Legal
Privacy notice
Last updated: 27 July 2026
This notice explains how Ximitless SpA collects, uses, stores and deletes personal data through this website, and how you exercise your rights. It is written to meet Chilean Law 21.719 on the protection of personal data, which enters full force on 1 December 2026.
1. Who is responsible
Ximitless SpA, a company registered in Santiago, Chile, is the data controller for the personal data described in this notice. Our lawful basis for processing is legitimate interest: we process technical request logs only to keep the site secure, prevent abuse and diagnose faults, and we never use them for marketing, profiling or automated decision-making. Your appearance and language preferences are stored on your own device and are never sent to us. You can reach us at the contact address at the end of this page.
2. What this website collects
This website is a static site. It sets no cookies, runs no analytics, embeds no third-party scripts, fonts or trackers, and has no forms. It does not build a profile of you and it does not share data with advertisers.
We enable standard technical request logs on our hosting provider, Amazon Web Services — IP address, timestamp, requested path, user agent and response code — for security, abuse prevention and diagnostics. We do not use them to build a profile of you. These logs are automatically deleted after 90 days.
3. Language and appearance preferences
If you switch language or appearance, that choice is stored locally in your own browser, as ximitless.locale and ximitless.theme, so the site remembers it on your next visit. Both are functional preferences: they never leave your device and we cannot read them. Clearing your browser storage removes them.
4. Contacting us by email
If you email us, we process the address and the content of your message in order to reply. We keep that correspondence only as long as needed for the matter it concerns, or as long as a legal obligation requires.
5. Our products
This notice covers this website only. Our products — including OurColorings — process personal data under their own separate notices, presented in the product at the point of collection.
6. International transfers
This website is hosted in the United States (AWS, N. Virginia), and content is served from a global delivery network, so requests are handled outside Chile. The request logs described above are therefore stored in the United States. We rely on a lawful transfer mechanism recognised by Law 21.719 and impose contractual data-protection obligations on our providers.
7. Your rights
You have non-waivable rights of access, rectification, deletion, portability, objection and blocking over your personal data. To exercise any of them, write to us at the address below. We will respond within the period the law requires, and we may need to verify your identity first.
8. Security and breaches
This site is served over HTTPS only, with a strict content security policy and no third-party code. If we become aware of a breach affecting personal data, we notify the Agencia de Proteccion de Datos Personales without undue delay and, where the law requires it, within 72 hours of becoming aware, and we notify affected individuals where the law requires it. Detection relies on our hosting provider's own security signals; we do not operate continuous independent monitoring of this static site.
9. Changes
If this notice changes materially we will update the date at the top of this page. Continued use of the site after a change means the updated notice applies.
10. Contact and complaints
For any privacy question or to exercise a right, contact us at the address below. You also have the right to lodge a complaint with the Agencia de Protección de Datos Personales in Chile.