Privacy policy

1. Data controller

Diosa Soul Spa, with registered address in Viña del Mar, Chile, is responsible for the processing of the personal data we collect through diosasoul.cl. Contact for privacy matters: diosasoulcontacto@gmail.com.

2. Legal framework

We process your data in accordance with Ley N° 19.628 on the Protection of Private Life and, from its entry into force on 1 December 2026, Ley N° 21.719, which regulates the protection and processing of personal data and creates the Agencia de Protección de Datos Personales.

3. What data we collect

Identification and contact details: name, RUT, email address and phone number. Delivery details: address, comuna and region. Order details: pieces purchased, amounts, dates and status. Browsing data: cookies and identifiers, depending on what you accept in the cookie banner. We do not collect or store your card details: the payment is processed directly by Transbank.

4. What we use it for and on what legal basis

To manage your order, the delivery and the issuing of your electronic boleta (performance of the contract). To comply with legal, tax and consumer protection obligations (legal obligation). To send you news and launches, only if you have agreed to receive them (consent, which you can withdraw at any time). To use analytics and marketing cookies, only if you accepted them in the banner (consent). To protect the site and prevent fraud and abuse (legitimate interest).

5. Who we share your data with

Only with those who need to process it in order to provide you with the service: Transbank (payment processing), the courier company (delivery), our electronic invoicing provider (issuing the boleta with the SII), our email and website hosting providers and, only if you accepted marketing cookies, advertising platforms such as Meta. We never sell your data. When a provider is based outside Chile, we require adequate guarantees of protection.

6. How long we keep it

Order and boleta data is kept for the periods required by Chilean tax legislation (generally 6 years). Data used for commercial communications is kept until you withdraw your consent. Cookie preferences are stored in your browser and you can change them whenever you like.

7. Your rights

You can request access to your data, its rectification, its deletion or cancellation, object to its processing, request its portability and ask for it to be blocked, under the terms of the law in force. To exercise these rights, write to us at diosasoulcontacto@gmail.com stating your name and the right you wish to exercise; we will reply within the legal timeframes. If you feel we have not responded adequately, you can complain to the Agencia de Protección de Datos Personales once it is up and running.

8. Cookies

We use essential cookies so the shop works: your basket and your session. Analytics and marketing cookies are only activated if you accept them in the banner. You can change your decision at any time by clearing the cookies in your browser; the banner will ask you again.

9. Minors

Our site is not aimed at under-18s and we do not knowingly collect data from minors. If you believe a minor has given us their data, write to us and we will delete it.

10. Security

We apply reasonable technical and organisational measures to protect your data: encrypted connections (HTTPS), restricted access to information and providers that meet security standards. Payment is processed on Transbank's systems.

11. Changes to this policy

We may update this policy. We will publish the current version on the site along with its date and, if the change is significant, we will let you know and, where appropriate, ask for your consent again.

12. Contact

For any questions about this policy or about your data: diosasoulcontacto@gmail.com