Privacy policy

1. Data controller

The controller of the personal data collected through the ardes.cl website is ARDES, a technology development company based in Chile.

For any question about this policy or your personal data, please write to contacto@ardes.cl.

2. Scope and legal framework

This policy explains what personal data we process when you visit this website or contact us through it, why we use it, who we share it with, how long we keep it and how you can exercise your rights.

We process data in accordance with Chilean law, in particular Law No. 19,628 on the Protection of Private Life as amended by Law No. 21,719, published on December 13, 2024, which takes full effect on December 1, 2026 and creates the Personal Data Protection Agency. Where applicable, we also apply the European Union General Data Protection Regulation (GDPR).

This website does not offer user accounts, does not sell products online and is not intended to profile its visitors.

3. Principles we apply

We process your data lawfully, fairly and transparently; only for specified and explicit purposes; limited to what is necessary (data minimisation); keeping it accurate and up to date; retaining it only for as long as needed; with appropriate security measures; and taking responsibility for demonstrating that we comply with these principles.

4. Data we process

Contact form: name, email address, service of interest and project description (required); company and phone number (optional); and the record that you accepted this policy when submitting the form.

Follow-up communications: any data you include in the emails or messages we exchange to answer your request or prepare a proposal.

Technical data: your IP address is used only in server memory, for up to 10 minutes, to limit the number of form submissions and prevent abuse; we do not store it in databases or in our own logs. Our infrastructure provider and the anti-bot check (Cloudflare Turnstile) process technical connection and browser data (such as IP address, browser type and interaction signals) to protect the website, under their own policies.

We do not ask for sensitive data (for example, health data, ethnic origin, political opinions or biometric data). Please do not include it in your message; if it is included, we will delete it or not use it.

5. Purposes

We use your data to: (a) answer your enquiry or quote request; (b) prepare and send you the business proposals you ask for; (c) manage the contractual relationship if you become a client; (d) protect the website and the form against spam, fraud and attacks; and (e) comply with legal obligations and handle any claims.

We do not use your data for advertising, we do not build marketing profiles, and we do not sell, rent or share your data with third parties for commercial purposes. We will not send you newsletters or promotional communications without your prior consent.

6. Legal bases

Consent: by ticking the box and submitting the form you consent to our processing your data to answer your request. You may withdraw your consent at any time, without retroactive effect.

Pre-contractual steps and performance of a contract: when you ask us for a quote or proposal, or when we enter into a contract with you or the organisation you represent.

Legitimate interest: for website security, abuse prevention (submission limits and anti-bot check) and the defence of our rights, provided your rights and freedoms do not override it.

Legal obligation: when the law requires us to keep or disclose certain data, for example for tax purposes or in response to requests from a competent authority.

7. Cookies and browser storage

This website does not use analytics, advertising or tracking cookies. The typeface is served from our own domain, with no calls to external font services.

To know how many visits the website receives we use Cloudflare Web Analytics, which does not use cookies or browser storage and does not create digital fingerprints (fingerprinting). It only collects aggregated data about each visit, such as the page viewed, the referring site (referrer), the country and the browser and device type, and it does not allow individuals to be identified.

Only strictly necessary technical mechanisms are used. When the form loads, Cloudflare Turnstile may use technical storage in your browser solely to verify that you are not a robot. Because they are necessary for security, they do not require additional consent; if you block them, the form may not be able to submit.

8. Recipients and processors

We share data only with providers that render services to us and act as data processors, under contract and following our instructions:

Cloudflare, Inc.: website hosting, content delivery network (CDN), DNS, attack protection, anti-bot verification (Turnstile), cookie-free aggregated visit statistics (Web Analytics) and inbound email routing.

Resend: delivery of the email containing the form content to our mailbox. Its servers are located in the United States.

Our email provider: storage of the messages we receive and the replies we send you.

WhatsApp (Meta): only if you choose to write to us using the WhatsApp button. In that case the conversation is also governed by WhatsApp's terms and privacy policy, and the decision to use that channel is yours.

