Privacy Policy

Effective Date: January 6, 2026
Last Updated: January 6, 2026

Our Commitment to Your Privacy

At Crissorama Wedding Photography, we understand that booking a destination wedding photographer requires significant trust, especially when planning from abroad. This Privacy Policy explains how we collect, use, protect, and respect your personal information.

Core Privacy Principles:

Transparency: We clearly explain what data we collect and why
Purpose Limitation: We only use your data for stated purposes
Data Minimization: We only collect information necessary to serve you
Security: We protect your data with industry-standard safeguards
Your Rights: You maintain control over your personal information

1. Who We Are

Business Identity:

Business Name: Crissorama Wedding Photography
Owner/Photographer: Christopher Alpizar Gaviria
Primary Locations: San José, Costa Rica | Barcelona, España
Service Focus: Destination wedding and elopement photography in Costa Rica and Europe
Service Areas: Manuel Antonio, Guanacaste, La Fortuna, La Paz Waterfall, Nosara, Monteverde, Conchal, Dominical, Arenal, and Barcelona
Website: crissorama.com

Data Controller: For purposes of data protection law, Crissorama Wedding Photography is the data controller responsible for your personal information.

Contact for Privacy Concerns:

Email: info@crissorama.com
Phone: +506 8517 7791
Subject Line: “Privacy Inquiry”
Response Time: We respond to privacy requests within 7 business days

2. Information We Collect

Information You Provide Directly

Inquiry & Booking Information:

Full names (you and your partner)
Email addresses
Phone numbers
Wedding date and location
Estimated guest count
How you heard about us
Package preferences
Special requests or accessibility needs

Payment Information:

Billing address
Payment method details (processed securely through payment processors)
Note: We do NOT store complete credit card numbers on our servers
All payment processing is handled by secure, PCI-compliant third-party processors

During Service Delivery:

Timeline and schedule information
Vendor contact information (if you provide it for coordination)
Location preferences and special shot requests
Family member names (for group photo organization)

Testimonials & Reviews:

If you provide a testimonial, we collect your name, wedding date, and your written/video feedback
We always ask permission before publishing any testimonials

Information Collected Automatically

Website Usage Data:

IP address and general location (city/country level)
Browser type and device information
Pages visited and time spent on site
Referring website (how you found us)
Date and time of visits

Cookies & Tracking Technologies: We use cookies to:

Remember your preferences
Analyze website traffic and user behavior
Enable essential website functionality
Provide personalized content recommendations

Types of Cookies We Use:

Essential Cookies: Required for website operation (e.g., security, session management)
Analytics Cookies: Google Analytics to understand how visitors use our site
Marketing Cookies: Track effectiveness of advertising campaigns (if applicable)

Cookie Control: You can control cookies through your browser settings. Note that disabling certain cookies may limit website functionality.

Information from Third Parties

Social Media:

If you contact us via Instagram, Facebook, or other platforms, we receive basic profile information per that platform’s policies
If you tag us in posts, we may see and save those posts for portfolio purposes (with your permission)

Vendor Partners:

Wedding planners or venues may share your information when coordinating services (only with your knowledge and consent)

3. How We Use Your Information

Primary Uses

To Provide Photography Services:

Process your inquiry and booking
Communicate about your wedding date, timeline, and logistics
Coordinate with your venue or wedding planner
Deliver your images via secure online gallery
Provide customer support and respond to questions
Send session reminders and preparation tips

For Business Operations:

Process payments securely
Maintain booking calendar and avoid double-bookings
Generate contracts and invoices
Archive records per legal and tax requirements
Manage backup photographer coordination if needed

For Marketing & Improvement:

Send our email newsletter (only with explicit opt-in)
Feature your wedding in our portfolio (with permission)
Analyze website usage to improve user experience
Understand which services are most popular
Send occasional promotional offers for past clients (opt-out available)

For Legal Compliance:

Respond to legal requests or court orders
Enforce our Terms of Use
Protect against fraud or abuse
Comply with tax and business regulations

We Will NEVER:

Sell your personal information to third parties
Share your data with unrelated businesses for their marketing
Send unsolicited spam emails
Use your images for commercial purposes without explicit permission
Share sensitive personal details publicly without consent

4. How We Share Your Information

Service Providers We Trust

We may share limited information with:

Payment Processors:

Secure payment processors (Stripe, PayPal, or bank transfers) to process payments securely
They receive only information necessary to complete transactions
Subject to their own privacy policies and PCI compliance standards

