Privacy Notice
How your information is handled.
This notice explains what happens to the information you share through elvirafernandez.com, in particular through the project inquiry form.
Who is responsible
Elvira Fernández, independent Creative Director & Brand Strategist, works through Orgmetas International S.A., a company registered in Costa Rica (corporate ID 3-101-830006), which is responsible for the information described here. Costa Rica’s Law 8968 on the protection of personal data applies.
Contact for any privacy question or request: info@elvirafernandez.com.
What the inquiry form collects
When you send an inquiry, the following is submitted:
- Your name, email and company or organization (optional in the Project Builder).
- Optionally: your company website, preferred timing and how you found this site.
- The service you are interested in and the project overview you write — or, in the Project Builder, the needs you select, anything you add in your own words and the preliminary direction shown to you.
- Your language preference, and — if your visit arrived through a campaign link — the campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and the page where your visit began.
- Technical information needed to protect the form from abuse, such as your IP address, used briefly for rate limiting and not stored with your inquiry.
Why it is used
Your information is used to review and respond to your inquiry and, if we decide to work together, to prepare a proposal. It is not used for a newsletter or marketing list. If one is ever offered, it will require a separate, explicit opt-in.
You give your consent by ticking the privacy box and sending the form. The information is also needed to answer your request and, if you ask for one, to prepare a proposal.
Who processes it
Your inquiry reaches me through these services, each under its own privacy terms: Vercel (website hosting), Resend (email delivery), Supabase (the database where inquiries are kept) and Google Workspace (my info@elvirafernandez.com mailbox). They only process it to provide that service. Your information is not sold or shared with anyone else.
If you write by WhatsApp or call, that conversation is handled by WhatsApp (Meta) or your phone carrier under their own privacy terms. I only use it to respond to you.
Where it is stored and for how long
Vercel, Resend and Supabase process information in the United States (the database is in North Virginia), and my mailbox is hosted by Google Workspace. Your information is therefore transferred to the United States from Costa Rica or from wherever you write.
Inquiries that do not lead to a project are kept for up to 24 months, in case the conversation resumes, and then deleted: automatically from the database, and from my mailbox within the same period. If we work together, the information becomes part of the project records and is kept for the duration of the relationship and as long as tax and legal obligations require. You can ask for earlier deletion at any time.
Your choices and rights
You can ask to access, correct or delete the information you shared, or withdraw your consent, by writing to info@elvirafernandez.com. I will reply within the time required by law. If you are not satisfied with the answer, in Costa Rica you can contact the Agencia de Protección de Datos de los Habitantes (PRODHAB).
Brand Lab tools
The clarity check, positioning sentence, direction mixer and moodboard run entirely in your browser. Your answers are not stored or sent. If you choose to take a result into an inquiry, it is kept in your browser’s session storage only until the contact form reads it, and it is sent only if you submit the form. Result images are created on your device.
If you ask for a result or the free guide by email, your address is used only to send it, through the website’s email provider (Resend), and it is not added to any list. If you also tick that you would like Elvira to write to you, she receives your address and that result. Resend keeps a delivery record for a limited time under its own terms.
Cookies and analytics
This website does not use advertising or analytics cookies. If campaign parameters are present when you arrive, they are kept in your browser’s session storage only until you close the tab, so they can be attached to an inquiry you choose to send.
If analytics are added in the future, this notice will be updated and consent will be requested where required.
Security
The website is served over HTTPS. Inquiries are validated on the server, access credentials for connected services are never exposed to the browser, and the database only accepts the website’s server: every other access is blocked.
Effective date: 14 October 2026.

