This Privacy Policy explains how Encuadrado SpA ("Encuadrado", "we", "us", or "our") collects, uses, shares, stores, and protects personal data when you access or use our website, mobile application, and associated services (collectively, the "Platform"). It is intended to comply with Law No. 21.719 on Personal Data Protection of the Republic of Chile, Article 19 No. 4 of the Political Constitution of the Republic, the Meta Platform Terms, and other applicable regulations.
Please read this Privacy Policy carefully. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, you should not use the Platform.
1. WHO WE ARE
Encuadrado SpA is a Chilean stock company, Chilean Tax ID (RUT) No. 76.927.155-4, acting as the data controller for the personal data processed through the Platform, except where indicated otherwise in this Privacy Policy.
For any questions or requests regarding this Privacy Policy, you can reach us through the contact information provided in Section 13 below.
2. SCOPE OF THIS PRIVACY POLICY
This Privacy Policy applies to personal data processed in connection with:
The Encuadrado website at www.encuadrado.com and its help center.
The Encuadrado web and mobile applications.
Communications sent by or on behalf of Encuadrado through email, SMS, WhatsApp, or other messaging channels.
Integrations with third-party services used to operate the Platform (for example, Google Calendar, Transbank, Stripe, Meta/WhatsApp, and the Chilean Internal Revenue Service portal).
This Privacy Policy does not apply to the websites, applications, or services of third parties that may be linked from or integrated with the Platform. Those third parties maintain their own privacy policies, which you should review separately.
3. WHO THIS PRIVACY POLICY APPLIES TO
We process personal data of three main categories of individuals:
Users (Professionals): independent professionals, healthcare providers, small medical centers, clinics, and other service providers who register a Profile on the Platform to manage their professional services.
Clients (Patients): individuals who schedule or purchase services from a User through the Platform, without needing to register.
Visitors: individuals who access public areas of the Platform without registering or booking a service.
4. INFORMATION WE COLLECT
4.1 Information Users Provide Directly
When a User registers and operates a Profile on the Platform, we collect:
Identification data: full name or corporate name, Chilean Tax ID (RUT) or national identification number, date of birth, gender.
Contact data: email, phone number, postal address, city, district, country.
Professional data: profession, specialty, years of experience, professional description, services offered, service hours, rates, location where services are provided, a recent photograph, and a cover photo.
Banking data: bank name, account type, account holder, and account number, used to transfer payments received from Clients.
Tax data: authorization and credentials required to issue electronic fee invoices through the Chilean Internal Revenue Service (SII) portal.
Account credentials: username, password, and security settings.
Configuration data: time zone, Google Calendar integration preferences, messaging preferences, schedule availability.
4.2 Information Clients Provide Directly
When a Client books a service through the Platform, we collect:
Identification data: full name, Chilean Tax ID or national ID, date of birth.
Contact data: email, phone number, postal address, district.
Booking data: the selected Professional, service, date, time, and any optional comments included in the booking.
Payment data: processed through Transbank (for domestic cards) or Stripe (for international cards); we do not store full card numbers on our systems. For bank transfers, we receive transaction confirmation data.
4.3 Sensitive Personal Data
Where a User provides healthcare or other regulated professional services, the User may collect and store sensitive data about their Clients through the Platform, including clinical records, medical diagnoses, exam results, genetic information, mental or physical health information, and gender identity. In these cases, the User acts as the data controller for such sensitive data, and Encuadrado acts as a data processor providing the technological infrastructure for storage and management.
Encuadrado does not access or use this sensitive data except as strictly necessary to operate the Platform or as required by law.
4.4 Information Collected Automatically
When you use the Platform, we collect certain information automatically, including:
Device and browser information: device type, operating system, browser type and version, screen resolution, language preferences.
Connection data: IP address, approximate geographic location (derived from IP), Internet service provider, connection type.
Usage data: pages viewed, features used, time spent on the Platform, actions taken (bookings, cancellations, clicks), referral URLs, timestamps.
Cookies and similar technologies: as described in Section 9 below.
4.5 Information We Receive From Third Parties
We receive information from third parties that integrate with the Platform, including:
Google: when a User connects their Google Calendar, we receive calendar events and availability information strictly for scheduling synchronization.
Chilean Internal Revenue Service (SII): when a User authorizes SII integration, we receive the credentials and confirmations needed to issue electronic fee invoices.
Transbank S.A. and Stripe, Inc.: we receive payment confirmations, transaction status, and partial payment method information (such as the last four digits of the card used).
