Legal

Privacy Policy

What we collect, why we collect it, and what you can do about it. Written to be read, not to be survived.

Effective 1 August 2026  ·  ISABEL NAVA SERVICIOS DIGITALES E.I.R.L.  ·  inavastudio.com

Contents

  1. Who we are
  2. What we collect
  3. How we use it
  4. Text messaging (SMS)
  5. Email
  6. Cookies & analytics
  7. Who we share with
  8. International transfers
  9. How long we keep it
  10. Security
  11. Your rights
  12. Children
  13. Changes
  14. Contact us

01Who we are

inava is the trading name of ISABEL NAVA SERVICIOS DIGITALES E.I.R.L., registered in Chile (RUT 78.399.909-9). We design brand identities, brand assets and websites for founders and businesses, including clients located in the United States.

This policy explains what personal information we collect through inavastudio.com and in the course of our work, why we collect it, and what you can do about it. ISABEL NAVA SERVICIOS DIGITALES E.I.R.L. is the data controller responsible for that information.

Detail
Legal entityISABEL NAVA SERVICIOS DIGITALES E.I.R.L. · RUT 78.399.909-9 · Chile
AddressBarros Arana 492, oficina 78, Concepción, Región del Biobío 4030000, Chile
Emailhello@inavastudio.com
Phone+56 9 3232 6400

02What we collect

We only collect information you give us, plus basic technical data your browser sends automatically. We do not buy contact lists, and we do not obtain your details from data brokers or third-party lead vendors.

CategoryExamplesWhere it comes from
Contact detailsName, email address, mobile phone number, company nameForms on our site; discovery calls; email you send us
Project informationGoals, budget range, timeline, existing brand materials, website URLsEnquiry and booking forms; project communications
Consent recordsWhether you ticked the SMS or email consent box, the exact wording shown, timestamp, IP address, and page URLCaptured automatically when you submit a form
Billing informationInvoicing details and payment statusYou, and our payment processor
Technical dataIP address, browser type, device type, pages viewed, referring URLYour browser, automatically

We do not intentionally collect sensitive categories of personal data — health, race, religion, political views, biometric or genetic data. Please don't send them to us.

03How we use it

We do not sell your personal information. We do not use it for automated decision-making that produces legal or similarly significant effects.

04Text messaging (SMS)

If you give us your mobile number and tick the SMS consent box on one of our forms, we may send you text messages about your enquiry, your appointments, and the service you asked about.

The part that matters most

Mobile opt-in information and consent will not be shared with third parties or affiliates for marketing purposes.

No mobile information will be sold, rented, or shared with any third party for marketing or promotional purposes. All of the sharing categories described in section 07 of this policy expressly exclude text messaging originator opt-in data and consent; that information is never shared with any third party except the messaging provider strictly required to deliver the message you asked for.

How we obtain consent

Consent is collected on web forms hosted on our own domain. Directly beneath the phone number field sits a separate checkbox that is unchecked by default and must be ticked by you. Ticking it is never required to submit the form and is never a condition of purchasing anything from us. The checkbox reads:

"I agree to receive text messages from inava about my enquiry and appointments. Message frequency varies. Message and data rates may apply. Reply STOP to opt out, HELP for help. See our Privacy Policy and Terms."

With every record we store the timestamp, IP address, page URL and the exact consent wording that was displayed to you. We never add a number to our messaging list from a purchased, rented or third-party list.

What we send

TypeExample
ConfirmationsConfirming a discovery session you booked
RemindersA reminder the day before your call
Follow-upA proposal or answer relating to the service you enquired about

Frequency, cost and how to stop

Mobile carriers are not liable for delayed or undelivered messages.

05Email

We send two kinds of email: transactional messages relating to your enquiry, project or invoices, and optional updates you specifically subscribed to.

Every non-transactional email carries a working unsubscribe link and our postal address. Unsubscribes are processed immediately and always within 10 business days, as required by the US CAN-SPAM Act. Unsubscribing from updates does not stop essential messages about work we are actively doing for you.

06Cookies & analytics

Our site uses a small number of cookies and similar technologies: those strictly necessary to make the site work, and analytics cookies that tell us in aggregate which pages are visited and how the site performs.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may break parts of the site. We do not use cookies to build advertising profiles about you across unrelated websites.

07Who we share with

We share personal information only with service providers who help us run the business, and only to the extent they need it. Each is bound by contract to protect it and may not use it for their own purposes.

ProviderPurpose
NeonDatabase hosting for our client records
Vercel & CloudflareWebsite and application hosting, DNS, security
ResendSending transactional and subscribed email
TelnyxSending and receiving SMS
Meta PlatformsWhatsApp Business messaging, where you use that channel
InngestScheduling and running our internal workflows
Payment processorTaking and reconciling payments

We may also disclose information where we are legally required to, or to establish, exercise or defend legal claims. If our business is ever sold or restructured, information may transfer to the acquirer under the protections of this policy.

We never sell your personal information, and we never share mobile opt-in data or consent with anyone for marketing purposes.

08International transfers

We operate from Chile and many of our clients and service providers are in the United States and the European Union. Your information may therefore be stored or processed outside your country, including in the United States. Where we transfer personal data internationally we rely on appropriate safeguards, such as standard contractual clauses with our providers.

09How long we keep it

InformationKept for
Enquiries that don't become projects24 months from last contact
Client and project recordsDuration of the engagement, then 6 years
Invoices and accounting recordsAs required by Chilean tax law
Consent and opt-out recordsKept indefinitely — we must be able to prove consent and to honour an opt-out permanently

10Security

Data is encrypted in transit using TLS and at rest by our hosting providers. Access is limited to people who need it, protected by strong unique passwords and multi-factor authentication wherever a provider supports it. Passwords we store are hashed, never kept in readable form.

No system is perfectly secure. If a breach ever affects your personal data and poses a risk to you, we will notify you and the relevant authority without undue delay.

11Your rights

Depending on where you live you may have the right to:

Chilean residents have these rights under Law 19.628 and Law 21.719. Residents of the EU and UK have them under the GDPR. California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them — and note that we do not sell or share personal information as those terms are defined there.

To exercise any right, email hello@inavastudio.com. We respond within 30 days and never charge for a first request.

12Children

Our services are for businesses and are not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

13Changes

We may update this policy as our business or the law changes. The effective date at the top always reflects the current version. If a change materially affects how we use your information, we will tell you by email or by a notice on the site before it takes effect.

14Contact us

Questions about this policy, or about anything we hold on you:

Emailhello@inavastudio.com
Phone+56 9 3232 6400
PostISABEL NAVA SERVICIOS DIGITALES E.I.R.L., Barros Arana 492, oficina 78, Concepción, Región del Biobío 4030000, Chile

This document is provided for transparency and compliance purposes. It is not legal advice, and ISABEL NAVA SERVICIOS DIGITALES E.I.R.L. is not a law firm. Have a qualified lawyer in your jurisdiction review it before you rely on it.