Corporate website privacy
Privacy Policy
This policy describes personal data processing associated exclusively with A&K’s corporate website. It follows a simple principle: information should not be collected merely because it is technically possible, but only when it is appropriate, relevant, and necessary for an explainable purpose.
Last updated:
1. Controller and contact
A&K Soluciones Integrales SpA is responsible for the corporate website available at ayksolucionesintegrales.cl and for personal data it receives directly through the contact channels listed on this website.
Until A&K enables a dedicated privacy channel, questions and requests concerning personal data may be sent through the current contact channels:
Email: ayksolucionesintegralesspa@gmail.com WhatsApp: +56 9 4136 2783 (opens in a new tab)2. Scope and product separation
This policy applies to A&K’s corporate website and to communications a person chooses to initiate from it. It is not the comprehensive privacy policy for Loyalty and Win or POS / Inventory.
Loyalty and Win and POS / Inventory are technically independent products developed by A&K. Each product may have its own terms and policies based on its features and processing activities. Product-specific documentation will govern the relevant product operations where applicable.
3. Data and technologies used
Voluntary contact
The website has no forms, accounts, comments, or subscriptions. If a person contacts A&K by email or WhatsApp, A&K may receive the data that person chooses to include: email address or telephone number, name, company or role, message content, and attachments, if any are sent.
Theme preference
The website stores the light or dark theme preference in the browser’s local storage (localStorage) under the ayk-theme key. The stored value is only light or dark; the website code does not send it to A&K or use it to identify or track a person.
Cookies, analytics, and advertising
The current website code does not set cookies or implement analytics, advertising pixels, profiling, or tracking technologies. A cookie banner is therefore not displayed. This decision must be reassessed if the website technologies change.
Technical infrastructure logs
The website is static and its frontend code exposes no logs to visitors. The infrastructure that ultimately hosts it may generate standard technical logs—such as IP address, user agent, date, and requested resource—to deliver and protect the service. A hosting provider has not yet been selected; A&K must assess and document its conditions before publication or when they change.
4. Purposes and lawful basis
Responding to and managing requests
Data sent voluntarily is used to understand and respond to the enquiry and to manage the requested information or conversation. Depending on the nature of the contact, the applicable basis may be steps requested by the data subject before entering into a contract, performance of a contractual relationship, consent, or another lawful basis recognized by applicable law.
Requested commercial communications
A&K may provide information about its solutions when a person requests it or when necessary to continue a conversation they initiated. The website does not implement automated marketing, distribution lists, or profiling.
Operation and security
When technical data must be processed to operate or protect the website, A&K must determine and document the applicable basis in light of the provider, context, necessity, and individuals’ rights. A single legal basis is not presumed for every processing activity.
5. Principles and data minimisation
A&K approaches processing through the principles of lawfulness and fairness, purpose limitation, proportionality, data quality, accountability, security, transparency, information, and confidentiality, together with data protection by design and by default.
A&K seeks not to request categories of data that are unnecessary to answer an enquiry. People should not send sensitive data, credentials, financial information, or third-party data unless indispensable to the request and they are authorised to disclose it.
6. Retention
Data will be retained only for as long as needed to fulfil the purpose that justified its processing and, afterwards, for periods that may be necessary to comply with legal obligations or to establish, exercise, or defend rights, where applicable.
When data is no longer needed, it will be deleted or anonymised as appropriate. This policy does not set a single retention period because duration depends on the nature and context of each communication.
7. Security and confidentiality
A&K is committed to applying and reviewing reasonable technical and organisational measures appropriate to the risk, aimed at protecting the confidentiality, integrity, and availability of information and preventing unauthorised access, alteration, loss, or processing.
No system can guarantee absolute security. Measures are therefore assessed according to the nature, scope, and risks of the processing, without promising invulnerability.
8. Third parties, links, and external services
WhatsApp and email
The website provides links that open WhatsApp or the person’s chosen email application. It embeds no widgets or scripts from those services. A&K’s temporary mailbox uses Gmail; when an email is sent, both the sender’s email provider and A&K’s provider are involved. These external services’ terms and policies also apply, and A&K does not control their independent processing.
Loyalty and Win and POS / Inventory
Links to these products lead to domains outside the corporate website. Visiting those destinations means leaving ayksolucionesintegrales.cl and is subject to the information and policies available for each product.
Processors acting for A&K
The current code integrates no analytics, advertising, form, or remote-font providers. If A&K adds a provider that processes data on its behalf, it must assess the provider’s role, necessity, instructions, security measures, and contractual terms, and update this policy where appropriate.
9. International transfers
The website is not configured to send data to analytics or advertising services. However, external services used for communication—such as WhatsApp, Gmail, or the person’s email provider—may process information in other countries under their own policies.
Because the final hosting provider has not been configured, A&K must assess before publication whether its operation involves international transfers and, if so, evaluate the relevant basis, safeguards, and information under applicable law. This policy does not presume contractual safeguards that have not been verified.
10. Individual rights
Individuals may request access to their data, correction of inaccurate or incomplete data, deletion, and objection where applicable. Portability and restriction may be exercised when their legal requirements are met. Where processing is based on consent, consent may be withdrawn without affecting the lawfulness of processing carried out before withdrawal.
A request may be sent through the channels listed in section 1. To protect the person and locate the information, A&K may request only the details needed to verify identity, representation, and the scope of the request. Requests will be handled under the law in force at the relevant time.
11. Children and adolescents
The corporate website is not specifically directed at children or adolescents and does not request minors’ data. If a minor uses an external channel to contact A&K, processing will be assessed in light of their age, the nature of the request, and applicable legal requirements.
12. Law and policy updates
This policy considers Law No. 19,628 currently in force and the framework introduced by Law No. 21,719, scheduled to enter into force on December 1, 2026. This reference is not a statement of certification or absolute compliance.
A&K may update this policy if website features, processing activities, providers, or applicable laws change. The published version will show its last-updated date; material changes will be communicated by a reasonable method appropriate to their nature.