Privacy policy

Last updated: 5 September 2026

What we keep

• Your name and the contact details you give us: email and WhatsApp number.
• Your bookings: what you booked, when, for how many people, and what it cost.
• What you write on the booking form.
• The messages we exchange, in both directions.
• Your proof of payment, if you upload one.
• If you arrive from an advert, which campaign you came from.
• Which pages you opened and how far through booking you got — seeing the sessions, choosing a day and time, signing in, booking. It is stored against a random number that lives in your tab and disappears when you close it. It carries no name, it is not a cookie, and it is never joined to your account or your bookings: it is only there to understand how the site is used and which step people stop at.
• Which site you came from, but only the site's name: instagram.com,google.com. Never the full address, and never anything you searched for. If you arrived from one of our own ads, we also keep that campaign's name — a single word like instagram.

How we look after it

• Encrypted, in cloud databases, with no public access.
• Seen only by the studio.
• Proof of payment is stored separately and opens only through a link that lasts a few minutes.

What we do not do

• We do not sell or share your data with anyone.
• We use no advertising cookies and we do not follow you around other sites. We do use Google Analytics to see how many people visit and which pages they open; it is set up as measurement and not as advertising — Google Signals and ad personalisation are switched off, so your visit does not feed an advertising profile that follows you elsewhere. Google keeps its own cookies for that. Everything else we measure is our own, stays on our own servers and is anonymous: which pages get opened and which step of booking people stop at. We also keep two cookies of our own: the one that keeps you signed in, and one that remembers whether you chose to read the site in Spanish or in English. That second one is only stored if you choose, carries no name, and is shared with nobody.
• We do not store card details: payment is arranged separately.

Where it lives

On Amazon Web Services servers in the United States, and on the platforms you write to us through — WhatsApp, Instagram and Messenger — under their own terms.

Your rights

Under Ley 8968 you can ask us for access to your data, to correct it, to delete it, or to withdraw your consent. To stop receiving email you do not need to write: switch it off in your profile. To delete your data, see how to ask.

Getting in touch

hola@instrumentohumano.cr. We answer within 30 days.