Privacy policy
What data this site handles, why, who we share it with, and how to exercise your rights.
Updated 2026-10-16
Who is responsible
The controller of the personal data handled on this site is Loopback SpA, RUT 76.568.396-3, El Director Nº 6000, office 207, Las Condes, Santiago, Chile.
- Legal representative: Carlos Becerra
- Email for questions and requests: [email protected]
- Version of this policy: 1, dated 15 October 2026
What it covers
This policy covers the website www.loopbackpro.com and the messages you send us through it.
It does not cover your organisation's data that we handle during an engagement, such as the configuration of your Microsoft 365 tenant. There we handle data on your organisation's behalf, as a processor, under the engagement contract. Our assessments read that configuration read-only.
What data we handle and why
Contact form
If you write to us through the form, we handle:
- your name
- your email address
- your company name, if you give it (optional)
- your message
- the record that you ticked the consent box, with its date
Why: to answer your enquiry and continue the conversation you started.
Legal basis: your consent, given by ticking the box before sending. If you do not give it, the form is not sent; you can email us directly at the address above.
Server logs
Like every website, our server records each request it receives: IP address, date and time, page requested, response code, referring page and browser.
Why: to keep the site running, detect abuse and keep it secure.
Legal basis: our legitimate interest in keeping the site secure. You can object by writing to us.
Analytics, only if you accept it
If you accept it in the cookie notice, we use Google Analytics, by Google, to learn how the site is used. If you do not accept it, that tool is not loaded. Declining does not limit your use of the site. If you accept, Google Analytics stores the cookies _ga and _ga_<identifier> in your browser; if you later decline, we delete them.
Legal basis: your consent. You can withdraw it at any time from the cookie preferences link, at the foot of every page.
Your cookie choice
We store your answer to the cookie notice in your browser, so we do not ask again on every page. That record holds only your choice and does not leave your browser.
We use no other cookies. We make no automated decisions and build no profiles from this site's data.
Where the data comes from
All the data comes from you, when you visit the site or write to us. We do not obtain it from other sources.
Who we share it with
We do not sell your data. We share it only with the providers we need to run the site, who handle it on our behalf:
- SMTP2GO, which sends the form's messages by email
- Microsoft 365, which hosts our mailbox
- Cloudflare, which delivers the site and protects it from attacks
- Microsoft Azure, where the Loopback server hosting the site runs, in its Chile Central region, in Chile
- Google, for Google Analytics, only if you accept analytics
We will also disclose data where a law requires it.
Data outside Chile
Some of these providers may handle data outside Chile. [Pending: each provider's country, whether it offers an adequate level of protection and, if not, the contractual safeguards that support the transfer.]
How long we keep it
- Contact form messages: 12 months from our last reply, unless the conversation becomes an engagement
- Server logs: [period pending]
- Your cookie choice: until you change it or clear your browser data
How we protect it
We ask only for the data we need to answer you. The site is served over an encrypted connection (HTTPS). Only the Loopback staff who handle enquiries can read the messages. The server keeps no copy of the messages: it only sends them by email. To limit abuse, it keeps for one hour a keyed hash derived from your IP address, from which the address cannot be recovered.
Your rights
You can ask us, free of charge, for:
- access: to know whether we handle your data, and to receive a copy
- rectification: to correct inaccurate, outdated or incomplete data
- erasure: to delete your data
- objection: to stop handling it for a given purpose
- portability: to receive the data you gave us in a common electronic format
- blocking: to suspend its handling temporarily while we resolve a request
You can also withdraw your consent at any time. Withdrawing it does not affect what we did with it before.
How to exercise them
Email [email protected] and include:
- your name, and your representative's name if one acts for you
- an email or postal address for our reply
- the data or the processing your request concerns
- for rectification, the change you ask for; for erasure or objection, the reason
We may ask you to confirm your identity. We will reply in writing.
Time limits
Today Chile's Law 19,628 applies: we will reply within two business days. When the amendments made by Law 21,719 take effect (on 1 December 2026, unless a law changes that date), we will acknowledge your request and reply within 30 calendar days, which we may extend once by another 30. If you ask for a temporary block, we will reply within two business days.
If we do not reply or we refuse
Today, if we do not reply within two business days or we refuse your request, you may apply to the civil court (juez de letras en lo civil) of our domicile.
Once Law 21,719 takes effect, you may complain to Chile's Personal Data Protection Agency (Agencia de Protección de Datos Personales) within 30 business days of our refusal or of the end of our time to reply.
Changes to this policy
If we change this policy, we will publish the new version here with its date. For any question, write to us.