are used to document the presentation of a buyer by an intermediary and to administer the published broker terms.

A Buyer Registration is not a purchase agreement, an offer to sell, a guarantee of commission or a confirmation of eligibility until Ocean Properties or OP Capital confirms eligibility in writing under the published broker terms.

We may use registration records to:

• Check for possible duplicate or pre-existing buyer records
• Review eligibility under the published broker terms
• Record acceptance of the applicable terms version
• Maintain a timestamped audit trail
• Record review decisions, confirmations, clarifications, expiry and related communications
• Protect the integrity of the registration process in the event of a dispute

We do not disclose the identity, contact information or registration details of another buyer or intermediary to a submitting intermediary.

How we share personal data

We do not sell personal data.

We may share personal data only with parties that need it for the purposes described in this Policy, including:

• Authorized personnel of Ocean Properties and OP Capital involved in sales, operations, administration, legal review or compliance
• Service providers that support website hosting, content delivery, security, spam prevention, database storage, email delivery or communications
• Professional advisers, including legal, tax, accounting or insurance advisers, where necessary
• Competent authorities, courts, regulators or other parties where disclosure is required by law or necessary to protect legal rights
• A buyer or intermediary only where disclosure is necessary for the specific transaction and permitted by applicable law

Service providers process data only under instructions and safeguards appropriate to their role.

Hosting, infrastructure and service providers

Our website and operational systems may use infrastructure and services provided by third parties, including:

• Hosting and content-delivery providers
• Cloudflare services for security, form protection, access control, Workers and database infrastructure
• Cloudflare Turnstile for bot and abuse prevention
• Email-delivery services used for transactional communications
• Bunny CDN or related content-delivery infrastructure for approved property media
• WhatsApp when you choose to contact us through WhatsApp

These providers may process technical information or personal data as necessary to provide their services. Processing may occur in Panama or in other jurisdictions where these providers operate, subject to applicable safeguards.

International transfers

Because we use internet-based hosting, security, database, email and communications providers, personal data may be processed outside Panama.

Where personal data is transferred internationally, we take reasonable steps to use service providers and safeguards appropriate to the nature of the information and the purposes described in this Policy.

How long we keep your data

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy.

Private buyer enquiries with no meaningful follow-up are retained for 24 months from the last interaction.

Private buyer enquiries that become qualified leads or include a private viewing are retained for 5 years from lead closure or the last relevant interaction.

Broker Buyer Registrations that are rejected, withdrawn, not confirmed or otherwise do not become confirmed are retained for 24 months from the decision date.

Confirmed Broker Buyer Registrations are retained for 5 years from the expiry date of the six-month confirmed registration period.

Broker Buyer Registrations connected to a promise of sale, completed sale, deposit, commission, invoice, accounting record, claim or dispute are retained for at least 5 years from completion of the transaction or the last applicable obligation.

Consent records, broker buyer-contact authorization records and registration audit logs are retained for the same period as the associated enquiry or Buyer Registration.

Transactional-email delivery logs are retained for 24 months from the email event.

Security, rate-limit and Turnstile-related operational logs are retained for 90 days.

Blocked spam or honeypot submissions are retained for 30 days.

Accounting records, payment records, invoices and supporting documentation are retained for at least 5 years from the relevant transaction or legal obligation.

Security

We use reasonable administrative, technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

These measures may include:

• Access controls for internal systems
• Protected internal routes and authorized-user access
• Server-side form validation
• Bot and spam protection
• Secure database storage
• Timestamped records and audit logs for intermediary registrations
• Password, credential and secret-management controls
• Data minimization and limited collection at the initial-contact stage

No method of transmission or storage is completely secure. If you believe your interaction with us has been compromised, please contact us promptly at [email protected].

Your rights

Subject to applicable law, you may request:

• Access to the personal data we hold about you
• Correction or updating of inaccurate, incomplete or outdated data
• Cancellation or deletion of personal data where applicable
• Objection to certain processing
• Withdrawal of consent
• Portability of your personal data, where applicable
• Information about the purposes and recipients of the processing

To exercise a right, contact:

[email protected]

Please include enough information for us to verify your identity and locate the relevant record. We may request reasonable information to verify a request and protect the security of personal data.

Some requests may be limited where retention or processing is required by law, necessary to protect the rights of others, necessary to preserve an intermediary-registration audit record, or necessary for the establishment, exercise or defense of legal claims.

Cookies and similar technologies

Our website may use essential technical cookies or similar technologies necessary for security, form functionality, language preference, accessibility and basic website operation.

We may also use security technologies, including Cloudflare Turnstile, to protect forms from spam and abuse.

We do not use non-essential advertising or marketing cookies through this property page unless we provide additional notice and obtain any consent required by applicable law.

Children

Our services and property enquiries are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact [email protected] so that we can review the matter.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, systems, legal obligations or data practices.

The current version will be published on this page with its effective date. Material changes will be reflected by updating the effective date and, where appropriate, by providing additional notice.

Contact

For privacy questions, requests or concerns, contact: