Privacy Policy

The data controller for your personal data is Fundación Empresas Indígenas, a private-law legal entity domiciled in Chile. For any query related to this policy, please contact us at:

• Email: contacto@empresasindigenas.org
• Website: empresasi.org

We collect only the data strictly necessary to provide our services. Depending on the interaction channel, this may include:

• Contact / lead form: name, contact method (email or phone), indigenous people (optional), origin flow.
• Business registration: name, RUT (tax ID), business type, region, email, phone, website or social media, service photos, indigenous people of the business or its owner.
• Technical data: partially anonymised IP address (last octets are removed before storage), browser type, date and time of request.

Data about belonging to an indigenous people is sensitive data under Article 2 of Law 19.628 and Article 16 of Law 21.719, as it relates to ethnic origin. Its processing is also guided by the principles of the UN Declaration on the Rights of Indigenous Peoples. ILO Convention 169 recognises those same rights and obliges the Chilean state to guarantee them; what binds us are the laws cited above and the commitments we make in this policy.

We use it exclusively to: (a) produce aggregated and anonymised statistics to measure the impact of our programmes on the indigenous business ecosystem; (b) list your business in the Indigenous Directory, if you have expressly opted in to publishing it; and (c) tailor the formalisation guide, only in your browser and if you authorise it.

Where it is optional and where it is not: in the formalisation guide, stating your people is entirely optional, and the guide works the same if you omit it. In the Indigenous Business Registry, by contrast, the data is necessary, because it is the very subject of what you are requesting: there is no such thing as an entry in a registry of Indigenous businesses that omits which people the business or its owner belongs to. No one is required to register; whoever chooses to, declares it. This is the principle that governs our whole system: Indigenous identity is not assigned from the outside, it is attested from within.

In both cases, processing is based on your express consent, which is requested separately from the rest of the data and which you may revoke at any time by writing to us. Please note that revoking consent for this data means withdrawing your entry from the Registry, since without it the entry loses its purpose; the Foundation's other services remain available to you.

We will never share this data with third parties for commercial, advertising, or discriminatory purposes.

We process your data for the following purposes:

• Handle your request for information, formalisation, or certification.
• List your business in the Indigenous Directory (only if you explicitly authorised it).
• Send communications about programmes, events, or resources relevant to your business (only if you authorised it).
• Produce impact statistics for the indigenous business ecosystem (anonymised data).
• Comply with legal obligations and prevent abusive use of the service.

The processing of your data is based on the following legal grounds:

• Consent: for sending communications, directory publication, and processing of sensitive ethnic-origin data.
• Performance of a contract or pre-contractual steps: to manage your registration and provide the requested services.
• Legitimate interest: for service security, abuse prevention, and production of anonymised impact statistics.
• Legal obligation: to retain records required by applicable regulations.

We retain your data for as long as necessary to fulfil the purposes described, not exceeding the following indicative periods:

• Contact and business registration data: while the registration is active and up to 3 years after deactivation.
• Technical data (anonymised IP, logs): 30 days.
• Accounting or legally required records: according to applicable tax and civil regulations (generally 6 years).

To provide the service we work with the following data processors, who act under our instructions and under appropriate contractual safeguards:

• Microsoft Azure (infrastructure): application and database hosting in the Chile/Latin America region.
• Anthropic and Azure OpenAI (artificial intelligence services): the Foundation uses them in its team's internal tools, and Anthropic also automatically selects the news from other outlets shown on the News page. Neither receives the data you enter on this site.

We do not sell or transfer your personal data to third parties for commercial or advertising purposes.

Until August 19, 2026, this site offered an artificial intelligence assistant. It was removed from the site's pages that day, and the service behind it was shut down on September 27, 2026. While it operated, messages were sent to Anthropic to generate responses and to Azure OpenAI to search the Foundation's documents. The Foundation did not keep any conversation.

Some of our processors (Microsoft) operate on servers located outside Chile, primarily in the United States. These transfers are carried out under standard contractual clauses and with the safeguards required by Law 19.628 and the forthcoming Law 21.719. Anthropic, which the Foundation uses in its internal tools (section 7), also operates outside Chile.

In accordance with Laws 19.628 and 21.719, you have the following rights over your personal data:

• Access: to know what data we hold about you and how we process it.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request deletion of your data when it is no longer necessary.
• Objection: to object to processing based on legitimate interest.
• Portability: to receive your data in a structured, readable format (Law 21.719).
• Withdrawal of consent: to withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise your rights, write to us at contacto@empresasindigenas.org stating your name, the action requested, and, if possible, the email you registered with. We will respond within a maximum of 30 days.

We use only strictly necessary cookies for platform operation (authenticated session management). We do not use tracking cookies, behavioural advertising, or third-party analytics tools. See our Cookie Policy for details.

We may update this policy to reflect changes in our practice or applicable law. When changes are significant, we will notify you via a prominent notice on the site or by email. The date of the last update will always be indicated at the top of this document.

If you have questions, concerns, or wish to exercise your rights, contact us at contacto@empresasindigenas.org. You may also lodge a complaint with the Council for Transparency or the competent data protection authority in Chile.