Privacy Policy

Last updated: July 2026

This privacy policy covers exclusively the corporate website vario.lat. For the personal data of visitors and of people who contact us through this site, vario acts as data controller under Law 21.719 on personal data protection (Chile), the GDPR (EU) and the LGPD (Brazil).

Data processing within the vario platform (our customers' corporate communications) is excluded from this document: it is governed by the data processing agreement (DPA) signed with each customer organization.

Data we collect on this site

• Contact data: name, corporate email, company and message, when you submit the contact form.
• Visit origin: UTM parameters and referrer page, stored in sessionStorage for the session to attribute the origin of your inquiry.
• Marketing browsing data: only if you accept the marketing category in the cookie banner (HubSpot's hubspotutk cookie).
• Anti-spam technical data: signals processed by Cloudflare Turnstile to tell human visitors from bots on the contact form.
• Incomplete contact forms: if you enter a valid email in the contact form but don't submit it, we may still contact you at that email to follow up on your inquiry.

Purposes and legal bases

• Responding to your contact request: pre-contractual measures taken at your request, and your consent when submitting the form.
• Following up on incomplete forms: legitimate interest in responding to an inquiry you initiated yourself by entering your email.
• Preventing spam and protecting the site: legitimate interest in the security of the service.
• Measuring site traffic: legitimate interest, through cookieless analytics that collects no personal data.
• Marketing and interaction analysis (HubSpot): your consent, which you can withdraw at any time from "Cookie preferences".

Recipients and international transfers

We share data only with the providers that run this site: Cloudflare (hosting, Turnstile and Web Analytics), HubSpot (lead/CRM management) and Resend (transactional email). These providers act as processors under our instructions; this may involve international data transfers, covered by contractual safeguards such as standard contractual clauses.

Data retention

We keep contact and lead data in our CRM while there is an active business relationship or interest in our services, or until you request its erasure. Your consent preference is stored in your browser's localStorage until you change or delete it.

Your rights

You may exercise the rights of access, rectification, erasure, objection, portability and blocking recognized by Law 21.719, the GDPR and the LGPD by writing to [email protected]. You also have the right to lodge a complaint with the competent authority: the Personal Data Protection Agency in Chile, the ANPD in Brazil, or your country's supervisory authority in the EU.

Cookies and similar technologies on vario.lat

This section covers the marketing website (vario.lat) — not the product dashboard, which is governed by your organization's DPA. We use cookies and similar browser local-storage technologies (localStorage/sessionStorage), grouped into three categories:

• Essential: Cloudflare Turnstile, used to prevent spam on the contact form; and localStorage to remember your consent preference and sessionStorage to record your visit's origin (UTM/referrer) for the session. Always active — required for the site to function.
• Cookieless analytics: Cloudflare Web Analytics, which measures traffic without setting any cookie or collecting personal data. Always active.
• Marketing (requires your consent): HubSpot, used to understand how visitors interact with the site and to link form submissions to their browsing session. It sets the hubspotutk cookie and only loads if you accept it in the cookie banner.

You can change your decision at any time from the "Cookie preferences" link in the site footer.

Contact

Data Protection Officer: [email protected]