Privacy Policy

Effective Date: 02/06/2025

1. Introduction
 Welcome to Office SpA (“we,” “our,” or “us”). We are committed to protecting your personal data and your privacy. We comply with various data protection laws worldwide, including Mexico’s LFPDPPP, the UK’s Data Protection Act, and New Zealand’s Privacy Act, among others, to ensure comprehensive global coverage. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://innerumbra.com, in compliance with GDPR, CCPA, CalOPPA, PIPEDA, Australia’s Privacy Act, LGPD, PDPA, Argentina’s Personal Data Protection Law, POPIA (South Africa), FADP (Switzerland), and APPI (Japan).

2. Information We Collect
 We may collect the following types of personal information:

  • Personal Identification Information: Name, email address, phone number, billing address, payment method, etc.
  • Technical Information: IP address, browser type, browser version, operating system.
  • Usage Data: Pages visited, time spent on pages, clickstream data, unique device identifiers, and other diagnostic data.
  • Cookies and Tracking Technologies: For analytics and advertising purposes.
  • Payment Information: When making purchases, we collect payment details through third-party payment processors such as PayPal and MercadoPago. This may include billing address, payment method, transaction details, and other related information.

Usage Data is collected automatically when using the Service and may include information such as your device’s Internet Protocol address (IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When you access the Service via a mobile device, we may collect certain information automatically, including but not limited to the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers, and other diagnostic data.

We may also collect information that your browser sends whenever you visit our Service or when you access the Service via a mobile device.

3. How We Use Your Information
 We use your information for the following purposes:

  • To provide, operate, and maintain our services.
  • To process payments and manage transactions securely through third-party providers like PayPal and MercadoPago.
  • To improve, personalize, and expand our website.
  • To understand and analyze how you use our website.
  • To communicate with you, including customer support.
  • To comply with legal obligations.
  • To detect, prevent, and address security issues, fraud, and other illegal activities.
  • To fulfill our contractual obligations as data controllers and processors where applicable.

4. Legal Basis for Processing (GDPR, LGPD, PDPA, POPIA, FADP, APPI Compliance)
 We process personal data under the following legal bases:

  • Consent: When you give us permission.
  • Contract: To fulfill contractual obligations.
  • Legal Obligation: To comply with legal requirements.
  • Legitimate Interests: For purposes that do not override your rights.
  • Vital Interests: To protect your vital interests or those of another person.
  • Public Interest: For tasks carried out in the public interest or in the exercise of official authority.

5. Your Rights (GDPR, CCPA, PIPEDA, Australia’s Privacy Act, LGPD, PDPA, Argentina’s Law 25.326, POPIA, FADP, APPI)
 Depending on your location, you have the following rights:

  • Access: Request access to your personal data.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your data.
  • Objection: Object to processing based on legitimate interests.
  • Data Portability: Receive a copy of your data.
  • Opt-Out (CCPA, LGPD, POPIA): Opt-out of the sale or sharing of your personal information.
  • Restriction: Request to restrict the processing of your data (PDPA).
  • Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights.
  • Right to Lodge a Complaint: File a complaint with a data protection authority if you believe your rights have been violated.

To exercise your rights, please contact us at [email protected].

6. Sharing Your Information
 We do not sell or rent your personal information. We may share data with both domestic and international third parties when necessary to provide our services. When data is shared across borders, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs), or other legally approved mechanisms to ensure the protection of your personal information in accordance with applicable data protection laws.

  • Service providers and partners who assist in operations, such as Google Analytics, Facebook Pixel, TikTok Pixel, WooCommerce, Instagram Analytics, X, etc.
  • Payment Processors: We use third-party services like PayPal and MercadoPago to process payments. Your payment information is provided directly to these processors, and their use of your personal information is governed by their respective privacy policies:
  • Legal authorities if required by law.
  • Business transfers in case of mergers or acquisitions.

7. Data Retention
 We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law. Data retention periods may vary depending on legal, contractual, or operational requirements.

8. Cookies and Tracking Technologies
 We use cookies to:

  • Recognize repeat visitors.
  • Analyze website traffic.
  • Personalize content and ads.

You can manage cookie preferences through your browser settings. For more information, please refer to our Cookie Policy.

9. Data Security
 We implement robust security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. These measures include the use of data encryption (both in transit and at rest), two-factor authentication (2FA) for secure account access, regular security audits, firewall protections, intrusion detection systems, and continuous monitoring of our systems to identify and mitigate potential vulnerabilities. In the event of a data breach that compromises your personal information, we will notify you and the relevant authorities in accordance with applicable laws.

10. International Data Transfers
 Your information may be transferred and maintained on servers outside your country of residence. To ensure the protection of your personal data during such international transfers, we adhere to specific legal frameworks and certification schemes, including the implementation of Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs), and compliance with international agreements where applicable. Additionally, we may rely on adequacy decisions by relevant regulatory authorities and data protection certifications to ensure data security and compliance with global data protection standards. We ensure appropriate safeguards for international data transfers in compliance with GDPR, LGPD, PDPA, POPIA, FADP, APPI, and other applicable laws, including the use of Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs), and other legal mechanisms where required.

11. Automated Decision-Making and Profiling
 We do not use personal data for automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you, without your explicit consent.

12. Children’s Privacy (COPPA, GDPR, LGPD, APPI)
 Our services are not directed to children under 13 (or under 16 in the EU, Brazil, and Japan). We do not knowingly collect personal information from children.

13. Changes to This Privacy Policy
 We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Effective Date.”

14. Contact Us
 If you have questions about this Privacy Policy, contact us at:

Office SpA
 Avenida Uno 142 Local 7, San Felipe, Valparaíso, Chile
 Email: [email protected]

This Privacy Policy complies with GDPR, CCPA, CalOPPA, PIPEDA, Australia’s Privacy Act, LGPD, PDPA, Argentina’s Personal Data Protection Law, POPIA, FADP, and APPI.