Privacy Policy

Tiny Hearts 0130 ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our mobile childcare services in Costa Rica.

1. Information We Collect

Personal Data You Provide

When you fill out our booking form, we collect:

• Full name
• Email address
• Phone number
• Number of children and their ages
• Location of stay in Costa Rica (hotel, rental, or residence)
• Preferred service date and time
• Additional notes (allergies, schedules, special requests)

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on the site

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To process and confirm your booking, communicate with you about your reservation, and provide the requested childcare services.
• Communication: To send booking confirmations, service updates, and respond to your inquiries via email, phone, or WhatsApp.
• Improvement: To analyze usage patterns and improve our website and service quality.
• Legal Compliance: To comply with applicable laws and regulations in Costa Rica.

3. Legal Basis for Processing (GDPR)

If you are a resident of the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data concerned and the context in which we collect it. We process your data based on:

• Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., booking a service).
• Contractual Necessity: The processing is necessary for a contract we have with you (e.g., providing childcare services).
• Legitimate Interests: The processing is necessary for our legitimate interests (e.g., improving our services).

4. Data Sharing and Third Parties

We do not sell your personal information. We may share your data only with trusted third-party service providers who assist us in operating our website and delivering our services:

• EmailJS: We use EmailJS to send booking notifications and confirmation emails. EmailJS processes your name, email address, and booking details to facilitate email delivery. EmailJS is based in the United States and complies with applicable data protection frameworks.
• Google Fonts: Our website uses Google Fonts for typography. When you visit our site, your browser may request font files from Google's servers, which may log your IP address.
• Social Media Platforms: Links to our Facebook and Instagram profiles are provided for your convenience. We do not share data with these platforms unless you interact with them directly.

5. International Data Transfers

Your information may be transferred to and processed in countries other than Costa Rica, including the United States (where EmailJS servers are located). When we transfer your data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms as required by applicable law.

6. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy:

• Booking data: Retained for the duration of the service and up to 12 months thereafter for record-keeping and service improvement purposes.
• Communication records: Retained as needed to address inquiries or disputes.
• After the retention period, data is securely deleted or anonymized.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal obligations.
• Restriction: Request restriction of processing in certain circumstances.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to the processing of your data for legitimate interests or direct marketing.
• Withdraw Consent: Withdraw your consent at any time (this does not affect the lawfulness of processing based on consent before its withdrawal).

To exercise any of these rights, please contact us at tinyhearts0130@gmail.com. We will respond to your request within the timeframe required by applicable law.

8. Cookies and Tracking Technologies

Our website currently does not use cookies for tracking or analytics purposes. We may use non-persistent session cookies for essential website functionality. If we activate Google Analytics or similar services in the future, we will update this policy and provide appropriate notice.

9. Children's Privacy

Our services are for children, but our website is intended for use by adults (parents, guardians, or event organizers) seeking childcare services. We do not knowingly collect personal information from individuals under 18 years of age. If you believe we have inadvertently collected data from a minor without parental consent, please contact us immediately.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• HTTPS encryption for all data transmitted through our website.
• Secure third-party service providers (EmailJS) with contractual data protection obligations.
• No local storage of sensitive personal data on our servers.
• Regular review of our data collection and storage practices.

11. Third-Party Links

Our website contains links to third-party websites (Facebook, Instagram). We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Governing Law

This Privacy Policy is governed by the laws of Costa Rica, including the Law on Protection of Individuals regarding the Processing of their Personal Data (Law 8968). If you are located in the European Union, additional protections under the General Data Protection Regulation (GDPR) may apply to you.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: