Legal · IFHA
Privacy Policy
What personal data we process, why and on what legal basis, how long we keep it, who we share it with, and how you can exercise your rights.
Your privacy matters. This policy explains, in plain language and with the detail required by Argentina’s Personal Data Protection Law No. 25,326, what information we collect when you visit ifha.com.ar, write to us or enroll in a program; what we use it for; who we share it with; how long we keep it; and what rights you have over it.
Data controller
The controller of the database and of the processing of personal data collected through this site is:
- Company name
- Eido S.A.S.
- CUIT (Argentine tax ID)
- 30-71934933-8
- Address
- Av. Libertador 405, San Fernando (B1646), Buenos Aires Province, Argentina
- Brand
- IFHA – Artisan Ice Cream Training Institute (Instituto de Formación del Helado Artesanal)
- Privacy contact
- info@ifha.com.ar
- Phone
- +54 9 11 2892 4489
IFHA is a brand of Eido S.A.S., a group that also includes other gastronomy and consulting projects (eido.com.ar). Data collected through ifha.com.ar is processed for the purposes described in this policy and is not added to the marketing databases of the group’s other brands without your consent.
Scope of this policy
This policy applies to the personal data we process through:
- the ifha.com.ar site and all its forms, including contact, enrollment, pre-enrollment, download and subscription forms;
- the enrollment, payment and study processes of our programs;
- the email, WhatsApp and phone conversations we have with you;
- the live classes and virtual classrooms we use.
It doesn’t apply to third-party sites, platforms or social networks we may link to, which are governed by their own policies.
Applicable law
Processing is governed mainly by Law No. 25,326, its Regulatory Decree No. 1558/2001 and the rules of the Agency for Access to Public Information (AAIP), the supervisory authority in Argentina. Consumer Protection Law No. 24,240 and Law No. 26,951, which created the National “Do Not Call” Registry, also apply.
If you live in the European Economic Area or the United Kingdom, the processing of your data is also subject to Regulation (EU) 2016/679 (GDPR) and the UK GDPR where applicable, with the additional rights described in section 13. The European Commission recognizes Argentina as a country with an adequate level of data protection (Decision 2003/490/EC), which allows data to be transferred from the European Union to Argentina.
What data we process
Depending on how you interact with us, we may process the following categories of data:
| Category | Data | When we get it |
|---|---|---|
| Identification | First and last name, type and number of ID document, date of birth when proof of legal age is required | Contact and enrollment forms |
| Contact | Email, phone and WhatsApp, country, province or state, and city of residence | Forms and conversations |
| Billing and payment | Address, postal code, tax status, CUIT/CUIL, payment ID and proof of transfer | Enrollment and payment process |
| Academic | Program and edition, attendance, assignments and assessments, payment plan status, certificates issued | During the program |
| Profile (optional) | Previous experience, professional goal, whether you have or plan to open an ice cream shop, how you found us | Forms and surveys after payment |
| Image and voice | Taking part in live classes that are recorded, and photographs at in-person activities | Classes and activities |
| Browsing | IP address, device and browser type, operating system, pages viewed, time on site, traffic source and cookie identifiers | When you browse the site |
| Communications | Content of the messages you send us and the record of our replies | Email, WhatsApp, forms |
Swipe the table sideways to see all columns.
Two important points
We don’t ask for or want sensitive data. We don’t request data about health, ethnic origin, political opinions, religious beliefs, union membership or sex life, as defined in article 2 of Law No. 25,326. If you tell us about an allergy or a health condition for an in-person activity, that information is used only for your safety during the activity, with your consent, and is deleted when the activity ends. Please don’t include sensitive data in free-text fields.
We don’t process card data either. Card numbers, security codes and bank credentials are entered directly in the environment of the payment gateway or platform: IFHA doesn’t see, receive or store them. We only keep the result of the transaction and the minimum data needed to identify it.
Where the data comes from
In the vast majority of cases, you give us the data yourself, voluntarily, when you fill in a form, write to us or enroll. Fields marked as required are the ones essential for the purpose of each form; if you don’t fill them in, we won’t be able to handle your request.
We also collect browsing data automatically through cookies and similar technologies (see the Cookie Policy), and we may receive data from advertising and messaging platforms when you reach us through an ad or write to us on WhatsApp or social media.
If you give us data about someone else —for example, when enrolling another person or referring a colleague—, you confirm you have their authorization and agree to tell them about this policy.
