Privacy Policy
Last updated: 15-10-2026
This Privacy Policy describes how GeoffPhotography, operated by Geoffer López Chavarría (“we,” “us,” or “our”), collects, uses, stores, and shares personal data when you visit geoffphotographycr.com, fill out a form in our Meta advertisements, contact us, book a session, or sign a contract with us. It is written in accordance with Ley N.° 8968, Protección de la Persona frente al Tratamiento de sus Datos Personales, and its regulation, Decreto Ejecutivo N.° 37554-JP.
1. Personal Data We Collect
a) Data you provide through Meta advertisement forms
When you complete a lead form in one of our Meta (Facebook or Instagram) advertisements, we collect only:
- Full name
- Email address
- Phone number
We do not request sensitive data or any other information through these forms.
b) Data you provide directly to us
- Inquiries (WhatsApp panel, contact form, iMessage): name, phone number, wedding or session date, venue, and any message you send.
- Booking (Cal.com): name, email address, and the appointment details you choose.
- Contracts and client forms (Google Forms): names, identification numbers, email addresses, mobile numbers, Instagram handles, event date, venue, address, and payment amounts.
- Payments: Processed by PayPal. We do not store card numbers. [Confirm whether bank transfer details are kept only for invoicing.]
c) Data collected automatically
When you visit our website or interact with our advertisements, we and our providers automatically collect technical information such as your IP address, browser and device type, pages visited, referring URL, and time of visit. This is collected through our hosting provider (SiteGround), Google Analytics, and the Meta Pixel (see Section 6).
d) Sensitive data
Ley 8968 defines sensitive data as information such as health status, religious or political beliefs, and sexual orientation. We do not request this data. If you voluntarily share it (for example, dietary or medical needs for an event), we use it only to coordinate your session and delete it when it is no longer needed.
Boudoir sessions: Boudoir images are highly personal. We treat them with the highest level of confidentiality, store them only in restricted-access locations, and never publish or share them without separate, explicit written consent.
2. Why We Use Your Data
We use your personal data only for the following purposes:
- To respond to your inquiry and send you a quote or additional information
- To schedule sessions and manage contracts and payments
- To deliver galleries and photographs
- To issue invoices and comply with Costa Rican tax obligations (Ministerio de Hacienda)
- To send service-related communications about your booking or contract
- To send marketing messages, only with your consent, and until you opt out
- To maintain the security and performance of our website
- To measure and improve our website and advertising, using aggregated analytics
We do not use your data for purposes incompatible with those listed above, and we will ask for your permission before using it for any new purpose.
3. Use of Personal Data Under Ley 8968
We process personal data in accordance with the principles set out in Ley 8968:
- Informed consent (consentimiento informado): We collect and use your data only with your knowledge and agreement. When you complete a form, book a session, or sign a contract, you are told what data we collect, why we need it, and who will receive it.
- Purpose (finalidad): We use your data only for the purposes described in Section 2.
- Proportionality (proporcionalidad): We request only the data we need. For example, a Meta lead form asks only for name, email, and phone number. Identification numbers are requested only when a contract or tax invoice requires them.
- Accuracy (calidad): We keep your data accurate and up to date, and you may ask us to correct it at any time.
- Fairness and transparency (lealtad y transparencia): We do not collect data through deception, and this policy explains our practices.
- Confidentiality and security (confidencialidad y seguridad): We protect your data with reasonable technical and organizational measures, and limit access to the people who need it.
- Accountability (responsabilidad): We are responsible for how we handle your data, including when we share it with service providers.
Consent. By submitting a Meta lead form, completing a contact or booking form, or signing a contract, you give informed consent for us to process your data as described in this policy. Your consent is freely given, and you may withdraw it at any time (see Section 9). Some processing is required by law or by our contract with you, such as tax record-keeping, and continues regardless of withdrawal to the extent the law requires.
Registration. Client databases containing personal data are registered with PRODHAB (Agencia de Protección de Datos de los Habitantes), as required by Ley 8968.
