Privacy policy

Reference legal framework

This policy is based on Chilean rules applicable to personal data processing, especially Law No. 19,628 on protection of private life and personal data.

It also considers Law No. 21,719, published in the Official Gazette on December 13, 2024, which modifies the Chilean personal data protection regime, creates the Personal Data Protection Agency, and whose general effective date is expected on December 1, 2026.

References: Law No. 19,628 and Law No. 21,719.

1. Data controller

The data controller is NayraLabs, a technology project focused on diagnostic and prioritization solutions for digital transformation processes.

For personal data questions or requests, write to contacto@nayralabs.cl.

2. Data we collect

The site collects data provided directly by the person who completes the contact form:

• Name.
• Company or organization.
• Email address.
• Contact source within the site.
• Submission date and time.
• IP address, used for security and abuse control.
• Technical email delivery status.

We do not request sensitive data through the form. Please do not include sensitive information in later messages or emails unless it is strictly necessary for the conversation.

3. Processing purposes

We use personal data to:

• Respond to requests sent through the form.
• Coordinate conversations, meetings, or validation activities.
• Send an automatic confirmation to the reported email address.
• Manage commercial or exploratory contacts initiated by the data subject.
• Prevent spam, abuse, or misuse of the form.
• Keep minimal internal contact and traceability records.

4. Legal basis

Processing is mainly based on the consent given by the person when they tick the form checkbox and submit their data. When the contact is aimed at evaluating a potential collaboration, service, or validation, the processing may also be linked to pre-contractual measures requested by the data subject, under the framework introduced by Law No. 21,719.

5. Recipients and processors

Data may be accessed by the NayraLabs team and by technical providers needed to operate the site, hosting, email, and form security.

We partner with Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay, in order to improve our products and services. Microsoft and NayraLabs may collect and use this data when you accept analytics cookies. For more information about how Microsoft collects and uses your data, see the Microsoft Privacy Statement.

We do not sell personal data or transfer it to third parties for advertising purposes. If advertising, remarketing, or commercial automation tools are added in the future, this policy will be updated before those processing activities are activated.

6. External resources

The site may load third-party resources, such as Google Fonts and Font Awesome, for fonts and iconography. These providers may receive technical information inherent to a web request, such as IP address, browser, date, and requested URL.

Links to Instagram, LinkedIn, and Corfo redirect to external sites. From then on, data processing is subject to each platform's policies.

7. Retention

We keep contact data for the time needed to respond to the request, manage the relationship initiated by the data subject, and maintain reasonable traceability. As an operational criterion, contact records are reviewed for deletion or anonymization when they are no longer needed, with a reference period of up to 24 months from the last interaction, unless a legal obligation or active relationship justifies keeping them longer.

Temporary logs used to limit abusive form attempts are kept only for the operational period needed.

8. Security

We apply reasonable measures to protect data against unauthorized access, loss, misuse, or alteration. These measures include form validation, anti-spam controls, submission limits, restricted storage, and authenticated email for responding to requests.

9. Rights of individuals

You may request access, rectification, deletion, objection, blocking, or portability of your personal data where applicable under Chilean law. You may also withdraw consent granted for processing based on consent.

To exercise these rights, write to contacto@nayralabs.cl, stating your request and a way to verify your identity.

10. International visitors: Canada and United States

NayraLabs operates from Chile, and this policy is primarily governed by the Chilean legal framework described above. If you visit this site from Canada or the United States, we apply reasonable standards of transparency, purpose limitation, prior consent for analytics tools, security, access, correction, and deletion where applicable.

For visitors from Canada, we consider PIPEDA principles as a general reference for personal information processing in commercial activities. For visitors from the United States, we do not assume a single equivalent federal privacy law; certain rights may vary by applicable state law, including California where relevant.

We do not sell personal data, use remarketing, or activate advertising cookies. Microsoft Clarity analytics cookies are activated only after consent through the cookie banner. You may write to contacto@nayralabs.cl to request access, correction, deletion, or withdrawal of consent where applicable.

11. Cookies

Information about cookies and similar technologies is available in our cookie policy.

12. Changes to this policy

We may update this policy to reflect legal, technical, or operational changes. The current version will always be available on this site.