Cookie Policy

Current cookie and technology inventory

This table reflects the website’s preloaded configuration. Names and retention periods of external services may change according to provider documentation.

Name or technology	Provider	Purpose	Approximate duration	Category
zopitech_prod_session	ZopiTech / Laravel	Session, security, CSRF protection, forms and authorised access.	Until the browser is closed	Necessary
zopitech_cookie_consent	ZopiTech	Remember the decision and consent version.	365 days	Necessary
Telemetría HTTP backend	ZopiTech / Laravel	Record minimised HTTP requests, status, page, referrer, approximate device and human/bot classification without storing raw IP addresses or complete query strings.	90 days for raw events	Operational
localStorage: zopitech_analytics_id	ZopiTech	Pseudonymously distinguish browsers and associate interaction events when consent exists.	Until analytics are withdrawn or local storage is cleared	Optional analytics
_ga, _ga_*	Google Analytics	Distinguish browsers and produce aggregated statistics after consent.	Defined by Google and GA4 settings	Optional analytics
GTM-N5RLHWP	Google Tag Manager	Manage authorised tags after consent.	Does not necessarily create cookies by itself	Optional analytics

1. Identification and scope

This Cookie Policy describes the use of cookies and similar technologies on the website operated by Zopi Consultores SpA, trading as ZopiTech, with offices at Av. Apoquindo 6410, Office 605, Las Condes, Santiago, Chile. It supplements the website Privacy Policy and Terms and Conditions.

2. What cookies and similar technologies are

Cookies are small files or identifiers that a website may store or read in a browser to remember information, maintain a session, protect forms, preserve preferences or produce statistics. Equivalent technologies may include local storage, measurement tags, pixels or technical identifiers. In this policy, “cookies” includes such technologies when they perform equivalent functions.

3. ZopiTech principles

We apply transparency, purpose limitation, proportionality and data minimisation. Strictly necessary technologies are used to operate and protect the website. Optional analytics technologies remain blocked until the visitor makes an affirmative choice. Rejecting analytics does not prevent access to public content or use of the contact form.

4. Strictly necessary cookies

The website may use a session cookie for security, CSRF protection, forms and authorised access to the administration area. We also store the cookie preference to remember whether analytics were accepted or rejected and avoid requesting the same decision on every visit. These technologies are not used for advertising or commercial profiling.

5. Optional analytics cookies

With consent, ZopiTech uses Google Analytics 4 to obtain aggregated statistics about visits, pages viewed, approximate duration, navigation events, device, browser and approximate location. This information is used to understand website performance, identify useful content, correct issues and improve the experience. We do not use these cookies to sell personal data.

6. Google Analytics 4

The Google Analytics property uses measurement ID G-XV09ZE7SRJ. When analytics are accepted, cookies such as _ga and _ga_<identifier> may be created. Their names and retention periods are managed by Google and may change according to its documentation and configuration. Google signals and advertising personalisation are disabled by default unless the CMS expressly enables them and an appropriate lawful basis exists.

7. Google Tag Manager

The website includes Google Tag Manager container GTM-N5RLHWP. Tag Manager allows technical tags to be managed through a central container. In this implementation, the container remains blocked until analytics cookies are accepted. Any tags added later must respect the corresponding category and consent status. ZopiTech will revise this policy if new purposes or providers are introduced.

8. Consent mode and prior loading

We use a basic consent approach: Google tags are not downloaded or executed before acceptance. If the visitor rejects analytics, neither Google Analytics nor Google Tag Manager is loaded by this website. Preferences may be changed at any time through the “Cookie settings” link in the footer.

9. How to grant, reject or withdraw consent

On the first visit, a banner provides options to accept analytics, reject them or review settings. Acceptance requires an affirmative action. The rejection option has equivalent visibility and does not reduce essential functionality. Consent may be withdrawn free of charge through the preference centre. Withdrawal does not affect processing that occurred before the change and may require a page reload to stop tags already initiated.

10. Technical information that may be processed

When analytics are enabled, information may include an IP address subject to Google's protection mechanisms, browser or device identifiers, visited URL, referrer, language, screen resolution, operating system, interaction events, date, time and approximate network-derived location. ZopiTech does not intentionally send special-category data or form-field content through these tools.

11. Providers and international processing

Google LLC and related entities may act as technology providers for Analytics and Tag Manager. Depending on the infrastructure used, information may be processed outside Chile. ZopiTech configures and uses these services with the aim of limiting information to what is necessary for statistical purposes, subject to the provider's terms, safeguards and contractual mechanisms.

12. Retention

The cookie preference is retained for the period configured in the CMS, initially 365 days, or until deleted by the visitor. Analytics cookies follow the periods defined by Google and the property settings. Aggregated reports may be retained for the period configured in Google Analytics and then deleted or anonymised according to the available tools.

13. Browser controls

Browsers allow users to inspect, block or delete cookies. General blocking may affect necessary functions, particularly forms, sessions and authenticated areas. Manually deleting the consent cookie will cause the banner to appear again. Exact instructions depend on the browser and device.

14. Children

The website is primarily intended for businesses, institutions and professionals. It is not designed to intentionally collect children's data through analytics cookies. A parent or representative who identifies such a situation may request review by writing to [email protected].

15. Security and change control

ZopiTech applies reasonable measures to reduce unauthorised access and limits tag loading according to the stored preference. Analytics, Tag Manager and CMS configurations may evolve. Before adding a new optional category, advertising use or provider, the purpose must be assessed, information updated and consent requested where required.

16. Rights and requests

Individuals may request information, access, correction, deletion or objection regarding their personal data where applicable by writing to [email protected]. They may also withdraw analytics consent through the preference centre permanently available on the website.

17. Changes to this policy

This policy may be updated due to legal, technical or provider changes. The effective version is the one published on this page with its update date and consent version. When a change materially alters analytics purposes, the website may request a new decision.

18. Contact and effective version

Controller: Zopi Consultores SpA, ZopiTech. Email: [email protected]. Address: Av. Apoquindo 6410, Office 605, Las Condes, Santiago, Chile. Effective version: August 4, 2026. Consent version: 2026-08-04-v3.

19. First-party operational backend analytics

Even when a visitor rejects optional analytics technologies, Laravel records minimised technical telemetry for each request to operate and protect the website and understand requested pages, HTTP status, reported referrer, approximate country supplied by Cloudflare, approximate device and browser, UTM campaigns and probable classification as human, bot or suspicious traffic. Raw IP addresses and complete query strings are not stored. A daily rotating cryptographic fingerprint is used to estimate unique visits and cannot stably follow a person across days. Raw events are initially retained for 90 days. When consent exists, a pseudonymous local-storage identifier and interaction events such as duration, reading depth, clicks and forms are also enabled.