01 Who we are
This Privacy Policy applies to ValueStrategy Consulting (“VSC”, “we”, “our”), an industrial consulting firm headquartered in Santiago, Chile. VSC operates the website valuestrategyconsulting.com and related properties including the MagORAI and MagEAM ecosystems and the OR Scorecard diagnostic tool.
For any privacy-related inquiry, you can reach us at contact@valuestrategyconsulting.com. We respond within one business day.
02 Information we collect
We collect only the information needed to operate our website, deliver the services you request, and follow up with prospects who initiate contact.
Information you provide directly
- Contact form data — name, email, company, role, project type and the message you send through our forms.
- Scorecard responses — the operational diagnostic data you enter into the MagORAI OR Scorecard, plus the contact details associated with the report delivery.
- Subscription data — when you opt in to receive insights, we store your name and email.
Information collected automatically
- Technical data — IP address, browser type, device type, referring URL, pages visited, time on page.
- Cookies and similar technologies — see section 4.
We do not collect special-category data (health, religion, political opinions, biometrics) and we do not knowingly process information from minors.
03 How we use information
We use the information we collect for the following purposes only:
- Respond to your inquiry — a VSC partner reads every message and replies within one business day.
- Deliver the OR Scorecard report — generate the AI-assisted executive report and email the PDF to the address you provided.
- Send the insights newsletter — only if you opted in. Each email has an unsubscribe link.
- Improve the website — aggregated, non-identifying analytics about how visitors use the site.
- Comply with legal obligations — tax, accounting and applicable regulation in the jurisdictions where we operate.
The legal bases for processing under GDPR-equivalent frameworks are: (i) your consent for newsletter and scorecard contact, (ii) legitimate interest for prospect follow-up after you initiate contact, and (iii) legal obligation for compliance records.
04 Cookies and tracking
The website uses a minimal cookie footprint:
- Strictly necessary cookies — required for the site to function (session management, security).
- Analytics cookies — aggregated traffic measurement. We do not use these to build advertising profiles.
- Functional cookies — remember your form-filling progress in the scorecard.
We do not use third-party advertising cookies. Most browsers let you reject cookies through their settings; if you do, certain parts of the site may not function as intended.
05 Sharing with third parties
VSC does not sell, rent or trade personal information. We share information only with the following categories of recipients and only for the purposes described in this policy:
- Infrastructure providers — cloud hosting and storage providers under data-processing agreements.
- AI and analytics processors — for generating the OR Scorecard report and aggregated site analytics, under contractual confidentiality.
- Email delivery providers — to send the PDF report and any newsletter you have opted into.
- Legal authorities — only when required by applicable law or court order.
We do not share information with marketing networks, data brokers or advertising platforms.
06 Data retention
We retain personal information only for as long as needed to fulfill the purpose for which it was collected, plus the minimum periods required by applicable law:
- Contact form submissions — up to 24 months after last interaction.
- Scorecard responses — up to 36 months, in aggregated and anonymized form for benchmarking after that.
- Newsletter subscribers — until you unsubscribe, plus 90 days for audit trail.
- Client engagement records — per the contractual term and applicable legal retention requirements.
You may request earlier deletion at any time (see section 7).
07 Your rights
You have the right to:
- Access — request a copy of the personal information we hold about you.
- Rectification — correct any inaccurate or incomplete information.
- Deletion — request that we delete your personal information, subject to legal retention obligations.
- Restriction — ask us to limit how we use your information.
- Portability — receive your information in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — at any time, where processing is based on consent.
To exercise any of these rights, email contact@valuestrategyconsulting.com. We respond within 30 days.
If you believe your data has been processed in violation of applicable law, you have the right to lodge a complaint with the data protection authority in your jurisdiction.
08 International transfers
VSC is headquartered in Chile and operates across Latin America. Some infrastructure providers may be located in the United States, the European Union or other jurisdictions. When we transfer personal information across borders, we ensure appropriate safeguards through standard contractual clauses or equivalent mechanisms.
09 Security
We apply technical and organizational measures appropriate to the sensitivity of the information we process. These include:
- Encryption in transit (TLS 1.2+) and at rest where applicable.
- Role-based access controls and least-privilege principles for VSC personnel.
- Logging and monitoring of access to sensitive systems.
- Regular reviews of third-party processor security posture.
No method of transmission or storage is 100% secure. We commit to notifying affected parties without undue delay if a personal data breach occurs.
10 Children's privacy
The VSC website and services are intended for business audiences and are not directed at children under 16. We do not knowingly collect information from minors. If you believe a minor has provided us with personal information, contact us and we will delete it promptly.
11 Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through a visible notice on the website and, where appropriate, by email to active subscribers. The “Last updated” date at the top of this page indicates the version in effect.
Older versions of this policy are available on request.