1. Who is responsible for your data
The controller of your personal data is the Instituto de Ciencias del Grafismo Grafos (Institute of Handwriting Sciences) («Instituto Grafos», “we”, “us”).
Address: Las Arañas 5805, La Reina, Santiago, Chile
Email: contacto@grafos.cl
WhatsApp: +56 9 3241 8707
This policy applies to the website www.grafos.cl in all its languages, to its forms and to the conversations you start with us by email or WhatsApp. The Virtual Classroom (Aula Virtual) and the Grafometrics platform may have their own terms; anything they do not cover is governed by this policy.
2. What data we collect
Data you give us
- Contact form: first name, last name, email, WhatsApp or phone number, company (optional), country, how you heard about us, the area you are interested in and your message.
- WhatsApp or email conversations: your number or address and whatever you write to us.
- Course enrollment: the identification, contact and billing details needed to enroll you and issue your diploma. Payments are processed directly by the payment gateways; we do not receive or store your full card details.
- Psychological, graphological or forensic assessments you order: test answers, handwriting samples, signatures, interviews and reports. Some of this information is sensitive data (see section 4).
Data collected automatically
- Technical data: IP address, browser and device type, pages visited, and the date and time of your visit.
- Approximate country: based on your IP address, we query an external service (country.is) to suggest the site language and pre-select your country in the form. We do not use your precise location.
- Language preference: stored in your own browser (local storage and the grafos_lang cookie) so we do not have to ask you again.
- Analytics and advertising cookies: Google Analytics, Google Tag Manager and the Meta Pixel (see section 9).
3. Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your inquiries and sending you quotes | Your consent and the pre-contractual steps you request |
| Providing the courses, assessments and services you purchase | Performance of the contract |
| Invoicing and meeting tax and legal obligations | Legal obligation |
| Measuring and improving use of the site | Our legitimate interest or your consent, depending on the law that applies to you |
| Showing you ads for our courses and services on other platforms | Your consent |
| Sending you news and offers by email | Your consent or your prior relationship with us as a student; you can unsubscribe from any email |
We do not sell or rent your personal data to anyone.
4. Sensitive data and assessments
Psychological, clinical, vocational and graphological assessments may reveal information about your health, personality or behavior. That is why:
- We only carry them out with your explicit consent, and when a company commissions the assessment, we tell you beforehand what will be assessed and who will receive the report.
- They are handled by a psychologist bound by professional confidentiality, with restricted access.
- Reports are delivered only to you or to someone you have authorized.
- We never use sensitive data for advertising.
- When we use automated analysis (for example, Grafometrics), its results are a support tool: the conclusions of a full report are reviewed and integrated by a psychologist.
- Handwriting samples we use for teaching or research are anonymized: we never show the name of the person who wrote them.
5. Who we share your data with
Only with the providers we need in order to operate, who process your data on our behalf and under their own confidentiality and security obligations:
- Hosting for the website and the Virtual Classroom (servers in Chile).
- Google (Analytics, Tag Manager) and Meta (Pixel, WhatsApp).
- Payment gateways: Webpay (Transbank), dLocal Go and PayPal.
- Email delivery platform (Mailrelay).
- Partner training organization, only when your company uses the SENCE training tax incentive.
- Authorities, courts or public bodies, only when the law requires us to.
6. International transfers
Some of these providers (for example Google, Meta and PayPal) process data outside Chile, mainly in the United States and the European Union. They do so under contractual clauses and security measures designed to ensure an adequate level of protection.
7. How long we keep your data
- Inquiries that do not lead to a purchase: up to 24 months from the last contact.
- Student data: for as long as you have access to the course and afterwards as needed to keep your diplomas verifiable, since they are yours forever.
- Billing data: for the periods required by tax law.
- Assessments: for the time required by regulations and professional ethics, after which they are deleted or anonymized.
8. Your rights
At any time you can ask us for:
- Access: to know what data we hold about you and how we use it.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to delete your data when it is no longer needed or you withdraw your consent.
- Objection: to stop using your data for certain purposes, such as advertising.
- Portability: to receive your data in a structured, commonly used format.
- Blocking or restriction: to temporarily suspend a processing activity.
- Not to be subject to decisions based solely on automated processing that significantly affect you.
- To withdraw your consent, without affecting anything done before.
Write to us at contacto@grafos.cl with the subject line «Datos personales» (Personal data), telling us what you need. We may ask you to verify your identity. We will reply within the legal time limits and, in any case, within 30 days.
If you are not satisfied, you can file a complaint with the relevant data protection authority: in Chile, the Agencia de Protección de Datos Personales (Personal Data Protection Agency); in the European Union, the supervisory authority of your country; in Brazil, the ANPD (National Data Protection Authority).
9. Cookies and similar technologies
| Tool | What it is for | Type |
|---|---|---|
| grafos_lang (cookie and local storage) | Remembering the language you chose | Necessary |
| Google Analytics | Anonymous visit statistics | Analytics |
| Google Tag Manager | Managing the site’s tags | Technical |
| Meta Pixel | Measuring campaigns on Facebook and Instagram and showing you relevant ads | Advertising |
You can block or delete cookies in your browser settings. If you do, the site will keep working, although it may suggest the language to you again.
10. Minors
Our courses and services are intended for people aged 18 and over. Career guidance assessments for minors are carried out only with the authorization of their mother, father or legal guardian.
11. Security
We use an encrypted connection (HTTPS), password-restricted access to student and assessment information, and regular backups. No system is infallible, but if an incident affecting your data were to occur, we will notify you and the authority whenever the law requires it.
12. Applicable law
We process your data in accordance with Chile’s Ley N° 19.628 (Law No. 19,628) on the protection of private life and Ley N° 21.719 (Law No. 21,719) amending it. Where applicable, we also comply with the European Union’s General Data Protection Regulation (GDPR), Brazil’s General Data Protection Law (LGPD) and the privacy laws that apply in your country.
13. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. We will always publish the current version on this page, with its update date. If a change is significant, we will highlight it on the site.
14. Contact
Questions about your data? Write to us at contacto@grafos.cl or on WhatsApp at +56 9 3241 8707.