We may also disclose data to public authorities when required by law or a valid request.

9. International transfers

Some of our providers process data outside Chile, mainly in the United States. We choose providers that offer appropriate safeguards, such as data processing agreements incorporating the standard contractual clauses approved by the European Commission or other recognised mechanisms, in addition to technical security measures.

You can ask us for information about the applicable safeguards by writing to contacto@ardes.cl.

10. Retention periods

Enquiries that do not lead to a contract: up to 24 months from the last communication, to follow up on the request; then we delete them.

Clients: for the duration of the contractual relationship and, afterwards, for the periods required by tax, accounting and commercial laws or needed to handle or defend claims.

IP address used to limit submissions: in memory only, for up to 10 minutes; it is not stored.

Technical and security logs kept by our providers (for example, Cloudflare or the email delivery service): according to each provider's retention policies.

If you withdraw your consent or request erasure, we will delete your data unless we must keep it under a legal obligation; in that case we will block it and use it only for that purpose. We will keep a minimal record of your request to show that we handled it.

11. Security

We apply reasonable technical and organisational measures proportionate to the risk: communications encrypted in transit via HTTPS/TLS, security headers on the website (including a content security policy and HSTS), server-side data validation, anti-bot verification, submission limits, access to information on a least-privilege basis and credentials kept outside the source code.

No system is completely infallible. If a security breach affecting your data occurs, we will notify the competent authority and, where applicable, the affected individuals, as required by law.

12. Your rights

Under Chilean law you may exercise the rights of access (to know what data about you we process and how), rectification (to correct inaccurate or incomplete data), erasure (to have it deleted), objection (to object to a specific processing), portability (to receive your data in a structured, commonly used format or have it transmitted to another controller) and blocking (to temporarily suspend processing while a request is resolved).

You also have the right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect you. ARDES does not make decisions of that kind; the anti-bot check only serves to prevent automated submissions and does not assess your request.

You may withdraw the consent you gave us at any time.

13. How to exercise your rights

Write to contacto@ardes.cl stating your name, the right you wish to exercise and, if possible, the email address you used to contact us. We may ask for reasonable additional information to verify your identity and protect your data against requests from third parties.

Exercising your rights is free of charge. We will reply within 30 calendar days of receiving your request; this period may be extended once for the same length of time where the law allows it, in which case we will tell you why.

14. Complaints to the authority

If you believe we have not handled your request or have processed your data improperly, you may file a complaint with Chile's Personal Data Protection Agency, once it begins to perform its functions, or with the competent courts under applicable law. We would appreciate it if you wrote to us first so we can try to resolve it.

15. Visitors from the European Union, the EEA and other countries

If you are in the European Union or the European Economic Area, the GDPR grants you the rights of access, rectification, erasure, restriction of processing, portability and objection, as well as the right to withdraw your consent and not to be subject to automated decisions. The applicable legal bases are those listed in section 6 (Article 6(1)(a), (b), (c) and (f) GDPR) and international transfers are made with the safeguards described in section 9.

You may also lodge a complaint with the data protection supervisory authority of your country of residence.

If you visit the website from another country, we apply the same standards described in this policy and will handle your requests in accordance with the laws applicable to you.

16. Minors

This website is aimed at businesses and adults. We do not knowingly collect data from children under 14, or from children under 16 residing in the European Union (or the lower age set by the law of their country). If you are a parent or guardian and believe a minor has sent us data, write to contacto@ardes.cl and we will delete it.

17. Links to third-party sites

This website may include links to third-party sites or services (for example, client projects, social networks or WhatsApp). We do not control those sites and are not responsible for their privacy practices; we recommend reviewing their policies before providing them with any data.

18. Changes to this policy

We may update this policy to reflect legal, technical or service changes. We will publish the current version on this page with its last updated date and, if the changes are significant, we will highlight them on the website. If a change requires new consent, we will ask you for it.