4. How We Share Your Data
We do not sell nor share your personal data. We only use it with service providers that help us run our business, under confidentiality obligations, and only when needed for the purposes in Section 2:
| Meta (lead forms, WhatsApp, Instagram, Meta Ads) | Lead capture, messaging, advertising | [United States] |
| Google (Forms, Drive, Gmail, Apps Script) | Contracts, client forms, email | [United States] |
| Google Analytics | Website analytics | [United States] |
| Meta Pixel | Ad measurement and audience features | [United States] |
| Zoho Mail | Business email | [United States] |
| SiteGround | Website hosting | [United States] |
| GoodGallery | Client galleries | [United States] |
| PayPal | Payments | [United States] |
| Cal.com | Booking | [United States] |
Some providers store data outside Costa Rica, including in the United States. By using our website, submitting a form, or booking a session, you consent to these international transfers. We make them only to providers that maintain appropriate security standards.
We may disclose data when required by law or by a competent authority.
5. Photographs and Image Rights
- Photographs created by GeoffPhotography are protected by copyright under Ley 6683 de Derechos de Autor y Derechos Conexos.
- We may use non-intimate photographs of you in our portfolio, website, or social media only if you agree in writing in your contract. You may withdraw this consent at any time. We will remove the images from our channels within [1] business days, although copies already shared by third parties may not be fully recoverable.
- Boudoir photographs are never used for public purposes without separate, explicit written consent.
6. How Long We Keep Your Data
- Meta lead form inquiries that do not become clients: 7 days after the last communication, then securely deleted.
- Other inquiries that do not result in a booking: 1 month, then securely deleted.
- Clients: Contracts, invoices, and payment records are kept for the period required by Costa Rican tax and commercial law, then securely deleted.
- Galleries: [X months] after delivery, unless you ask for earlier removal or a longer period is agreed in writing.
- Analytics and Pixel data: Retained according to each platform’s settings. Google Analytics user data is set to 14 months.
- Marketing data: Kept until you opt out.
7. Security
We apply reasonable technical and organizational measures to protect your data, including access restrictions and secure hosting. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security. Please notify us immediately if you suspect unauthorized access to your data.
8. Security
We apply reasonable technical and organizational measures to protect your data, including access restrictions and secure hosting. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security. Please notify us immediately if you suspect unauthorized access to your data.
9. Your Rights (Derechos ARCO)
Under Ley 8968, you have the right to:
- Acceso: know whether we hold your data and receive a copy of it
- Rectificación: correct inaccurate or incomplete data
- Cancelación / Supresión: request deletion of your data
- Oposición: object to the processing of your data for specific purposes, including marketing
- Revocación del consentimiento: withdraw your consent at any time, without retroactive effect
How to exercise your rights: Email info@geoffphotographycr.com with the subject line “Derechos de datos / Data Rights.” Include your full name and a description of your request. We may need to verify your identity before responding. We will respond within the time limits set by Ley 8968 and its regulation.
Complaints: If you believe your rights have not been respected, you may file a complaint with PRODHAB (Agencia de Protección de Datos de los Habitantes).
10. Marketing Communications
You may opt out of marketing messages at any time by replying “BAJA” or “UNSUBSCRIBE” to any message, or by emailing us. Service messages related to your inquiry, booking, or contract will continue regardless.
11. Minors
Our services are intended for adults. We do not knowingly collect personal data from anyone under 18 without the consent of a parent or guardian. If you believe a minor has provided us with data without consent, contact us and we will delete it promptly.
12. Third-Party Links
Our website and advertisements may link to third-party sites, such as Instagram, Cal.com, or venue websites. We are not responsible for their privacy practices, so please review their policies before sharing your data.
13. Cookies and Tracking Technologies
Our website and advertisements use the following tools:
- Google Analytics: Helps us understand how visitors use our website. It may store information on Google’s servers outside Costa Rica. You can opt out by installing Google’s official Analytics opt-out browser add-on.
- Meta Pixel: Helps us measure the effectiveness of our Facebook and Instagram advertising and show you relevant ads. Meta may use this information in accordance with its own policies. You can manage your ad preferences in your Meta account settings.
- Essential cookies: Required for basic website functions, such as remembering your language preference.
You can disable cookies in your browser settings, although some features of the website may not work correctly. We do not respond to “Do Not Track” browser signals, because no uniform standard for them currently exists.
14. Changes to This Policy
We may update this policy from time to time. Changes take effect when posted on this page, and we will revise the “Last updated” date. For material changes, we will notify active clients directly by email.
Copyright Notice
© [2026] Geoffer López Ch./ GeoffPhotography. All photographs, text, graphics, and other content on this website are protected under Ley 6683 de Derechos de Autor y Derechos Conexos and international treaties. No content may be copied, reproduced, or used without prior written permission.
