Legal framework
We process your data under Chile's Ley 19.628 on the protection of private life and, once it takes effect on 1 December 2026, under Ley 21.719, which modernises the Chilean personal data regime and creates the Agencia de Protección de Datos Personales.
This policy is already written to the information and transparency duties of Ley 21.719, so it will not need rewriting when that law takes effect.
Who is responsible for your data
id3a is the controller of the personal data collected through id3a.cl. We have not appointed a data protection officer; requests are handled through the contact channel below.
- Contact email: hola@id3a.cl
- Contact form: id3a.cl/en/contact
- Location: Santiago, Chile
What data we process
Five sets of data, and we obtain none of them from third parties: everything comes directly from you or from your browser.
- What you type into the contact form: name, email address, company (optional), project type and the message itself.
- What you type into the form to download the Ley 21.719 checklist: name, email address and your gym's name, together with the record that you agreed to receive it and the date and time you asked for it.
- What your visit generates automatically and lands in the server logs: IP address, browser type, date and time, and the pages you visit.
- What your visit generates in the site's cookieless analytics: the page you view, the site you came from, the country you come in from, and your device and browser type. Your IP address is not stored, and no identifier is created that would follow you between visits.
- What your visit generates in Google Analytics, and only if you accept measurement: everything above plus an identifier stored in cookies that recognises your browser between visits, and the events describing which pages you view, which content you open and whether you send the form. If you decline, none of it is collected, because Google is never loaded.
We do not ask for sensitive data, data concerning children or adolescents, or precise geolocation.
What we use it for
- To answer your enquiry and follow it up commercially.
- To send you the Ley 21.719 checklist you asked for, and to write to you once about it.
- To keep the site secure, available and free of abuse.
- To know which content gets read, in aggregate, so we can decide what to publish.
We do not sell, rent or transfer your data for advertising, and using either form does not subscribe you to any mailing list. Asking for the checklist subscribes you to nothing: you receive the PDF and, at most, one more email about it.
On what lawful basis
- Contact form: your consent, given when you submit it voluntarily. You can withdraw it at any time by writing to us, without affecting the lawfulness of processing carried out before that.
- Checklist form: your consent, given by ticking the box before you send it; without it the form does not go through. You can withdraw it at any time by writing to hola@id3a.cl, without affecting the lawfulness of processing carried out before that.
- Server logs: our legitimate interest in operating the site securely and diagnosing faults.
- Cookieless analytics: our legitimate interest in understanding how the site is used. It is aggregate, it is not used to profile you or for advertising, and because it works without cookies and stores nothing on your device it needs no permission from you.
- Measurement through Google Tag Manager and Google Analytics: your consent, given in the notice that appears when you arrive. Nothing from Google loads before you accept, and you can withdraw it at any time from “Measurement preferences” at the foot of any page, without affecting the lawfulness of processing carried out before that.
How long we keep it
- Form messages: for as long as the conversation lasts and up to 24 months after the last contact, so we can pick the thread back up if you write again.
- Checklist requests: up to 12 months from when you asked for it, or until you ask us to delete it if that comes first.
- Server logs: the retention period applied by our hosting provider, which is short and technical in purpose.
- Analytics: kept in aggregate. The temporary identifier that lets a visit be counted is discarded after 24 hours, so there is no way to follow you from one day to the next.
- Google Analytics: events are kept for 14 months, the longest Google Analytics 4 can be configured to keep them. The cookies it sets expire two years after your last visit, and you can clear them sooner from your browser.
Once that period is over we delete the data, or anonymise it so it can no longer be linked to you.
Cookies and local storage
The site uses three strictly functional items, which need no permission from you, and a fourth group that only appears if you allow it:
- The NEXT_LOCALE cookie: remembers whether you prefer the site in Spanish or English.
- The theme key in your browser's local storage: remembers whether you chose the light or dark theme.
- The id3a-consent key in local storage: remembers whether you accepted or declined measurement, so you are not asked again on every page.
- Google Analytics cookies (_ga and _ga_*): set only if you accept measurement, and used to tell one visit from another.
The first three are always stored: without them the site cannot remember how you left it, none of them is used to track you and none is shared with anyone. Google's do not exist until you accept them, and if you decline, nothing from Google is loaded at all — not the container, not the analytics, not a single request. You can change your mind at any time from “Measurement preferences” at the foot of any page, and clear any of these keys from your browser: the site will keep working, it will just forget them.
Who we share it with
With nobody beyond the providers we need in order to operate. Each acts as a processor and may only use the data to provide us that service:
- Vercel Inc. (United States): site hosting, server logs and cookieless usage analytics.
- Cloudflare, Inc. (United States): domain DNS and routing to our mailbox of the emails the contact form and the checklist form generate.
- Resend (United States): delivery of the emails the contact form and the checklist form generate, including the one that carries the PDF to you.
- Google Ireland Limited and Google LLC (United States): Google Tag Manager and Google Analytics, which load only if you accept measurement and receive nothing if you do not.
International transfers
The providers above are in the United States, so your data leaves Chile in order to be processed. Google's receive anything at all only if you accept measurement.
We chose them because they offer contractual data protection guarantees equivalent to those Chilean law requires, and because the processing is limited to what providing the service needs.
Your rights
You may exercise the following rights over your personal data, free of charge:
- Access: find out whether we process data about you and obtain a copy.
- Rectification: correct data that is inaccurate, out of date or incomplete.
- Erasure: ask us to delete it where that applies.
- Objection: object to a particular processing operation.
- Portability: receive your data in a reusable format.
- Blocking: ask for a processing operation to be suspended temporarily.
To exercise them, write to hola@id3a.cl from the same address you used to contact us, saying which right you wish to exercise. We will reply within the period the law sets. If you believe we are not respecting your rights, you may complain to the Agencia de Protección de Datos Personales. If what you want is to withdraw your consent to measurement, there is no need to write: “Measurement preferences” at the foot of any page is enough.
Automated decisions
We make no automated decisions affecting you, and we build no profiles. Every message that arrives through the form is read by a person.
Security
The site is served over HTTPS only. Both forms validate everything on the server, not just in your browser, and what you type travels as plain text to our mailbox.
No system is infallible. Should a breach affect your personal data, we will tell you and notify the authority on the terms the law requires.
Changes to this policy
If we change it, we update the version and date shown at the top of this page. Material changes are announced on this same page, which stays permanently available.