Website Hosting & Technology:

Website hosting providers host our website securely
Email service providers manage email communications
Online gallery platforms store and deliver your images securely
All vendors selected for security and privacy standards

Professional Services:

Accountant/bookkeeper (for tax compliance only)
Legal advisor (only if disputes arise)
Backup photographer network (only essential coordination details shared when necessary)

Marketing Platforms:

Email service provider for newsletter distribution (only with explicit opt-in)
Google Analytics (anonymized website data for improving user experience)
Social media platforms (Instagram, Facebook, Pinterest) when you interact with our profiles
All marketing communications include easy opt-out options

Legal Requirements

We may disclose information when:

Required by Costa Rican, Spanish, or international law
Responding to valid legal process (subpoena, court order)
Protecting safety, rights, or property of Crissorama or others
Investigating potential fraud or Terms of Use violations

Business Transfers

If Crissorama is sold or merged with another business, your information may transfer to the new owner, but will remain subject to this Privacy Policy unless you consent to changes.

5. Your Rights & Choices

Access & Correction Rights

You Have the Right To:

Request a copy of all personal data we hold about you
Correct inaccurate or outdated information
Ask how your data is being used
Request data in portable format (for provided information)

How to Exercise: Email info@crissorama.com with subject “Data Access Request”

Right to Deletion (“Right to Be Forgotten”)

You may request we delete your personal information, subject to:

Exceptions: We must retain certain records for tax, legal, and contract purposes
Image Deletion: If your wedding is already featured in our portfolio, we will discuss removal options (may not be possible if images are widely published)
Timeframe: We respond within 30 days

Note: Deletion requests do not apply to:

Anonymized analytics data
Information required by law to retain
Data within active contracts or financial records

Marketing Communication Preferences

Email Newsletter:

Opt-in required (we never add you without permission)
Unsubscribe link in every email
Effective within 48 hours

Past Client Updates:

Occasional emails about new services or special offers
Opt-out available at any time via email or unsubscribe link

Social Media:

Following us is always optional
You control what you see via platform settings

Cookie Preferences

Managing Cookies:

Browser settings: Most browsers allow cookie blocking or deletion
Google Analytics opt-out: [Browser add-on link]
Do Not Track signals: We honor DNT browser settings

6. How We Protect Your Data

Security Measures

Technical Safeguards:

SSL/HTTPS Encryption: All website data transmitted securely
Secure Servers: Data stored on protected, encrypted servers
Password Protection: Strong passwords required for all systems
Regular Updates: Software and security patches applied promptly
Limited Access: Only essential personnel access personal data

Physical & Organizational:

Secure backup systems in multiple locations
Computer and storage device encryption
Confidentiality training for any contractors or assistants
Regular security audits

Payment Security:

PCI DSS compliant payment processing
No credit card details stored on our servers
Tokenized payment information only

Data Breach Protocol

In the unlikely event of a data breach:

We will investigate and contain the breach immediately
Affected clients notified within 72 hours
Clear explanation of what data was affected
Steps we’re taking to prevent future incidents
Guidance on protecting yourself
Notification to relevant authorities as required by law

7. International Data Transfers

Costa Rica Base with International Clients

Our Situation:

Business operates primarily in Costa Rica
Many clients located in USA, Europe, and other countries
Data may be transferred internationally for service delivery

How We Protect International Transfers:

Cloud services with international data protection standards
Contracts with all service providers requiring data protection
Compliance with applicable data protection regulations (GDPR considerations for EU clients)

Your Rights Based on Location:

EU Residents: GDPR rights apply (see Section 5)
California Residents: CCPA rights may apply
Other Jurisdictions: Contact us for specific protections

8. Image & Portfolio Privacy

Your Wedding Photos

Default Practice:

We feature select images from weddings in our portfolio and marketing
Images may appear on: website, Instagram, Facebook, Pinterest, blog, print materials
We never share embarrassing, unflattering, or private moments publicly

Privacy Options:

Full Privacy Request:

Notify us before or immediately after your wedding
Your entire wedding remains private
No images used for marketing purposes
May affect eligibility for certain discounts

Selective Privacy:

Request certain images or people be excluded from public portfolio
We’ll honor reasonable requests (e.g., “don’t post images with my sister”)
Communicate preferences clearly in writing

Social Media Tagging:

If you tag us in posts, we may reshare with credit
Request removal anytime if you change your mind

Third-Party Features:

If your wedding is submitted to blogs or publications, their privacy policies apply
We always ask your permission before submitting to third parties

9. Children’s Privacy

Crissorama Wedding Photography does not knowingly collect personal information from individuals under 18 years old.

