← Back to framehead.net

Privacy Policy

Effective date: August 9, 2026 · Version 1.0

This Privacy Policy explains how Framehead collects, uses, stores, and protects the personal data of people who visit this website or contact us through it. It is written to comply with Chile's Law No. 21.719 on the Protection of Personal Data ("Data Protection Law").

1. Who is responsible for your data

Framehead is classified as a small business under Chilean law (Ley N° 20.416), and this policy applies proportionate, risk-based measures accordingly.

2. What data we collect

We only collect data that you provide directly through our contact form, or that you send us by email or via LinkedIn.

Data	Source	Required?
Full name	Contact form	Yes
Email address	Contact form	Yes
Company name	Contact form	No
Service of interest	Contact form	No
Message content	Contact form	No

We do not knowingly collect sensitive personal data (health, biometric, political, religious, union, or similar data) through this site. Please do not include such information in your message.

3. Why we process your data

• To respond to your inquiry — necessary to answer the request you submitted (legal basis: your consent, and/or the execution of pre-contractual measures at your request, per Art. 12 and Art. 13(c) of Law 21.719).
• To follow up commercially and, if you opt in, to send occasional updates or newsletter content about Framehead's services — only where you have given separate, specific consent for this purpose (Art. 3(b), principle of purpose limitation). You may withdraw this consent at any time, free of charge, without affecting the lawfulness of prior processing.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.

4. Where your data is stored

Submissions are stored in our internal CRM, a system we built and operate ourselves, hosted on Supabase infrastructure (via Lovable). Supabase's underlying servers may be located outside of Chile.

Because of this, your data may be subject to an international transfer. This transfer is carried out on the basis of your consent (Art. 27(a) of Law 21.719) and/or because it is necessary to execute measures you requested prior to a potential engagement (Art. 27(g)). We select providers that maintain industry-standard technical and organizational security measures.

We also use standard website infrastructure providers (such as our hosting and email-delivery providers) strictly to operate the contact form and deliver your message to us; they do not use your data for their own purposes.

5. How long we keep your data

We retain contact form submissions for as long as reasonably necessary to pursue the commercial relationship, and in any case no longer than 24 months from your last interaction with us, after which your data is deleted or anonymized — unless you have asked us to delete it sooner, or the law requires us to keep it longer.

6. Your rights

Under Law 21.719, you have the right to:

• Access — confirm whether we process your data and obtain a copy of it.
• Rectification — correct inaccurate or outdated data.
• Deletion/Suppression — request that we erase your data.
• Opposition — object to a specific processing activity, including marketing communications.
• Portability — receive your data in a structured, commonly used electronic format.
• Temporary blocking — request that we pause processing while a request is under review.

These rights are personal, non-transferable, and free of charge. To exercise any of them, use the request form below, identifying yourself and the right you wish to exercise. We will acknowledge your request and respond within 30 calendar days, extendable once by a further 30 days if needed (Art. 11). If we deny your request or fail to respond in time, you may file a claim with Chile's Personal Data Protection Agency.

7. Security

We apply reasonable technical and organizational measures appropriate to the scale of our business to protect your data against unauthorized access, loss, alteration, or disclosure, including access controls on our CRM and encrypted transmission of form submissions. No system is 100% secure, and we continuously review our practices as our tools evolve.

8. Cookies and tracking

This site uses Google Tag Manager to load analytics and, potentially, advertising tags. These may set cookies or use similar technologies to understand site usage. You can control cookies through your browser settings. We do not use tracking data to build profiles that produce legal effects on you.

9. Changes to this policy

We may update this policy from time to time. The "Effective date" at the top reflects the latest version. Material changes will be reflected here.

10. Submit a data rights request

Fill in the form below to exercise any of the rights listed in Section 6. We review these requests directly — no third party has access to this form's submissions.