What we use it for and on what legal basis
We process your data only for the purposes listed below, each with its legal basis and retention period:
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering questions and sending proposals | Consent and pre-contractual steps at your request | Up to 24 months from the last contact |
| Pre-enrollment, reminders if you don’t finish, and the email when the English edition opens | Pre-contractual steps at your request (Terms §08) | Until the English edition opens and up to 12 months afterwards, or until you ask us to delete it |
| Managing enrollment, payment and studies | Performance of the contract | During the relationship and for 10 years afterward (art. 328, Civil and Commercial Code) |
| Issuing tax receipts and meeting accounting obligations | Legal obligation | The tax and accounting limitation periods |
| Issuing and verifying certificates | Performance of the contract and legitimate interest in their authenticity | Permanent, as an academic record |
| Sending operational notices about the program | Performance of the contract | For as long as the program lasts |
| Sending news, content and commercial offers | Consent, which you can withdraw at any time | Until you unsubscribe |
| Measuring site use and improving content | Legitimate interest (you can block these cookies in your browser; see the Cookie Policy). For visitors from the EEA and the UK, Google tags run with consent denied by default | As set out in the Cookie Policy |
| Digital advertising and campaign measurement | Legitimate interest (you can block these cookies in your browser; see the Cookie Policy). For visitors from the EEA and the UK, Google tags run with consent denied by default | As set out in the Cookie Policy |
| Preventing fraud, abuse and automated submissions | Legitimate interest in the security of the service | Up to 12 months |
| Handling complaints and exercising or defending rights | Legitimate interest and legal obligation | Until legal actions are time-barred |
Swipe the table sideways to see all columns.
When we rely on legitimate interest, we first assess that this interest doesn’t override your rights and freedoms, and you can object at any time by writing to info@ifha.com.ar.
We don’t use your data to make automated decisions that produce legal effects on you or to build profiles that significantly affect you. Our ad targeting is the standard targeting offered by ad platforms and doesn’t determine access to our programs or their conditions.
Live classes and recordings
Our online classes may be recorded so that the students of that edition can review them. Before starting, we announce that the class is being recorded.
If you don’t want your image or voice recorded, you can take part with your camera and microphone off and use the chat: that doesn’t affect your studies or your certificate. Recordings are shared only with the students of that edition and the teaching team, for the period stated for each program.
Using your image for promotional purposes requires your express, separate and prior consent, under article 31 of Law No. 11,723, and you can withdraw it whenever you want.
Minors
Our programs and the site are intended for people aged 18 or older. We don’t knowingly collect data from minors.
A person under 18 can only take part with the express authorization of their parents, guardians or legal representatives, who must contact us beforehand. If we find we have received a minor’s data without that authorization, we delete it. If you are a parent or guardian and believe a minor in your care has given us data, write to info@ifha.com.ar and we will delete it.
Who we share your data with
We never sell it
We don’t sell your personal data. We don’t transfer or rent it to third parties for their own purposes, and we don’t share it with other companies so they can offer you their products.
We do use providers that process data on IFHA’s behalf and under its instructions, with documented instructions and a duty of confidentiality, so that we can provide our service:
| Provider | What for | Where data is processed |
|---|---|---|
| Hostinger | Hosting of the site and the database | Brazil (São Paulo) |
| Analytics; Google Ads, including enhanced conversions: the email, phone and name you enter in a form, sent hashed; Search Console, email and virtual classrooms | United States and other countries | |
| Meta Platforms | Measurement pixel and advertising, including the email, phone and name you enter in a form, sent hashed to match conversions (Advanced Matching); WhatsApp | United States and other countries |
| Microsoft | Clarity: heatmaps and session replay; Bing: syncing of the identifiers used by Clarity | United States |
| Ahrefs | Cookieless web analytics (pages viewed and traffic source) | Singapore and other countries |
| DMCA.com | Content protection badge loaded on the site | United States |
| Meta (CAPI Gateway on Google Cloud) | Sending measurement events from a server, with IFHA’s own identifier | United States |
| Zoom | Live online classes | United States and other countries |
| Mailrelay | Sending news and email communications | Spain (European Union) |
| Cloudflare | Turnstile: checking that forms are filled in by a person and not an automated program; web traffic analytics | United States and global network |
| PayPal | Collection of international payments | United States and European Union |
| Prisma Medios de Pago (Payway) | Card payment processing | Argentina |
| Banks | Receiving bank transfers | Argentina |
Swipe the table sideways to see all columns.
International payments. If you pay with Wise, Binance Pay, Western Union or an international bank transfer, you use that provider’s service under its own terms and privacy policy. We only receive the proof of payment and the details needed to identify the transaction (the “Billing and payment” row in section 04).
The Google tag (Analytics and Google Ads) is served from IFHA’s domain through Cloudflare’s network and loads on every page of the site, including the unsubscribe pages (/baja/ and /unsubscribe/), where the visit is recorded like any other page view. You can block it in your browser, as explained in the Cookie Policy.
