Draft version — August 28, 2026
1. Who we are
This Privacy Policy applies to the website cpastmargarets.cl,
operated by the Centro de Padres St Margaret's (St
Margaret's School Parents' Association), Chilean tax ID (RUT)
71.850.500-3, address at Saint Margaret 150, Lomas de
Montemar, Concón, Región de Valparaíso, Chile. The Parents' Association is
responsible for the personal data collected through this site.
If you have any questions about this policy or your data, write to us at
cpa@stmargarets.cl.
2. What this policy covers
It applies to the personal data we collect through:
- The site's contact form (footer and Contact page).
- Subscription to our newsletter/communications (Information page).
- The registration and update form for the CPA's official Register of Members and Parents/Guardians ("Padrón"), used to issue credentials and manage partner discounts (Convenios) and other benefits.
- The CPA's online store, once it is published and operating.
It does not apply to third-party sites this site may link to (for
example, Instagram or the school's own site, stmargarets.cl), which have
their own privacy policies.
3. What information we collect
- Contact form: your name, email address and the message you write.
- Newsletter: your email address, the date you subscribed, and the fact that you accepted this policy.
- Parent/Guardian and family registration (Padrón): full name, national ID number (RUT), email address, phone/WhatsApp number, guardian status (primary/alternate), and the student's grade/level, plus optional information about your business or volunteer work, if you choose to share it.
- Student data: the student's name and grade/level, collected exclusively through the responsible parent or guardian, for grade-assignment, credential-issuance and school-community administration purposes.
- Partnership reviews: if you post a review of a partner business, we store your rating (1 to 5 stars), your comment and the date. It is shown publicly on the Convenios page together with your name and grade, unless you choose to post it anonymously (in which case it appears only as "Parent"). Only parents/guardians validated against the official Padrón may leave reviews, one per partnership; every review is checked before it is published, and you can ask us to remove yours.
- Online store (once active): name, email, phone number and your order details. We never receive or store your card number — payment is processed directly on Transbank's own platform (Webpay Plus), outside our site.
- Automatic technical data: IP address, solely to prevent spam and abuse of our forms (for example, limiting how many messages can be sent per hour from the same address). We do not use this to identify you or for advertising purposes.
- Consent record: whenever you tick a checkbox to accept this policy or a specific authorization (newsletter, credential registration, Padrón), we keep, for security and to be able to demonstrate that consent was actually given if ever required to, the date and time, your connection's IP address, an approximate city-level location derived from it, your browser's technical identifiers, and the exact status of each checkbox at that moment.
- Internal, aggregate site statistics: which pages are visited, how long a visit lasts, how many clicks it includes, and an approximate, city-level location resolved from your IP address (never your exact address). This is used only for internal reports visible to the Parents' Association administrator (how many people visit the site, which pages are most used), is never sold, shared with advertisers, or used to build a profile that identifies you individually, and is not linked to any account or contact data you may separately give us through a form.
We do not collect sensitive data (health, ethnic origin, political or religious affiliation, etc.) through this site.
4. How we use your information
- To answer questions sent through the contact form.
- To send you CPA news and announcements, if you subscribed to the newsletter.
- To process, confirm and follow up on purchases made in the online store.
- To manage the Parents' Association's official register of members (Padrón).
- To issue and validate physical or digital credentials for parents/guardians and students.
- To administer the assignment of partner discounts (Convenios), benefits and community discounts.
- To publish the reviews and ratings parents leave about partner businesses, to help other families.
- To voluntarily publish business information in the CPA's directory of parent-run businesses ("vitrina de emprendedores"), only when express authorization is given.
- To prevent spam, fraud and misuse of the site's forms.
We do not use your data to build automated profiles, and we do not sell or transfer it to third parties for commercial purposes.
5. Legal basis and consent
We process your data because you provide it to us voluntarily by using
our forms, and because it is necessary to answer your inquiry, manage
your subscription, or complete your purchase. For the newsletter, the
credential registration and the Padrón, we ask for your explicit consent
through checkboxes you must tick yourself (never pre-checked) — each
checkbox covers a specific purpose, so accepting one authorization (for
example, receiving benefit offers) never implies accepting another you
did not tick.
6. How long we keep your data
We keep your data for as long as the purpose you gave it to us for
remains active: while you stay subscribed to the newsletter, or for as
long as needed to fulfil your purchase and any related legal obligations
(e.g. accounting). You can request deletion of your data at any time —
see point 10.
7. How we protect your information
The site always runs over HTTPS. Passwords for the internal staff panel
are stored encrypted (never in plain text), access is restricted to
authorized CPA personnel only, and actions taken inside the panel are
logged for auditing. No system is 100% infallible, but we work actively
to keep these protections up to date.
8. Minors
This site is aimed at the parents and guardians of the school community,
not at children or adolescents. We do not knowingly request or collect
personal data directly from minors. Data relating to students (such as
name or grade/level) is collected exclusively through their parents or
legal guardians, strictly for association-related, community and
school-identification purposes. If we become aware that a minor
provided us data directly, without a responsible adult's authorization,
we will delete it.
9. Cookies and similar technologies
The public site does not use advertising or third-party tracking
cookies. Only the internal staff panel, for CPA personnel only, uses a
technical session cookie (needed to keep you securely logged in), which
does not apply to visitors of the public site.
The public site does use a small piece of technical, first-party
session storage (not a persistent cookie — it disappears when
you close the browser tab) to generate the internal, aggregate
statistics described in point 3 above. It does not follow you between
visits, is not shared with any advertiser or third-party tracker, and
is only ever visible, in aggregate form, to the Parents' Association
administrator.
10. Your rights
You may exercise the following rights over your data, at any time and free of charge:
- Access: know what data we hold about you.
- Rectification: correct inaccurate or outdated data.
- Erasure: ask us to delete your data.
- Objection: object to a specific use of your data (e.g. stop receiving the newsletter).
- Portability: request a copy of your data in a format you can take to another provider.
To exercise any of these rights, write to us at
cpa@stmargarets.cl with your name
and the right you want to exercise. We will respond within a reasonable
time.
11. How to unsubscribe from the newsletter
Every email we send you will include a direct unsubscribe link, no need
to write to us. You can also request it by email at
cpa@stmargarets.cl.
12. Security breach notification
If a security incident ever puts your personal data at risk, we commit
to notifying the competent authority and the affected individuals within
the timeframes required by law.
13. Changes to this policy
We may update this policy when our practices or applicable law change.
The date of the current version always appears at the top of this
document. We recommend checking it from time to time.
14. Contact
Centro de Padres St Margaret's — RUT 71.850.500-3
Saint Margaret 150, Lomas de Montemar, Concón, Región de Valparaíso, Chile
cpa@stmargarets.cl
