HF Imports · International enquiries

Privacy notice

Updated 1 November 2026 · Consent categories: 2026-09-05.3

This English notice explains how HF Imports handles information for international enquiries and use of this website. Our detailed Spanish policy also describes existing vehicle imports, payment passes and support tools.

Who is responsible

IMPORTADORA Y EXPORTADORA DE VEHÍCULOS JOAN ROJAS LEDEZMA EIRL, Chilean tax ID 76.789.515-1, operates HF Imports. Address: Ruta A-16 N°4560, Sitio BI-15-04, Parque Empresarial Zona Franca, Alto Hospicio, Chile. Joan Angie Rojas Ledezma is the legal representative and contact for privacy requests. Email e.rojas@hf-imports.com or call +56 9 2236 0908. You may write in English or Spanish.

Information and purposes

• Enquiries and advice: your contact details, country, language, question and any documents needed for the service you request. We use them to respond, agree the scope and provide the service. Please do not send identity documents, payment credentials or another person's sensitive information in an initial enquiry.
• Payments and access: where a paid report or service is purchased, we keep the email, order reference, amount, payment status, applicable access period and evidence of accepted terms. Card details are entered with the payment provider, rather than stored in our enquiry form.
• Security and operations: the hosting provider receives IP and connection information. Necessary cookies support sessions, security, payments and privacy choices. Our rate limits use an identifier derived from the IP with a private key.
• Optional measurement: with your separate permission, we measure visits, catalogue interactions and contact clicks. A click is not proof of a received enquiry or purchase. Our measurement events exclude form contents and private URL parameters; referrers are reduced to their origin.

We process information to handle the enquiries and services you request, with the authorisation or other legal basis applicable to the operation. Optional tracking requires a separate choice. Contacting us or buying a service does not subscribe you to marketing.

Cookies and your choices

Optional services stay off until you choose. You may browse and buy without accepting them. Use “Privacy preferences” in the footer to change or withdraw permission at any time. The three separate categories are:

• Visit measurement: Google Analytics and our own statistics, using page events, browser identifiers and device information.
• Recordings and click maps: Microsoft Clarity on selected pages, using session reconstruction, clicks and scrolling. Strict masking is configured for new captures; masking is not a guarantee of anonymity.
• Blog advertising: Google AdSense. We request non-personalised ads; serving and measuring them can still involve technical data and cookies.

The signed hf_privacy cookie remembers your choice for 180 days. Local storage keeps a refusal signal and coordinates changes across tabs. Google Analytics cookies in this integration are requested with a 180-day lifetime. Clarity uses cookies such as _clck and _clsk; third-party cookies depend on the service, consent and browser. AdSense cookie durations vary; Google describes 13 months for the _gads family. See the Clarity cookie details and Google cookie information.

Withdrawing a category stops its loading on HF and removes accessible optional cookies on our domain. The page may reload to stop active services. This does not erase information already held by providers or cookies on other domains. Necessary service access remains available.

Providers, external links and AI

Hostinger hosts the website. The service configuration checked on 5 September 2026 located the web server in Brazil and backups in the United States. Google Workspace and some existing Gmail accounts handle email. WhatsApp receives information when you choose to use it. Flow and Webpay/Transbank handle applicable payments. Cloudflare and image, font or library servers receive technical requests needed to deliver content.

Elsewhere on the site, vehicle search uses DeepSeek, a provider based in China. If you use voice search, audio goes to Groq for transcription; temporary server audio files are removed after the request. Common email, Chilean tax ID and phone patterns are filtered from text before processing, but names and other information can remain. Original audio reaches the transcription provider. You may use conventional filters instead. The support chat retains conversation history and uses Google/Gemini according to its configuration. AI output may be wrong and does not approve a purchase or certify a car's condition.

These services can process information outside Chile and use other providers. Payment and advertising providers may have their own legal responsibilities; their roles are not all identical. Using an API does not guarantee that a provider stores no information. Contact us for the recipients, destinations and safeguards relevant to your case. Publicly available provider terms alone do not prove that every transfer requirement has been met.

Retention and security

• Browser choices last 180 days. Consent records are reviewed for deletion after two years unless a specific obligation or claim requires retention.
• Privacy, incident and refund case records are retained while managed and, as an internal rule, for two years after closure, subject to documented holds.
• Report recovery codes expire after 10 minutes; purchased access lasts for the purchased period.
• Google Analytics settings checked retain event data for 2 months and user data for 14 months, resetting the user period on new activity. Aggregated reports may follow other retention.
• Clarity session playback lasts 30 days; favourited or tagged sessions and heatmaps follow the provider's 9-month retention.
• Purchase, tax and contractual documents follow the applicable operational and legal needs. Previous enquiries, chat history and backups require a separate retention review; this notice does not mean all historical records have been deleted.

The site uses HTTPS, access controls, request validation and server-side payment checks. Privacy case content is held in restricted storage. No internet transmission or storage system is completely secure. Deletion also needs to be considered when restoring backups.

Your rights and contact

You may request access, correction, deletion or blocking and withdraw optional consent, subject to applicable law. Write to e.rojas@hf-imports.com; a site account and optional cookies are not required. We request only proportionate information to verify identity. Do not send a copy of your identity document by default.

Under the current Chilean Law 19,628, Article 16 provides a court remedy in the applicable cases when a request is refused or no decision is given within two working days. We do not apply the future reform's 30-day response period in advance. The official text checked on 1 November 2026 sets 1 December 2026 as the main effective date for Law 21,719, which expands rights including portability and provides for the new data protection authority. Any enacted change to that date must be checked. Other countries' rules may apply depending on the circumstances; this notice is not a certification of compliance in every country.

Our services are not directed to people under 18. Please contact us if you believe we hold a child's information improperly. Material changes to this notice will be signalled on the site or by an appropriate direct notice.

Official sources: Chilean Law 19,628 and Law 21,719.