Meta Platforms, Inc. / WhatsApp LLC: when Clients interact with Encuadrado through WhatsApp, we receive message content, phone numbers, WhatsApp profile information, and delivery or read status.
5. HOW WE USE YOUR INFORMATION AND WHY
We process personal data for the following purposes:
5.1 To Operate the Platform
Create and administer User Profiles.
Enable Clients to find, book, and pay for services.
Synchronize schedules and calendars.
Issue electronic fee invoices through the SII.
Send appointment reminders, confirmations, and session-related communications.
Process payments and transfer funds to Users.
Handle cancellations and refunds.
5.2 To Communicate With You
Send transactional communications (booking confirmations, payment receipts, account notices, support responses).
Send operational communications related to scheduled services (reminders, rescheduling notices, payment links).
Respond to support requests.
Send administrative notices regarding the Platform, these policies, or our Terms and Conditions.
Send product updates, newsletters, and marketing communications — only where you have given separate, express consent for this purpose.
5.3 To Improve the Platform
Analyze usage patterns and feature adoption.
Measure the performance of the Platform and its integrations.
Test new features and develop new services.
Detect and prevent fraud, abuse, and security incidents.
5.4 To Comply With Legal Obligations
Comply with Chilean tax, commercial, and data protection laws.
Respond to lawful requests from judicial, administrative, or law enforcement authorities.
Enforce our Terms and Conditions and protect our legal rights.
5.5 Legal Basis for Processing
Under Law No. 21.719, we process personal data on the basis of:
Consent: for marketing communications, non-essential cookies, and certain messaging channels (such as WhatsApp).
Contract performance: to provide the Platform and the Services contracted by Users and Clients.
Legal obligation: to comply with tax, accounting, and data protection laws.
Legitimate interest: for security, fraud prevention, and Platform improvement, where such interests are not overridden by the rights of data subjects.
6. HOW WE SHARE YOUR INFORMATION
We share personal data only as necessary to operate the Platform, comply with the law, or carry out legitimate business purposes. We do not sell personal data.
6.1 With Users and Clients
A Client's booking information is shared with the corresponding User so the User can provide the scheduled service.
A User's public Profile information (name, specialty, services, rates, location, reviews) is visible to Visitors and Clients on the Platform.
6.2 With Service Providers
We share personal data with third parties that provide services essential to operating the Platform, subject to contractual confidentiality and security obligations:
Payment processors: Transbank S.A. (for domestic card payments) and Stripe, Inc. (for international card payments). These providers process card data under their own privacy policies.
Messaging providers: Meta Platforms, Inc. and WhatsApp LLC (for WhatsApp communications), as well as email and SMS providers.
Calendar and productivity tools: Google LLC (for Google Calendar integration).
Tax and invoicing: the Chilean Internal Revenue Service (SII), for issuance of electronic fee invoices.
Hosting and infrastructure: cloud infrastructure providers that host the Platform and related databases.
Analytics and operational tools: providers of analytics, customer support, and internal operational tooling.
6.3 With Meta Platforms, Inc. / WhatsApp LLC
When Clients or Users interact with Encuadrado through WhatsApp, message content, phone numbers, and message metadata are processed by Meta Platforms, Inc. and WhatsApp LLC in accordance with their own privacy policies, terms, and applicable policies, including:
Encuadrado is not affiliated with, endorsed, sponsored, or specifically approved by Meta Platforms, Inc. or WhatsApp LLC. We use these services as third-party providers to operate messaging features on behalf of our Users.
6.4 With Judicial or Administrative Authorities
We may disclose personal data to judicial, administrative, or law enforcement authorities when legally required to do so, including in response to court orders, subpoenas, or other valid legal process, or where we determine in good faith that disclosure is necessary to comply with applicable law, protect the rights or safety of Encuadrado, Users, Clients, or the public, or investigate potential violations of our Terms and Conditions. Where legally permitted, we will notify the affected party of such disclosure.
6.5 In Connection With a Corporate Transaction
If Encuadrado is involved in a merger, acquisition, reorganization, financing, or sale of all or part of its assets, personal data may be transferred as part of that transaction, subject to the protections of this Privacy Policy and applicable law.
7. INTERNATIONAL TRANSFERS OF DATA
Some of the third-party service providers we rely on (including Meta, Google, Stripe, and certain cloud infrastructure providers) process personal data outside of Chile, including in the United States and other jurisdictions.
International transfers are carried out in accordance with Article 35 of Law No. 21.719, relying on one of the following safeguards:
Transfers to countries that provide an adequate level of data protection as recognized by the competent authority.
Standard contractual clauses or other binding instruments that ensure adequate protection.
