Privacy Policy

This Policy explains how Izquierdo Consultores Compañía Limitada, trading as Izquierdo Deramond Consultores (“IDC”), processes personal data obtained through www.consultoresid.cl (the “Website”) and its contact channels. IDC processes data under Chilean Law No. 19,628 and is preparing for the amendments introduced by Law No. 21,719, which generally take effect on 1 December 2026.

1. Controller and contact channel

The controller is Izquierdo Consultores Compañía Limitada, Chilean Tax ID (RUT) 76.555.767-4, with an address at Avenida Providencia 1208, office 215, Providencia, Santiago, Chile.

Privacy enquiries and data-subject requests must be sent to gregorio@consultoresid.cl. IDC has not appointed a data protection officer. This email address is the permanent contact channel for privacy matters.

2. Data we may process

Depending on the interaction, IDC may process:

• identification and contact data, including name, email, telephone number, company and country;
• service of interest, enquiry content and information voluntarily submitted;
• information required to assess, propose or perform a professional engagement;
• communication preferences and separate authorisation for updates;
• technical data strictly required for security and operation, including date and time, server requests, error events and abuse-prevention controls;
• a pseudonymous identifier, date, time and categories associated with the cookie decision;
• campaign parameters, browsing data and measurement events only where the relevant category has been authorised;
• information provided when using external services such as Calendly, WhatsApp or Google Maps in response to the data subject's request.

We do not request sensitive data through the general contact form. Do not send sensitive data, trade secrets or third-party confidential information before IDC confirms an appropriate channel and engagement.

3. How data is obtained

We obtain data when a person uses the form, contacts us by email or WhatsApp, books a meeting, provides information during a conversation, retains our services, manages cookie preferences or expressly requests an external function. We may also receive data from clients, representatives, counterparties or lawful sources where required for an engagement or permitted by law.

4. Purposes and lawful grounds

IDC may process data to:

• respond to enquiries and take requested pre-contractual steps;
• prepare proposals and, if a contract is concluded, perform the engagement;
• communicate with the data subject and manage meetings;
• meet legal, tax, contractual and professional obligations;
• perform conflict checks, prevent fraud or abuse and protect the Website;
• retain evidence of consent decisions;
• send legal or tax updates only under a separate authorisation;
• measure Website and campaign performance only after the relevant categories are accepted;
• establish, exercise or defend legal claims.

Lawful grounds may include free, informed, specific, prior and unambiguous consent; pre-contractual steps requested by the data subject; performance of a contract; compliance with a legal obligation; the establishment, exercise or defence of legal claims; or another ground permitted by applicable law.

5. Required and optional information

The form identifies the information required to manage the enquiry. Without it, IDC may be unable to respond. The privacy checkbox is required and is not pre-ticked. The subscription to updates is optional, separate and also not pre-ticked.

6. Processors, recipients and international transfers

Access is limited to authorised IDC personnel and service providers acting for defined purposes. The following list must reflect the tools actually retained and configured:

Processor or service	Purpose	Declared international transfer	Review note
Calendly	Meeting scheduling	Yes, United States	External service opened by the data subject's decision.
Google — Analytics, Ads and Tag Manager	Analytics and advertising measurement, with consent only	Yes, United States	Blocked until the category is authorised.
Google Maps	User-requested map	Yes, United States	Blocked until third-party services are authorised.
Hostinger	Hosting, infrastructure and security	Yes, Brazil	Server located in Brazil.
Google Workspace	Receiving and sending communications	Yes, United States	Corporate email.
WhatsApp / Meta Platforms	Messaging requested by the data subject	Yes, processing outside Chile	The Website displays a notice before opening the service.

Providers may process or permit access to data from countries outside Chile. Relationships with processors are governed by the data-processing addenda or agreements each provider incorporates into its commercial terms. IDC retains documentary evidence of the instruments applicable to each processor and verifies that they include appropriate contractual, technical and organisational safeguards. This Policy does not attribute a specific transfer mechanism to a provider unless IDC can support it with documentation.

We may also disclose data where required by law or a competent authority, where necessary to establish, exercise or defend legal claims or where expressly authorised by the data subject.

7. Retention

• Enquiries that do not become a professional relationship will be retained for no more than 12 months after the last interaction and then deleted or anonymised, unless another legal ground applies.
• Where a professional relationship exists, information will be retained during the engagement and afterwards for periods needed to meet legal, tax, contractual and professional obligations or defend rights.
• The first-party cookie recording the cookie decision expires 12 months after the decision or its latest amendment.
• The server retains evidence of each cookie-decision event, including date, time and categories, for 24 months from the event. An automated task deletes events older than that period.
• Internal retention periods for technical and security logs must be documented and limited to what is necessary for their purpose.

8. Data-subject rights

The data subject may request access to personal data and processing information; correction of inaccurate, outdated or incomplete data; deletion where applicable; objection to certain processing; portability where provided by law; and temporary blocking where applicable. Consent may be withdrawn at any time without giving reasons and without retroactive effect.

Requests must be sent to gregorio@consultoresid.cl. IDC may request reasonable information to verify identity or authority and will respond in writing under applicable law. Rights will be exercised free of charge in the cases and at the frequency established by law.

9. Cookie consent

Non-essential technologies remain off until the relevant category is accepted. Users can accept all, reject non-essential technologies or configure each category through options of equivalent prominence. The decision can be changed or withdrawn at any time through the permanent “Cookie settings” footer link. Withdrawal leaves all optional categories off and is recorded by the server.

10. Security

IDC applies reasonable technical and organisational measures for access control, minimisation, validation, backup, updating and incident response, proportionate to processing risks. No system can guarantee absolute security. Suspected risks or communications should be reported through the channel above.

11. Children

The Website and services are directed to businesses, investors and adults. IDC does not seek to collect children's or teenagers' data through the general form. If unintended collection is identified, IDC will assess deletion and the applicable special rules.

12. Updates

IDC may update this Policy following legal, technical or operational changes. The published version will state its date. Where fresh authorisation is required, it will be obtained before the relevant processing.