Last updated: [date]

At AlmaBrands, we respect the privacy and protection of the personal data of our clients, prospective clients, suppliers, collaborators, and website users.

This Privacy Policy explains what information we may collect, how we use it, with whom we may share it, how long we may retain it, and what rights data subjects may exercise.

1. Data Controller

The controller responsible for processing personal data is:

Alma Brands / [full legal name]
Tax ID (RUT): [RUT]
Address: [address, district, region, Chile]
Email: [privacy or contact email]

Hereinafter, “Alma Brands,” “we,” “us,” or “our.”

2. Applicable Law

Alma Brands will process personal data in accordance with applicable Chilean privacy and personal data protection legislation and any other relevant regulations.

Alma Brands will endeavor to keep its procedures and policies up to date with any applicable regulatory changes.

3. What Personal Data May We Collect?

Depending on your relationship with Alma Brands and how you interact with us, we may collect the following categories of information:

Identification and contact data

For example:

• first and last name;
• email address;
• phone number;
• company or organization;
• job title;
• city or country;
• other information voluntarily provided through forms or communications.

Information related to business inquiries

We may process information related to:

• quote requests;
• inquiries;
• projects;
• services of interest;
• information provided to prepare a proposal;
• history of business communications.

Contractual and administrative data

Where a business relationship exists, we may process information related to:

• contracts;
• purchase orders;
• invoicing;
• payments;
• contact details of representatives;
• information needed to provide our services.

Automatically collected information

When you visit our website, we may collect technical information such as:

• IP address;
• browser;
• operating system;
• device type;
• pages visited;
• date and time of access;
• approximate origin of the visit;
• interactions with the site;
• technical identifiers or cookies.

You can find more information in our Cookie Policy.

Communications

If you contact us by email, forms, instant messaging, social media, or other channels, we may retain the content and related information of those communications.

4. How Do We Obtain Data?

We may obtain personal information:

• directly from the data subject;
• through forms on our website;
• by email, phone, or in meetings;
• in the context of a business or contractual relationship;
• through technology providers;
• through cookies or other digital technologies;
• from publicly available sources where their use is legally permitted;
• from companies, clients, or business partners where appropriate and a legitimate basis exists.

5. Purposes of Processing

We may use personal data for the following purposes:

Providing our services

To respond to requests, evaluate projects, prepare proposals, manage business relationships, and deliver contracted services.

Communications

To respond to inquiries, information requests, contact forms, or other communications sent to Alma Brands.

Business management

To manage prospects, business opportunities, client relationships, and proposal follow-up.

Administration and invoicing

To manage contracts, payments, tax documents, collections, and other administrative processes related to our services.

Marketing

Where appropriate, we may use contact details to send news, content, information about our services, invitations, or marketing communications.

Data subjects may request at any time to stop receiving these communications.

Improving our services and website

To gather statistics, analyze site performance, understand how users interact with our platforms, and improve our services and digital experience.

Security

To protect our systems, prevent fraudulent activity, detect security incidents, and maintain the integrity of our digital services.

Legal compliance

To comply with applicable legal, regulatory, tax, judicial, or administrative obligations.

Defense of rights

When necessary, we may use information to exercise or defend our rights or respond to claims.

6. Legal Basis for Processing

Alma Brands will process personal data in accordance with the legal bases or authorizations permitted by applicable law.

As appropriate, processing may be based on, among other grounds:

• the data subject’s consent;
• the existence or performance of a contractual relationship;
• compliance with a legal obligation;
• other grounds permitted by applicable regulations.

Where processing requires consent, it may be withdrawn as appropriate, without affecting the lawfulness of processing carried out beforehand.

7. Required and Voluntary Data

When we request information through a form, we will indicate when certain data is required to process the request.

If the user does not provide the required information, we may be unable to respond properly to the request or provide certain services.

All other data is voluntary.

8. Marketing Communications

Alma Brands may send communications about its services, content, news, invitations, or business opportunities where permitted.

Users may request at any time to stop receiving promotional communications through:

• the unsubscribe mechanism included in the message, where available; or
• a request sent to [email address].

Unsubscribing from marketing communications does not prevent us from sending necessary messages related to an ongoing contractual, administrative, or service relationship.

9. Providers and Third Parties

To carry out our activities, we may engage providers that process information on our behalf or have limited access to certain data.

These providers may include services such as:

• web hosting;
• technology infrastructure;
• email;
• CRM;
• cloud storage;
• forms;
• analytics;
• digital advertising;
• accounting;
• invoicing;
• payment methods;
• technical support;
• communications;
• IT security.

We will endeavor to ensure that these providers use the information solely for the relevant purposes and adopt appropriate security and confidentiality measures.

We may also disclose information when required by law, court order, or a valid request from a competent authority.

Alma Brands does not sell personal data as an activity separate from the provision of its services, unless expressly stated otherwise and a legal basis exists to do so.

10. International Processing or Storage

Some of our technology providers may maintain servers or infrastructure outside Chile.

As a result, certain data may be stored, accessed, or processed from other countries.

Where appropriate, we will endeavor to adopt suitable measures so that such processing is carried out with levels of protection consistent with applicable law and the obligations assumed by Alma Brands.

11. Data Retention

We will retain personal data only for as long as necessary to fulfill the purposes described in this policy.

To determine the retention period, we may consider:

• the duration of the business relationship;
• the nature of the services provided;
• legal or tax obligations;
• statutes of limitations;
• administrative needs;
• fraud prevention;
• potential claims or disputes.

Once the information is no longer needed, it may be deleted, anonymized, or blocked, as appropriate.

12. Information Security

Alma Brands will adopt reasonable organizational and technical measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.

Nevertheless, no system connected to the Internet can guarantee absolute security, so we cannot ensure that external incidents or unlawful access will never occur.

13. Data Subject Rights

In accordance with applicable law, data subjects may exercise the rights to which they are entitled regarding their personal data.

These may include, as applicable:

• requesting information about the data processed;
• requesting access to their personal data;
• requesting the correction of incorrect, inaccurate, or outdated data;
• requesting the deletion or cancellation of data where appropriate;
• requesting the blocking of certain data;
• objecting to certain processing in cases permitted by law;
• withdrawing consent where processing depends on it.

To exercise any of these rights, you may write to:

[privacy email address]

The request must contain sufficient information to identify the requester and clearly understand the right they wish to exercise.

We may request reasonable information to verify the requester’s identity before providing, modifying, or deleting personal information.

14. Data of Minors

Our website and services are not specifically directed at children.

We do not intentionally seek to collect personal data from minors without the appropriate authorizations.

If we become aware that data from a minor has been collected under inappropriate circumstances, we will take reasonable steps to review and, where appropriate, delete such information.

15. Cookies and Similar Technologies

Our website may use cookies and other similar technologies.

These tools allow us to ensure the site works properly, remember preferences, gather statistics, and, where appropriate, measure marketing activities.

You can find the details in our Cookie Policy.

16. External Links and Services

Our site may include links to websites, social media platforms, or other services operated by third parties.

Alma Brands does not control the privacy policies or practices of such third parties.

We recommend reviewing their respective policies before providing any personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy when there are changes to our services, internal processes, technologies used, or applicable law.

The most recent version will be available on our website and will indicate its last updated date.

When changes are significant, we may use additional means to inform users.

18. Contact

If you have questions, requests, or concerns about this Privacy Policy or the processing of your personal data, you can contact us at:

AlmaBrands / [full legal name]
Tax ID (RUT): [RUT]
Email: almabrands@almabrands.com
Address: [address, district, region, Chile]