Privacy Policy

Last updated: August 24, 2026

At MAFERDIGITAL LLC we respect your privacy and are committed to protecting the personal information that reaches us. This policy explains what information we handle, why, who we share it with, and what rights you have.

1. Who we are

2. Our role: two different situations

Our responsibilities depend on whose data is involved, so it is important to distinguish two scenarios:

a) Information we handle as the controller

This is the information of people who visit this website or contact us to request information, a proposal, or a service. For this information MAFERDIGITAL LLC acts as the controller, and this policy covers it in full.

b) Client information we handle on our clients' behalf

In the projects we build (websites, chatbots, AI agents, voice agents, automations, CRM integrations), the systems may handle data about leads, customers, patients, prospects, users, conversations, and form submissions that belongs to our client.

In those cases MAFERDIGITAL LLC acts as a service provider or processor, on the client's instructions and on the client's behalf. We do not acquire ownership or control of those databases; the client determines the purposes of the processing and remains responsible for the lawfulness of the data, its privacy notices, and its consents. Where legally required, that relationship is governed by a Data Processing Agreement (DPA) or a specific addendum. This public policy is not, and does not replace, a DPA.

3. Information we collect

This website is primarily informational and has no forms or databases that store your information. We only process personal information when you choose to contact us voluntarily:

• When you email or message us on WhatsApp: name, email address, phone number, and the content of your message.
• Information for proposals: details about your company, project, or requirements that we need in order to prepare an estimate.
• Technical and site-security data: IP address, browser type, device, requests made, technical logs, and information needed to detect malicious traffic and attacks.

4. How we use it

• To respond to your inquiries and stay in contact with you.
• To prepare proposals, estimates, and contracts.
• To deliver and administer the contracted services.
• To invoice and to meet accounting, tax, and legal obligations.
• To maintain the security, availability, and proper operation of the website.

We do not sell personal information — including any exchange of personal information for monetary or other valuable consideration, as "sale" is defined under Florida law. We do not use personal information for targeted advertising, and we do not use it for profiling in furtherance of decisions that produce legal or similarly significant effects. We do not use information we access in client projects for our own marketing, our own prospecting, or to train our own AI models.

5. Legal basis and consent

We process your information based on your consent, given when you contact us voluntarily, on the performance of a contract or pre-contractual steps you request, on compliance with legal obligations, and on our legitimate interest in keeping the website secure. You may withdraw your consent at any time by writing to us.

6. Third parties and service providers

To operate the website we use third-party services that may process technical data:

• Cloudflare — infrastructure, DNS, CDN, hosting, and website security. In connection with that service, Cloudflare may process technical data such as IP address, browser, device, requests, technical logs, and security information, in order to operate the site and detect malicious traffic and attacks.
• Google Fonts — font delivery; may log your IP address when fonts are requested.
• WhatsApp / Meta — if you choose to contact us through that channel, their own privacy policies also apply.

Depending on the project, we may also rely on providers in the following categories: artificial intelligence providers, language and generative models, voice providers, automation services, APIs and integrations, infrastructure and hosting, storage, CRM, and messaging. These providers process data solely to deliver the contracted service. The specific providers used in a given project are identified, where relevant, in the proposal, contract, DPA, technical addendum, or project documentation, and may change for technical or service-continuity reasons.

7. Cookies

This website does not use tracking or advertising cookies. Our infrastructure provider may use strictly necessary cookies for the operation and security of the site.

8. Your privacy rights

Depending on your location, you may have the right to access, correct, delete, or request a copy of your personal information, and to opt out of certain processing. To exercise any of these rights, write to contacto@maferdigital.net and we will respond within a reasonable time and as required by applicable law. We will not discriminate against you for exercising these rights.

If your information sits in a system we operate on behalf of a client, that client is the controller of that data; we will forward your request to them and support them in responding.

9. Security

We take reasonable measures to protect and secure personal information in electronic form against unauthorized access, use, loss, destruction, alteration, or disclosure. These include access controls, secure credentials, granting access only to what is strictly necessary for the task at hand, and working with providers that maintain recognized security standards. No system is completely infallible, so we cannot guarantee absolute security.

10. Data breach notification

If a security breach affecting personal information occurs, we will act in accordance with the Florida Information Protection Act of 2014 (Fla. Stat. § 501.171) and any other applicable law:

• Affected individuals will be notified as expeditiously as practicable and, in any event, no later than 30 days after we determine that a breach has occurred or have reason to believe it occurred.
• The Florida Department of Legal Affairs will be notified when a breach affects 500 or more individuals in Florida, within the same 30-day period.
• Nationwide consumer reporting agencies will be notified when a breach affects more than 1,000 individuals at a single time.
• When we act as a service provider on a client's behalf, we will notify that client of a breach within 10 days of discovering it or having reason to believe it occurred, so that the client can meet its own notification duties.

11. Data retention and secure disposal

We keep information only for as long as necessary to fulfill the purposes described, for the duration of our business relationship, and afterwards for the applicable legal retention periods (accounting, tax, or defense of claims). Data we process on a client's behalf is returned or deleted at the end of the engagement, as agreed with that client. When records containing personal information are no longer needed, we take reasonable measures to dispose of them securely — by shredding, erasing, or otherwise making the information unreadable or undecipherable.

12. Children's privacy

This website is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us so we can delete it.

13. International users

MAFERDIGITAL LLC is based in the United States and also serves clients in Chile, Peru, and other countries. If you contact us from outside the United States, your information may be processed in the United States or in other countries where our providers operate, where data protection laws may differ from those in your country. Where local law grants you rights that cannot be waived, nothing in this policy limits them.

14. Applicable data protection law

Our handling of personal information is subject to the Florida Information Protection Act of 2014 (Fla. Stat. § 501.171), which applies to the security, breach notification, and disposal of personal information of Florida residents.

The Florida Digital Bill of Rights (Fla. Stat. §§ 501.701–501.716) imposes controller obligations only on businesses that meet its statutory thresholds, which MAFERDIGITAL LLC does not currently meet. We apply the commitments described in this policy — no sale of personal data, no targeted advertising, no profiling, and honoring access, correction, and deletion requests — as a matter of practice, and we will comply with that statute to the extent it applies to us.

Where our clients or their users are located in Chile or Peru, the applicable local data protection rules are also taken into account, and project-specific conditions may be set out in the corresponding contract, DPA, or addendum.

15. Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or service changes. The current version will always be the one published on this page, along with its last updated date.

16. Governing law

This policy is governed by the laws of the State of Florida and the United States of America. Any dispute shall be submitted to the competent courts located in Florida, without prejudice to any non-waivable rights you may have under the laws of your country of residence.

← Back to home