This is a courtesy translation. In case of discrepancy, the Spanish version prevails.
This Privacy Policy describes how Cero Trade processes the personal data of those who visit or use the website hosted under the domain www.cerotrade.cl (the "Website") and the I-REC certificate custody and operations platform. It supplements section 3 of the Terms and Conditions; in case of discrepancy, what is stated in the Terms and Conditions prevails.
1. Controller and scope
The data controllers are Cero Trade Inc., a company incorporated in the state of Delaware, United States, and Cero Trade SpA (RUT 77.799.119-1), a company incorporated in Chile (together, "Cero Trade"), operating commercially under the Cero Trade brand, with address at Camino Las Hualtatas 5200, casa 43, Lo Barnechea, Santiago, Chile.
This Policy applies to the data we process as controllers: that of people who create an account or act on the platform on behalf of a user company, and that of those who contact us through the Website. Data processing that we carry out on behalf of a client under a custody or consignment framework agreement is governed by that agreement.
2. Data we collect
- Contact data: first and last name, email address, phone number and, where applicable, address.
- Business and verification (KYB) information: legal name, RUT or RFC, certificate of incorporation, bylaws, copy of the legal representative's ID, and proof of address.
- Account and operation data: login credentials, Evident account identifier, history of offers, transfers, and redemptions.
- Technical and browsing data: IP address, browser and device type, pages visited, security logs, and cookies (see section 7).
We do not store credit card information or banking credentials.
3. Purposes and legal basis
We process data for the following purposes:
- To verify the identity of users and comply with regulatory and standard requirements, including those of the I-TRACK Foundation (a Dutch non-profit entity that manages the international I-REC certificate standard) and its registry platform operated by Evident.
- To provide and maintain the custody, connection between buyers and sellers, transfer, and redemption service for I-RECs.
- To execute transactional operations and issue or receive the corresponding tax documentation.
- To prevent fraud and protect the security of the platform and its users.
- To answer inquiries and provide support.
- To inform about changes to the service and, if the user consents, to send commercial communications.
The legal basis is the performance of the contract with the user, compliance with legal and regulatory obligations, the legitimate interest in security and fraud prevention, and the data subject's consent where required (for example, for the newsletter).
4. Storage, security, and retention
Data is stored on secure servers (AWS) with encryption at rest and in transit, restricted access, and multi-factor authentication (2FA). Cero Trade adopts reasonable technical and organizational measures to protect data against unauthorized access, alteration, or disclosure.
Data is kept while the account is active and, after it is closed, for the period necessary to comply with legal, tax, and regulatory obligations, or to handle potential claims. Once those periods have passed, the data is deleted or anonymized.
5. Sharing and international transfers
Cero Trade does not sell information to third parties. Data is shared only:
- Where required by law or by request of a competent authority.
- To comply with the standard's operational processes, such as the registry operated by Evident, the I-TRACK Foundation, or KYB verification providers.
- With service providers (hosting, analytics, transactional email) that act as data processors on behalf of Cero Trade and only for the tasks entrusted to them.
- At the explicit request of the user.
Because Cero Trade operates from Chile and the United States and uses cloud infrastructure, data may be transferred to and processed outside the data subject's country of residence. In those cases, contractual and technical safeguards apply to maintain a level of protection equivalent to that of this Policy.
6. Data subject rights
Data subjects may access their data, request its correction or update, ask for its deletion, and withdraw the consent given, without retroactive effect. To exercise these rights, write to contacto@cerotrade.cl.
We will respond within the deadlines set by the applicable Chilean data protection law. If you believe the processing does not comply with the regulations, you may also turn to the competent supervisory authority.
8. Links to third-party sites
The Website may contain links to sites not operated by Cero Trade. By following one of those links, you will access a site with its own policies. Cero Trade does not control and is not responsible for the content or privacy practices of third-party sites; we recommend reviewing the privacy policy of each site you visit.
9. Changes to this Policy and contact
Cero Trade may update this Privacy Policy. In case of material changes, we will give at least 30 days' notice through the Website or by email. Use of the Website after an updated version takes effect implies acceptance.
For any question about this Policy or the processing of your data, write to us at contacto@cerotrade.cl or use the contact form at www.cerotrade.cl. You can also write to us at Camino Las Hualtatas 5200, casa 43, Lo Barnechea, Santiago, Chile.
This Policy is published in Spanish, English, and Portuguese. The English and Portuguese versions are courtesy translations; in case of discrepancy, the Spanish version prevails.