Privacy policy

Website processing overview

Data or channel	How it is used	Basis or context	General retention
Forms and contact	Receive, assess and respond to enquiries; prepare proposals or requested pre-contractual steps.	Data-subject request, consent and any pre-contractual or contractual relationship.	Up to 12 months after the last interaction, unless an active relationship, legal duty or legal defence requires longer retention.
Technical and security data	Protect forms, sessions and administration; prevent abuse; investigate incidents.	Security, operational continuity and compliance with applicable obligations.	For the period reasonably necessary for security, audit and incident resolution.
Optional analytics	Understand aggregate website use and improve content and navigation.	Prior consent through the preference centre.	According to GA4 settings and the effective Cookie Policy.
Clients and projects	Manage proposals, contracts, deliverables, support, billing and service obligations.	Contract performance, pre-contractual measures, legal obligations and specific agreements.	For the relationship and applicable legal, contractual or legal-defence periods.

1. Controller identity and contact details

Zopi Consultores SpA, trading as ZopiTech, is the controller responsible for the personal data described in this policy. Its contact address is Av. Apoquindo 6410, Office 605, Las Condes, Santiago, Chile. Privacy questions and requests may be sent to [email protected].

2. Scope of this policy

This policy explains how we process personal data obtained through the website, forms, email, WhatsApp, meetings, proposals and business relationships initiated through these channels. Processing carried out in specific projects or services may be supplemented by contracts, confidentiality terms, data-processing agreements or other specific conditions.

3. Privacy commitment and principles

ZopiTech seeks to process data lawfully, fairly and transparently; for specified purposes; using only adequate, relevant and limited information; keeping it accurate where appropriate; retaining it for reasonable periods; and applying safeguards proportionate to risk. We do not sell personal data or use contact-form information for marketing campaigns without separate authorization.

4. Legal framework

Processing is carried out under applicable Chilean law, including Law No. 19,628 and its amendments. ZopiTech has also designed this policy with regard to the standards introduced by Law No. 21,719, which is scheduled to enter into force on December 1, 2026, without prejudice to other sector-specific, contractual or regulatory rules.

5. Data we may process

We may process name, email, phone number, company, position, service of interest, message content, information voluntarily included in documents or meetings and contact preferences. We may also record IP address, browser, device, date and time, requested URL, security events, session logs, consent evidence and statistical data generated after analytics cookies are accepted. We do not request sensitive data through the public form and ask users not to include it unless strictly necessary through a previously agreed channel.

6. Data sources

Data mainly comes directly from the individual when they complete a form, contact us by email or WhatsApp, attend a meeting, request a proposal or engage a service. Data may also lawfully come from the organization to which the individual belongs, authorized counterparts or public sources, always within permitted purposes.

7. Processing purposes

We use data to receive and answer enquiries; understand needs; schedule meetings; prepare quotations, proposals and requested pre-contractual steps; manage contracts and projects; provide support; handle operational communications; issue and retain business documentation; secure the website and forms; prevent fraud or abuse; maintain traceability; comply with legal duties; establish, exercise or defend rights; and improve the website through aggregate statistics after consent.

8. Processing grounds

Depending on the activity, processing may rely on the individual’s request or consent; pre-contractual measures taken at their request; performance of a contract; compliance with legal obligations; establishment, exercise or defence of legal claims; or permitted legitimate interests such as security, operational continuity and abuse prevention, balanced against individual rights.

9. Required data and consequences of not providing it

Fields marked as required are necessary to receive, validate and respond to a request. Other information is voluntary. Without minimum identification or contact information, we may be unable to respond, prepare a proposal or provide the requested service.

10. Email and WhatsApp communications

When a person starts a conversation by email or WhatsApp, we use their data to handle that communication and keep necessary traceability. We do not automatically add those contacts to mass campaigns. Marketing communications beyond the original request require an appropriate legal basis or separate authorization and must provide a reasonable opt-out mechanism.

11. Cookies, Google Analytics and Tag Manager

The website uses technologies required for sessions, security, forms and preference storage. Google Analytics and Google Tag Manager remain blocked until the user expressly accepts the analytics category. The decision may be rejected or withdrawn through the Cookie settings link permanently available in the footer. The inventory, purpose and duration of these technologies are detailed in the Cookie Policy.

12. Vendors and processors

We may use hosting, infrastructure, security, backup, email, collaboration, analytics and technical-support providers, including Google services where applicable. Providers access only the data needed to perform their functions and are subject to their contracts, terms, safeguards and applicable obligations. ZopiTech seeks to select suitable providers and limit permissions.

13. Processing or storage outside Chile

Some technology providers may process or store information in other countries. Where this occurs, we use the contractual terms, privacy settings and mechanisms offered by the provider and assess whether processing maintains a reasonable level of protection considering the data and applicable law.

14. Retention and deletion

Contact requests are generally retained for up to 12 months after the last interaction. Where a pre-contractual or contractual relationship arises, records may be retained throughout that relationship and for applicable legal, tax, accounting, contractual or legal-defence periods. Technical logs are retained for the period reasonably necessary for security and audit. Analytics data follows GA4 settings and the Cookie Policy. Once the purpose ends, data is deleted, anonymized or restricted where appropriate.

15. Security and confidentiality

We apply reasonable technical and organizational measures, including access control, strong administration authentication, privilege management, encryption in transit, audit logs, backups, component updates, form validation and monitoring. No system is completely invulnerable, so measures are reviewed according to risk, context and technological change.

16. Security incidents

If an incident compromises personal data, ZopiTech will assess its scope, implement containment and recovery measures, preserve necessary evidence and make any communications or notifications required by applicable law, contracts and the level of risk to individuals.

17. Automated decisions and profiling

The website does not make solely automated decisions producing legal or similarly significant effects. Analytics is used to understand aggregate navigation trends and improve content, not to determine service access, personalized prices or employment or credit decisions.

18. Individual rights

Individuals may request information about processing and, where applicable, access, correction, updating, deletion, objection, restriction, portability or suspension, and may withdraw consent without retroactive effect. The availability and scope of each right depend on effective law, the processing purpose and obligations permitting or requiring retention.

19. How to exercise rights

Requests must be sent to [email protected] with the individual’s name, contact method, requested right and sufficient details to identify the processing. To prevent unauthorized access or changes, we may reasonably verify identity or representation. We will respond within the periods and conditions established by applicable law and explain any justified inability to comply.

20. Children’s data

The website is primarily intended for businesses, professionals and people able to enter contracts. We do not intentionally collect children’s data. A representative who believes a minor’s data was submitted without authorization or necessity may request review and deletion through the privacy channel.

21. Third-party links and services

The website may link to external platforms. ZopiTech does not control third-party privacy practices, so users should review their policies before providing information. A link does not make ZopiTech responsible for processing carried out by that third party.

22. Changes and effective date

We may update this policy because of legal, technical, organizational or provider changes. The effective version is the one published on this page with its update date. Where a change materially alters a purpose based on consent, we will request a new decision when appropriate. Effective version: July 31, 2026.