Privacy policy
This site has no newsletter and no accounts. It has three forms: the meeting calendar on the contact page, where what you type reaches me only if you book, the free Ley 21.719 website scan, and the contact form on medical.diegodaly.com. I keep what you write in the last two only if you use them. For everyone else, the short version: a cookieless counter tells me how many people came, and Google Analytics tells me more than that only if you agree to it.
Who is responsible
Diego Daly López, an independent professional based in Santiago, Chile. For anything on this page, including exercising your rights, write to privacidad@diegodaly.com.
What I collect, and why
Apart from what you type when you book a meeting or use a form, only what arrives by itself. I do not buy data or combine it with other sources.
| Data | Purpose | Legal basis |
|---|---|---|
| Cookieless measurement | Knowing how many people visit | Legitimate interest |
| Google Analytics | Understanding which pages get read | Your consent |
| Technical logs (IP, browser, time) | Serving the site and protecting it | Legitimate interest |
| Language preference | Remembering English or Spanish | Necessary for the service |
| Messages you send me | Replying to you | Handling your request |
| Meeting booking: name, email, the time you pick and anything you add to the booking | Holding the meeting and sending you its confirmation | Handling your request |
| Scan form: name, surname, email, company, the website you scan and its result, and the campaign link you arrived from | Sending you the result and contacting you about it | Your consent, given with the box on the form |
| Contact form on medical.diegodaly.com: name, email and/or phone, whether you prefer WhatsApp or a call, and the campaign link you arrived from | Answering your request about a website | Your consent, given with the box on the form |
| Detailed report purchase: amount, payment status, Mercado Pago's payment ID and the tax document you chose; for a factura, the company's RUT, legal name, line of business and address | Charging for the report, delivering it and issuing its boleta or factura | Performance of the contract you enter into, and the tax law that requires the document |
The site runs over HTTPS and I take reasonable security measures. I do not sell or share data for advertising, there is no profiling and no automated decision-making, and I do not intentionally collect sensitive data or data from children.
Who else is involved
These companies process data on my behalf.
| Provider | What they handle | Where |
|---|---|---|
| Vercel | Hosting, technical logs and the cookieless measurement | United States, with edge servers in other countries |
| Google Analytics, only if you accepted it | United States | |
| Cal.com | The meeting calendar, if you book a call | United States |
| Supabase | The database that holds the forms and payment records | Brazil (São Paulo) |
| Resend | Emailing me when someone uses the contact form on medical.diegodaly.com | United States |
| Mercado Pago | Payment for the detailed report, if you buy it. Card details go only to them, never to me | Under its own privacy policy |
Some service providers may process data outside Chile. Where applicable, these transfers are handled according to the provider's applicable privacy terms and data-protection mechanisms. If you email or message me, your message also passes through your own provider. I will disclose data if a court or a competent authority lawfully requires it.
How long it is kept
- Google Analytics: 14 months.
- Technical logs: kept briefly by Vercel under its own policy.
- Messages: for as long as the conversation is live, and afterwards only if there is a reason to keep them.
- Meeting bookings: in my Cal.com account for as long as the conversation is live, and afterwards only if there is a reason to keep them.
- Scan form: 12 months if you do not buy anything. If you buy the report, for as long as tax law requires me to keep the payment record.
- Contact form on medical.diegodaly.com: 12 months if we do not end up working together.
- Your answer to the banner: in your browser until you change or clear it.
Your rights
You can ask me for access, rectification, deletion, objection, portability or blocking, and withdraw your consent at any time. All of it free, by writing to privacidad@diegodaly.com. I reply within 30 calendar days.
One practical note: analytics data is pseudonymous and not tied to your name, so the fastest route is usually to clear the cookies yourself through the preferences link in the footer.
From 1 December 2026, you may also complain to Chile's Agencia de Protección de Datos Personales. If you are in the European Economic Area or the United Kingdom, you can complain to your national data protection authority.
Changes and applicable law
Every version is dated and numbered at the top of this page. If a change affects what you agreed to, the cookie banner asks again rather than assume your old answer still stands.
Chilean law applies, in particular Ley 21.719 on the protection of personal data, in force from 1 December 2026: consent under art. 12, the other legal bases under art. 13, and the duty to inform under art. 14 ter. Where applicable to visitors in the European Economic Area, the GDPR also applies.