Privacy Policy

1. Data We Collect

To manage a booking, we collect only:

• Full name
• Email address
• Phone number
• Date, time and service booked
• Optional notes (do not include sensitive data)
• Consents given and versions of accepted documents

We do not collect sensitive data such as health information, racial origin, political opinions, sexual life, biometric data, or financial information.

2. Purpose of Processing

Data is used exclusively to:

• Manage and confirm the booking
• Send reminders (only with consent)
• Comply with legal obligations

3. Legal Basis

Processing is based on the performance of a contract (service booking) and on the explicit consent of the data subject for reminder communications.

4. Data Sharing

Data may be processed by:

• Hosting provider (Vercel / Supabase) — for secure storage
• Transactional email services — for confirmations and reminders with consent
• WhatsApp/SMS — only if the client gave explicit consent

We do not sell or share data with third parties for commercial purposes.

5. Retention Period

Data is retained for as long as necessary for business management and for the time required by applicable regulations. Upon a deletion request, we anonymize data within 30 business days.

6. Your Rights

Under Law 21.719, you have the right to:

• Access your data
• Rectify incorrect data
• Request deletion of your data
• Object to processing

To exercise your rights, visit our data deletion page or write to privacidad@citaqui.cl

7. Security Measures

We implement in-transit encryption (HTTPS), secure authentication, per-business access control, and audit logs. Data is stored on servers with backups and restricted access.

8. Contact

For privacy inquiries: privacidad@citaqui.cl