Skip to content

Privacy Policy

Last updated: 2026-11-04

1. Who we are

Parroquial.app S.A. (“Turnos Parroquiales”, “we”, “us”) is a Sociedad Anónima organised under the laws of Costa Rica, with its registered address at Palmares, Alajuela, Costa Rica. We operate the Turnos Parroquiales website and application at https://parroquial.app (the “Service”).

We are the data controller for the personal data described in this policy, except for data that our business customers upload about their own customers, where we act as a data processor on their behalf (see section 9). Contact us at info@parroquial.app.

This policy applies to visitors and users located in Costa Rica. Where a law gives you stronger rights than those described here, the stronger rights apply.

2. What we collect and why

We collect only the data we need to run the Service. Fields marked as optional in our forms are never required to use it. The table below is our complete data inventory.

2. What we collect and why
DataWhy we use itLegal basisHow long we keep itRequired
Responsible adult name and email (sensitive)Manage reservations and service messages; contact encrypted at restPerformance of a contractDeleted automatically 24 months after the appointment, or sooner if the parish sets a shorter periodYes
Reservation, parish, service, schedule, status and holder capability (sensitive)Reserve availability and let the holder manage a booking; service choice may reveal religious beliefsYour consentUnconfirmed holds expire after 10 minutes; booking records stay for the parish schedule history, with contact details removed 24 months after the appointmentYes
Staff identifier, hashed network identifiers, consent and delivery audit eventsAuthorize staff access, prevent abuse and track reservation messagesLegitimate interestDeleted automatically after 24 monthsYes
Analytics and advertising cookie identifiers, pages visited (parish and service removed) and booking steps; no contact detailsMeasure visits and the booking funnel, and campaign results on the home and legal pages, only after consentYour consentGoogle Analytics keeps event and user data for 2 months; Microsoft Clarity keeps session recordings for 30 days and heatmap totals for up to 13 months; Meta applies its own retention; withdrawing consent stops further collectionOptional

We also receive technical data automatically when you use the Service: IP address, browser and device type, pages viewed, and approximate location derived from your IP. We use it to keep the Service secure, to fix errors and, only with your consent, to understand how the Service is used.

The Service is used with children. We collect a child’s data only with the verifiable consent of a parent or guardian, we collect the minimum needed, and a parent may review or delete it at any time by writing to info@parroquial.app.

3. Analytics and tracking

With your consent we use Google Analytics 4, Microsoft Clarity and Meta Pixel to measure how the Service is used. These tools set cookies or similar identifiers only after you accept them in our cookie banner, and you can withdraw that consent at any time from “Cookie settings” in the footer. Details are in our Cookie Policy at https://parroquial.app/cookies.

4. Who we share data with

We share personal data only with the service providers below, under contracts that bind them to use it solely to provide their service to us, and with authorities when the law requires it. We never sell personal data.

4. Who we share data with
ProviderPurposeCategoryData locationPrivacy policy
ResendBooking confirmations and reminders with calendar attachments, when email delivery is enabledCommunicationsUnited Stateshttps://resend.com/legal/privacy-policy
Amazon Web ServicesStaff sign-in through Amazon CognitoAuthenticationUnited States (us-east-2, Ohio)https://aws.amazon.com/privacy/
VercelHosting and delivery of the websiteHostingUnited States and global edge networkhttps://vercel.com/legal/privacy-policy
Fly.ioHosting of the booking service and its databaseHostingUnited States (Ashburn, Virginia)https://fly.io/legal/privacy-policy
Cloudflare TurnstileAbuse protection on reservation formsAbuse protection and otherGlobalhttps://www.cloudflare.com/privacypolicy/
Google Analytics (Google LLC)Aggregate visit and booking-step measurement after analytics consent; page addresses and titles are sent with the parish and service removed, and no names or emails are sentAnalyticsUnited Stateshttps://policies.google.com/privacy
Microsoft Clarity (Microsoft Corporation)Usability heatmaps and masked session replays on the home and legal pages only, after analytics consent; never on parish, booking, holder or staff pagesAnalyticsUnited Stateshttps://privacy.microsoft.com/privacystatement
Meta Pixel (Meta Platforms)Ad campaign measurement on the home and legal pages only; it does not load at all without marketing consent and never on parish, booking, holder or staff pagesMarketingUnited Stateshttps://www.facebook.com/privacy/policy/

Some providers store data outside your country. When we transfer data internationally we rely on adequacy decisions, standard contractual clauses or the equivalent mechanism required by your local law, and we require the same level of protection described in this policy.

If the business is sold or merged, your data may be transferred to the new owner under the same commitments. We will tell you before that happens.

5. How we protect your data

We encrypt data in transit and at rest, restrict access to staff who need it, use hosting providers with independent security certifications, and log security events. No system is perfectly secure; if a breach affects your data we will notify you and the competent authority within 5 business days to PRODHAB and the affected persons (Costa Rica).

6. How long we keep data

We keep each type of data for the period stated in section 2. When it is no longer needed we delete or anonymise it, except where the law requires us to keep it longer (for example invoices and tax records).

7. Your rights

You can, at any time and free of charge:

  • Access the personal data we hold about you and receive a copy in a portable format.
  • Correct data that is inaccurate or incomplete.
  • Delete your data and close your account.
  • Object to or restrict certain processing, including direct marketing.
  • Withdraw consent where processing is based on consent, without affecting what happened before.
  • Not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you.

To exercise a right, write to info@parroquial.app from the email address on your account or use the privacy options inside the Service. We answer within 30 days (5 business days for access requests under Costa Rican law) and may ask you to verify your identity first.

Costa Rica: these are your rights of access, rectification, cancellation and opposition (ARCO) under Ley 8968 de Protección de la Persona frente al Tratamiento de sus Datos Personales y su Reglamento (Decreto 37554-JP). If you believe we have not honoured them you may file a complaint with the Agencia de Protección de Datos de los Habitantes (PRODHAB) (https://www.prodhab.go.cr).

8. Marketing communications

We send marketing email, SMS or WhatsApp messages only if you opted in, and every message includes a way to unsubscribe. Transactional messages about your account or purchases are sent regardless, because they are part of the Service. Unsubscribing from marketing never affects those.

9. Data our business customers upload

Businesses that use Turnos Parroquiales upload data about their own customers (for example names, phone numbers, vehicle or order details). For that data the business is the controller and we are its processor: we process it only on the business’s instructions, under our Data Processing Addendum at https://parroquial.app/dpa. If you are a customer of one of those businesses and want to exercise your rights, contact that business directly; we will help them respond.

10. Changes to this policy

We may update this policy. The date at the top always shows the current version. For material changes we will notify you by email or inside the Service at least 15 days before they take effect.

11. Contact

Parroquial.app S.A., Palmares, Alajuela, Costa Rica. Privacy: info@parroquial.app. Support: info@parroquial.app.

We use cookies

We use necessary cookies to run the service and optional analytics or marketing cookies only with your consent.