If Your Wedding Includes Minors:

We photograph children as part of wedding coverage
Parents/guardians must provide consent for image use
Special privacy protections apply to minor images
We never identify children by name in public posts without explicit permission

If We Discover Minor Data: If we learn we’ve inadvertently collected information from someone under 18, we will delete it promptly.

10. Data Retention

How Long We Keep Your Information

Active Client Data:

Maintained throughout service delivery and for 1 year after image delivery
Includes: contact info, contracts, payment records, communication history

Financial Records:

Retained for 7 years per Costa Rican tax requirements
Includes: invoices, payment records, contracts

Edited Images: Stored in your online gallery for 1 year after delivery, then archived
Raw Files: Retained for 90 days after delivery
5-Year Backup: All edited images securely backed up for 5 years for peace of mind
Extended Storage: Available for annual fee if desired beyond standard retention
Portfolio Images: Retained indefinitely (subject to privacy requests)

Marketing Data:

Newsletter subscribers: Until you unsubscribe
Website analytics: Typically 26 months (Google Analytics default)

Deletion After Retention Period:

Data securely deleted when no longer needed
Archives maintained only for legal requirements

11. Third-Party Websites & Services

External Links

Our website may link to:

Featured wedding venues
Recommended vendors (planners, florists, etc.)
Blog publications featuring our work
Social media profiles
Educational resources

Important: We are not responsible for privacy practices of external websites. Review their privacy policies before providing information.

Social Media Platforms

When you interact with our social media:

Facebook, Instagram, Pinterest, YouTube privacy policies apply
We see limited information per platform’s sharing settings
Your posts and interactions may be visible to other users
Platform algorithms determine content visibility

12. Changes to This Privacy Policy

How We Update This Policy

When Changes May Occur:

New service offerings or technologies
Legal or regulatory requirement changes
Improvements to privacy practices or clarity

How You’ll Be Notified:

Updated date at top of policy
Email notification for significant changes (to active clients)
Announcement in newsletter for major updates
Continued use of services constitutes acceptance

Your Options: If you disagree with changes, contact us to:

Discuss concerns
Request data deletion
Decline future services

13. Contact Us About Privacy

Questions, Concerns, or Requests?

We’re committed to transparency and respect for your privacy.

Privacy Contact:

Email: info@crissorama.com
Phone: +506 8517 7791
Subject Line: “Privacy Question” or “Data Request”
Response Time: 7 business days maximum

General Contact:

Website: crissorama.com/contact
Instagram: @crissorama (DMs welcome)
Locations: San José, Costa Rica | Barcelona, España

For Specific Requests:

Data Access Request: “Please provide my personal data”
Deletion Request: “Please delete my data”
Correction Request: “Please update my information”
Marketing Opt-Out: “Unsubscribe from marketing emails”

14. Additional Resources

Learn More About Privacy

Our Commitment:

About page: Our story, 15+ years of experience, and values
FAQs: Common privacy questions answered on service pages
Terms of Use: Service terms and booking policies
Wedding Planning Blog: Wedding Stories Costa Rica

External Resources:

Costa Rica Data Protection Authority (if applicable)
Spanish Data Protection Agency (AEPD) for Europe services
GDPR Information (EU clients)
CCPA Information (California clients)

15. Privacy Certifications & Compliance

Our Standards

Technical Compliance:

HTTPS/SSL certificate (verified security)
PCI DSS compliance for payment processing
Regular security audits and updates

Policy Compliance:

GDPR considerations for EU clients (especially for Barcelona/Europe services)
CCPA awareness for California clients
Costa Rican data protection law compliance
Spanish LOPD-GDD compliance for European operations
Industry best practices for photography businesses

Trust Signals:

15+ years in business with zero data breaches
Hundreds of satisfied couples served across Costa Rica and Europe
Featured destination wedding photographer
Professional member of wedding photography community
Comprehensive 5-year image backup system

Your trust is the foundation of our business. We are committed to protecting your privacy and handling your information with the utmost care and respect.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

Last Updated: January 6, 2026
Version 1.0

Crissorama Wedding Photography
Your memories, our priority. Your privacy, our promise.