Privacy Policy
This policy explains what personal data we collect on www.camia.design, what we use it for, who we share it with, and how you can control it. It applies to the website, the contact forms, and the commissions handled by email. If you have any questions, write to us at [email protected].
Who handles your data
Camía manages a database of personal data containing the information of the people who write to us, request quotes, or make purchases. The party responsible for this processing is the Camía studio, which operates in Costa Rica.
For any matter related to your data, including the exercise of your rights, write to us at [email protected]. That is the responsible party’s official channel, and the process is free of charge.
What data we request and why
We ask for the minimum we need to do our work. We do not request sensitive data, and we kindly ask you not to include health information or any other sensitive category of information in forms or messages.
If you do not provide the data marked as required, we cannot prepare the proposal, take the commission, or issue the electronic receipt. All other data is optional: if you don’t provide it, we simply work with less context.
- Contact details: name, email address, and phone number. Used to reply to you, prepare quotes, and schedule the appointment.
- Billing details: full name and identification number. These are required because each sale is documented with an electronic receipt.
- Commission details: description of the piece, date, delivery or installation location, and any photos and references you send us. Used to produce and deliver the work.
- Transaction details: amount, date, and payment method. We do not receive or store your full card number.
- Browsing data: page visited, device, browser, and source of the visit. Used to understand how the website is used and to improve it.
- Marketing data: only if you separately authorize us to write to you with news from the studio.
Consent and how to revoke it
We process your data with your express consent. For the data you give us—contact, commission, and billing details—we ask for your authorization before using it: we do not assume it simply because you browse the website, and we do not use pre-checked boxes.
We keep a record of the authorization you gave us.
You can revoke your consent at any time by writing to [email protected]. Revocation is not retroactive: it does not undo what was validly done before, but it stops the processing going forward.
Authorization to receive commercial communications is separate from the authorization for your commission. You can cancel it without canceling your order, and we will honor it immediately.
Who we share it with
We do not sell, rent, or trade your information. We share it only with the providers we need in order to operate, and only with what each one requires for its role.
When any of those providers processes the information outside Costa Rica, the transfer is limited to what is necessary to process payment, deliver, respond to you, and measure the website, and by accepting this policy you authorize it. You can revoke that authorization by writing to [email protected], bearing in mind that without those providers we cannot process payment or coordinate delivery.
Providers that handle data on our behalf are contractually bound to keep it confidential.
- Payment gateway: processes card payments and validates the transaction.
- Email and website hosting provider: transmits and stores messages and forms.
- Transportation service, when shipping or installation requires it: receives the name, phone number, and delivery address.
- Website analytics tools, described in the next section.
- Authorities or public entities, when there is a legal obligation to provide the information.
Cookies and website analytics
The website uses its own cookies, which are necessary for it to work and to remember basic preferences.
We also use analytics tools that tell us how many visits there are, where they come from, and which pages are viewed. This measurement helps us improve the website: we do not use it to identify you or to read what you type into forms.
If you would like to know which analytics tools are active at the moment, write to us at [email protected] and we will give you the details.
If you do not want your browsing to be measured, block or delete cookies in your browser settings, or use private browsing mode. If you need help doing this, write to us and we will walk you through it step by step.
How long we keep data
We keep your data for as long as the relationship lasts and, afterward, for the time required by the accounting, tax, and warranty obligations associated with the purchase.
Conversations and quotes that do not result in a commission are purged once they are no longer useful. Marketing data is kept until you revoke your consent. Website analytics data is kept according to each tool’s own retention periods.
Once ten years have passed since a purchase, we no longer keep information that could harm you. If for any reason we must keep the record longer, we remove your name and contact details so that it cannot be known that it was yours.
Security and confidentiality
We apply reasonable technical and organizational measures: an encrypted connection to the website, restricted access to the studio’s accounts, strong passwords, and data backups. Everyone who works with us is bound by a duty of confidentiality, which continues even after the relationship ends.
No system is completely secure, and we cannot promise otherwise. Encryption protects the transmission, but it does not cover risks beyond our control, such as third-party access to your own device or email. If we detect an incident that affects you, we will notify you.
Your rights and how to exercise them
You can ask us for access to your data, its rectification, updating, cancellation, or deletion, and decide on its transfer to third parties.
Write to [email protected] from the email address you used to contact us, or provide details that allow us to verify your identity, and tell us which right you wish to exercise. The process is free of charge, and we resolve it within five business days of receiving your request.
If you believe we did not handle your request properly, you may turn to the Agencia de Protección de Datos de los Habitantes (Agency for the Protection of Inhabitants’ Data).
We may update this policy. The current version is the one published on www.camia.design, and we will announce any significant changes through the studio’s channels. Questions about your data: [email protected].