Explicit consent of the data subject, where applicable.
8. DATA RETENTION
We retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations (including tax retention periods under Chilean law), resolve disputes, and enforce our agreements.
In general:
User account data: retained while the User's Profile is active, plus a period of up to five (5) days after termination to allow the User to request an export of their data, after which data is either deleted or anonymized for statistical purposes.
Client booking and session data: retained for the period required by applicable commercial, tax, and health-sector regulations.
Invoicing and tax data: retained for the period required by Chilean tax law (typically six years).
Technical and usage logs: retained for limited periods consistent with security and diagnostic needs.
When retention is no longer required, we delete or anonymize the data in accordance with our internal procedures.
9. COOKIES AND SIMILAR TECHNOLOGIES
The Platform uses cookies and similar technologies to operate correctly, remember preferences, analyze usage, and improve the user experience.
Categories of cookies used:
Strictly necessary cookies: required for core Platform functionality, such as authentication and security.
Functional cookies: remember preferences such as language and time zone.
Analytics cookies: help us understand how the Platform is used.
Marketing cookies: used only where you have given express consent.
You can manage cookie preferences through your browser settings and, where available, through the cookie banner on the Platform. Disabling certain cookies may affect the functionality of the Platform.
10. YOUR RIGHTS
Under Law No. 21.719, you have the following rights regarding your personal data:
Right of access: to obtain confirmation about whether we process your personal data and, if so, to receive a copy.
Right of rectification: to request correction of inaccurate or incomplete data.
Right of cancellation (deletion): to request deletion of your personal data in the cases provided by law (see Section 11 below for the deletion process).
Right to object: to object to the processing of your data in certain cases.
Right to portability: to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller.
Right to limitation of processing: to request that processing be restricted in certain circumstances.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, contact us using the details in Section 13. We will respond within the timeframes established by applicable law.
If the data subject is a Client of a User of the Platform, we may refer the request to the relevant User (who acts as controller for certain categories of data, including sensitive health data) and facilitate its handling.
11. HOW TO REQUEST DATA DELETION
You can request the deletion of your personal data at any time through either of the following channels:
Customer support on our website: visit www.encuadrado.com and open the support button located at the bottom-left corner of any page.
Email: send a deletion request to thomas@encuadrado.com.
To help us process your request efficiently, please include:
Your full name and the email address or phone number associated with your account or booking.
A clear statement that you are requesting deletion of your personal data.
If you are a Client, the name of the Professional you booked with (if applicable), so we can locate the relevant records.
We will acknowledge your request and process it within the timeframes required by applicable law. Please note that certain data may need to be retained to comply with legal, tax, accounting, or regulatory obligations (for example, invoicing records required by Chilean tax law), or to establish or defend legal claims. In such cases, we will delete or anonymize the remaining data at the end of the required retention period.
If the data you want deleted is held by a User of the Platform in their capacity as data controller (for example, clinical records maintained by a healthcare Professional), we may need to coordinate the deletion with that User.
12. SECURITY
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures include access controls, encryption in transit and at rest where appropriate, activity logging, regular backups, and incident response protocols.
We maintain a Record of Processing Activities in accordance with Law No. 21.719.
No method of transmission over the Internet or electronic storage is completely secure. While we work to protect your personal data, we cannot guarantee its absolute security.
In the event of a security incident affecting personal data, we will notify affected parties and the competent authority as required by applicable law.
13. CHILDREN'S PRIVACY
The Platform is not intended for use by children under the age of 13. Users of the Platform (Professionals) must be at least 18 years of age. Clients who book services through the Platform must be at least 13 years of age; minors under applicable law must have the consent of a parent or legal guardian. For services classified as Regulated Verticals (including healthcare), automated messaging and commercial communications delivered through third-party messaging platforms such as WhatsApp may only be directed to individuals 18 years of age or older.
If we become aware that we have inadvertently collected personal data from a child in violation of these requirements, we will take steps to delete that data promptly.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this document and, where changes are material, we will notify you through the Platform, by email, or through other appropriate means with reasonable advance notice.
Your continued use of the Platform after the updated Privacy Policy takes effect constitutes your acceptance of the updated terms.
15. CONTACT US
For any questions, requests, or complaints regarding this Privacy Policy or our processing of personal data, you can contact us:
Email (privacy and legal matters): legal@encuadrado.com
Email (data deletion requests): thomas@encuadrado.com
Customer support: www.encuadrado.com (support button at the bottom-left of any page)
Encuadrado SpA Chilean Tax ID (RUT): 76.927.155-4 Republic of Chile