Privacy policy
This site asks for personal details in exactly one place: the enquiry form. This page explains what is collected there, what it is used for, and who else sees it.
In effect from
Who handles your data
The site and the studio belong to Jeremy Obando Gómez, an independent artist based in San José, Costa Rica. He decides what is collected here and why, and he reads every enquiry.
There is no agency in between and no sales team: the enquiry reaches his studio and the reply is written by him.
What we collect
Only what you type into the enquiry form, plus the technical minimum needed to keep that form working and free of bots.
From the form:
- First name and last name
- Email address and phone number
- The event date, if you have one, and how fixed it is
- Event type, guest count and the rough size of the celebration
- Venue and city
- The moment you want captured and the package you are interested in
- How you found us, and any notes you choose to add
- The language you wrote in, so we can reply in it
Technical data on submission
When the form is submitted your IP address is recorded for one purpose only: limiting how many enquiries a single connection can send per hour. That record expires after an hour.
Your browser also produces a Firebase App Check token, via reCAPTCHA Enterprise, confirming that the request came from this site and not from a script. That check involves a call to Google from your browser.
We do not ask for card details, identity documents or special categories of data. Anything you type into the notes field is stored there, so please do not put them in it.
What we use it for
To reply to you, prepare the proposal and the contract for your event, coordinate the date, the venue and the scene, and to keep spam out of the form.
We do not use it for advertising, we do not build profiles, we do not sell it, and we do not pass it to third parties for their own purposes.
What happens when you submit
Your browser talks to no external service. The form makes a single call to a function belonging to this project, which validates the fields and stores the enquiry in the studio’s database, where Jeremy reviews it.
If sending fails, nothing you wrote is lost: the page does not reload and you can try again.
Analytics and cookies
This site uses no advertising cookies and no social-network pixels.
We use Google Analytics 4, through Firebase, to see which pages are read and which links are used. Analytics does not start until you accept it: until then the measurement code is not even downloaded.
Your decision is stored in your browser’s local storage under the key “jolep.analytics-consent”. You can change it whenever you like; withdrawing it stops analytics collection.
Who else processes it
Google, as the infrastructure provider: Firestore stores the enquiries, Cloud Functions runs the function that receives them, App Check and reCAPTCHA Enterprise verify the submission, and — only with your consent — Google Analytics measures site usage.
The function that processes enquiries runs in the us-west1 region, in the United States, so the data leaves Costa Rica for Google’s servers.
Nobody else has access to the enquiries.
How long we keep it
Enquiries are kept while the conversation is live and, if the piece is commissioned, as part of that commission’s record.
The technical records that limit submissions expire after an hour.
Retention periodThe period after which enquiries that do not become commissions are deleted has not been set yet. It will be published here once it is, rather than writing down a figure nobody has decided.
Your rights
Costa Rica’s Law No. 8968 on the protection of individuals with regard to the processing of their personal data gives you the right to access your data, correct it, ask for it to be deleted, and withdraw any consent you have given.
To exercise them, write to us through the form or on WhatsApp and say so; we reply within the same time as any other enquiry. The supervisory authority in Costa Rica is the Agencia de Protección de Datos de los Habitantes (PRODHAB).
Security
The site is always served over HTTPS. Enquiries are stored in a collection no browser can read or write: only the server function writes to it, and only the studio reads it, signed in.
Changes to this policy
If what we collect or how we use it changes, this page is updated along with the effective date above. There is no email notification: we do not keep a list for one.
How to reach us
For any question about this policy, or to exercise your rights, use any of these routes.
- Contact
- Contact
- +506 8315 3743 (opens in a new tab)
- Phone
- +506 8315 3743
- To confirm
This text describes how the site works today and is pending review by a legal professional. It does not replace the contract signed for each commission; where the two differ, the contract governs.