Privacy Policy

Introduction Andrew Arango ("we," "us," "our") provides surf and real estate photography services in Nosara, Costa Rica. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have regarding your information. By using our services or providing your information, you agree to the practices described here.

Information We Collect

  • Contact information: name, email address, phone number, mailing address.

  • Booking and service details: session dates, location, package selection, special requests, client preferences.

  • Payment information: payment method details processed through third-party payment providers. We do not store full payment card numbers on our servers.

  • Images and media: photographs, videos, and related media captured during sessions. These may include identifiable images of clients and others present.

  • Communications: messages, emails, and other correspondence with us.

  • Usage data: website analytics and technical data such as IP address, browser type, device information, and pages visited (collected via cookies and similar technologies).

How We Use Your Information

  • Provide and manage photography services and bookings.

  • Process payments and send invoices or receipts.

  • Deliver, share, and store final images and proofs.

  • Communicate about appointments, updates, promotions, and policy changes.

  • Improve our services, website, and user experience.

  • Comply with legal obligations, enforce our terms, and protect rights and property.

Legal Bases for Processing (where applicable) We process personal data based on:

  • Contract performance: to fulfill bookings and deliver services.

  • Legitimate interests: to operate our business, improve services, and protect security.

  • Consent: where required for communications or specific uses (e.g., marketing).

  • Legal obligations: to comply with applicable laws.

Sharing and Disclosure We may share personal information with:

  • Service providers and business partners (e.g., payment processors, cloud storage, print labs) who assist in providing services and operate under confidentiality obligations.

  • Legal authorities when required by law or to protect rights, safety, or property.

  • Potential buyers or partners in the event of a business sale or restructuring, subject to confidentiality commitments.

Image Use and Licensing

  • We retain copyright to images we create unless otherwise agreed in writing.

  • By booking a session, you grant us a limited license to use your images for promotional purposes (website, portfolio, social media, marketing) unless you request in writing that we refrain from promotional use. We will honor reasonable requests to withhold promotional use when possible.

  • Clients may receive usage rights for personal or commercial use as specified in the contract or licensing agreement.

Cookies and Tracking We use cookies and similar technologies to collect website usage information. You can control cookie settings through your browser; disabling cookies may limit site functionality.

Data Retention We retain personal information as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Photographs and media are retained according to contractual terms or until requested deletion, subject to backup and archival policies.

Your Rights and Choices Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data, or to object to processing and request data portability. To exercise these rights, contact us using the details below. We may need to verify your identity before processing requests.

Security We implement reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Children Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected personal data from a child without consent, we will delete it.

International Transfers Data may be stored and processed in Costa Rica or other countries. When transferring data across borders, we will take steps to protect your information in accordance with this policy and applicable law.

Changes to this Policy We may update this Privacy Policy periodically. The effective date will indicate when changes take effect. Continued use of our services after changes constitutes acceptance.

Contact For questions, requests, or to opt out of promotional communications, contact: Andrew Arango Nosara, Costa Rica Email: info@andrewarango.com

This Privacy Policy governs how we handle personal information and applies in addition to any specific agreements for services.