Privacy policy

Legal framework

We process your data under Chile's Ley 19.628 on the protection of private life and, once it takes effect on 1 December 2026, under Ley 21.719, which modernises the Chilean personal data regime and creates the Agencia de Protección de Datos Personales.

This policy is already written to the information and transparency duties of Ley 21.719, so it will not need rewriting when that law takes effect.

Who is responsible for your data

id3a is the controller of the personal data collected through id3a.cl. We have not appointed a data protection officer; requests are handled through the contact channel below.

• Contact email: hola@id3a.cl
• Contact form: id3a.cl/en/contact
• Location: Santiago, Chile

What data we process

Three sets of data, and we obtain none of them from third parties: everything comes directly from you or from your browser.

• What you type into the contact form: name, email address, company (optional), project type and the message itself.
• What your visit generates automatically and lands in the server logs: IP address, browser type, date and time, and the pages you visit.
• What your visit generates in the site's analytics: the page you view, the site you came from, the country you come in from, and your device and browser type. Your IP address is not stored, and no identifier is created that would follow you between visits.

We do not ask for sensitive data, data concerning children or adolescents, or precise geolocation.

What we use it for

• To answer your enquiry and follow it up commercially.
• To keep the site secure, available and free of abuse.
• To know which content gets read, in aggregate, so we can decide what to publish.

We do not sell, rent or transfer your data for advertising, and using the form does not subscribe you to any mailing list.

On what lawful basis

• Contact form: your consent, given when you submit it voluntarily. You can withdraw it at any time by writing to us, without affecting the lawfulness of processing carried out before that.
• Server logs: our legitimate interest in operating the site securely and diagnosing faults.
• Site analytics: our legitimate interest in understanding how the site is used. It is aggregate, it is not used to profile you or for advertising, and since nothing is stored on your device it needs no consent banner.

How long we keep it

• Form messages: for as long as the conversation lasts and up to 24 months after the last contact, so we can pick the thread back up if you write again.
• Server logs: the retention period applied by our hosting provider, which is short and technical in purpose.
• Analytics: kept in aggregate. The temporary identifier that lets a visit be counted is discarded after 24 hours, so there is no way to follow you from one day to the next.

Once that period is over we delete the data, or anonymise it so it can no longer be linked to you.

Cookies and local storage

The site uses two items, both strictly functional:

• The NEXT_LOCALE cookie: remembers whether you prefer the site in Spanish or English.
• The theme key in your browser's local storage: remembers whether you chose the light or dark theme.

We use no analytics, advertising or third-party tracking cookies: the site's analytics works without cookies and without storing anything on your device. That is why you will not see a cookie banner — there is nothing to consent to beyond what the site strictly needs to work the way you left it. You can clear those two preferences from your browser and the site will keep working, it will just forget them.

Who we share it with

With nobody beyond the providers we need in order to operate. Each acts as a processor and may only use the data to provide us that service:

• Vercel Inc. (United States): site hosting, server logs and cookieless usage analytics.
• Cloudflare, Inc. (United States): domain DNS and routing of the contact mailbox.
• Resend (United States): delivery of the email the contact form generates.

International transfers

All three providers above are in the United States, so your data leaves Chile in order to be processed.

We chose them because they offer contractual data protection guarantees equivalent to those Chilean law requires, and because the processing is limited to what providing the service needs.

Your rights

You may exercise the following rights over your personal data, free of charge:

• Access: find out whether we process data about you and obtain a copy.
• Rectification: correct data that is inaccurate, out of date or incomplete.
• Erasure: ask us to delete it where that applies.
• Objection: object to a particular processing operation.
• Portability: receive your data in a reusable format.
• Blocking: ask for a processing operation to be suspended temporarily.

To exercise them, write to hola@id3a.cl from the same address you used to contact us, saying which right you wish to exercise. We will reply within the period the law sets. If you believe we are not respecting your rights, you may complain to the Agencia de Protección de Datos Personales.

Automated decisions

We make no automated decisions affecting you, and we build no profiles. Every message that arrives through the form is read by a person.

Security

The site is served over HTTPS only. The form validates everything on the server, not just in your browser, and the message travels as plain text to our mailbox.

No system is infallible. Should a breach affect your personal data, we will tell you and notify the authority on the terms the law requires.

Changes to this policy

If we change it, we update the version and date shown at the top of this page. Material changes are announced on this same page, which stays permanently available.