Anti-bot check on forms: Cloudflare Turnstile
The forms on this site are protected with Cloudflare Turnstile, which checks that whoever submits them is a person and not an automated program. It works in invisible mode: except in rare cases, you don’t have to solve any challenge or do anything different to submit a form.
For that check, Cloudflare processes technical signals from your browser and connection —including the IP address, the TLS fingerprint, the user-agent header and the site key with its origin—. Those signals are used only to tell people from bots: they are not used to identify you, profile you or show you ads. Cloudflare acts as a processor on IFHA’s behalf when it protects this site, and as a controller when it uses those signals to improve its own detection technology.
That processing is governed by the Cloudflare Turnstile Privacy Addendum, which supplements the Cloudflare Privacy Policy. Both documents are incorporated into this policy by reference, and we recommend reading them.
We may also share data with our accounting and legal advisors under professional secrecy, and with judicial or administrative authorities when there is a legal obligation or a well-founded request. In the event of a corporate reorganization, merger or transfer of the business, the data may be transferred to the successor, which will be bound by this same policy.
Each of these providers processes data under its own privacy policies, which we recommend you read.
International transfers
As the table above shows, some providers store or process data on servers outside Argentina, mainly in the United States, Brazil and the European Union.
These transfers are made under article 12 of Law No. 25,326: because they are necessary to perform the contract between us or to handle your request, with your consent where applicable, and through data protection clauses in our contracts with the providers that offer them, including the standard contractual clauses approved by the AAIP and by the European Commission, as the case may be.
You can ask us for more information about the safeguards applied by writing to info@ifha.com.ar.
Information security
We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, alteration or improper disclosure, in line with article 9 of Law No. 25,326. These include:
- encryption of site traffic with a TLS certificate (HTTPS);
- role-based access control, with individual credentials and strong authentication on critical systems;
- regular database backups;
- card processing delegated to gateways that comply with the PCI DSS standard, so card data never passes through our systems;
- anti-bot checks on forms with Cloudflare Turnstile, in invisible mode, to stop automated submissions;
- a confidentiality commitment from our team and providers.
Even so, no internet transmission or storage system is completely secure. If a security incident significantly affected your data, we would act in accordance with the applicable rules and inform you through the contact details you gave us.
Your rights and how to exercise them
As the data subject, you have the right to:
- Access the data we hold about you and know its origin and purpose;
- Rectify inaccurate or incomplete data and update it;
- Delete your data when legally appropriate;
- Object to processing based on our legitimate interest and request that your data be blocked;
- Withdraw the consent you have given at any time, without affecting the lawfulness of earlier processing;
- request that your name be removed or blocked from our databases for advertising purposes, under article 27 of Law No. 25,326.
How to do it
Write to info@ifha.com.ar from the email address you gave us, or send a letter to the address in section 01, with a copy of your ID document to prove your identity. Tell us clearly which right you want to exercise.
| Request | Response time | Cost |
|---|---|---|
| Access | 10 calendar days (art. 14.2, Law 25,326) | Free |
| Rectification, update or deletion | 5 business days (art. 16.2, Law 25,326) | Free |
| Unsubscribing from commercial communications | Immediately or by the next mailing | Free |
Mandatory information clauses
The data subject has the right to access their personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown, as set out in article 14, paragraph 3 of Law No. 25,326.
The AGENCY FOR ACCESS TO PUBLIC INFORMATION, as the Supervisory Body of Law No. 25,326, has the power to handle the complaints and claims filed by anyone whose rights are affected by non-compliance with the rules on personal data protection (argentina.gob.ar/aaip).
Additional rights for EEA and UK residents
If the GDPR or the UK GDPR applies to you, in addition to the rights above you have the right to restriction of processing, the right to portability of the data you have given us in a structured, commonly used format, and the right not to be subject to automated decisions with legal effects.
You can also lodge a complaint with the supervisory authority of your country of residence. To exercise any of these rights, write to info@ifha.com.ar and tell us your country of residence.
Commercial communications and how to unsubscribe
If you have given us your consent, we may send you news, educational content, start dates and offers for our programs.
You can unsubscribe whenever you want, without giving reasons and at no cost: use the unsubscribe link included in every email, or write to info@ifha.com.ar with the subject “Unsubscribe”. Unsubscribing from commercial communications doesn’t affect the essential operational notices you receive while taking a program (schedule changes, access, due dates).
If you live in Argentina and don’t want to receive advertising calls, you can sign up free of charge for the National “Do Not Call” Registry created by Law No. 26,951 (argentina.gob.ar/aaip/datospersonales/registro-no-llame).
Cookies and tracking technologies
We use our own and third-party cookies to make the site work, remember preferences, measure its use and assess the performance of our campaigns. The details of each cookie, its purpose, its duration and how to manage it are in the Cookie Policy, which is part of this policy.
Third-party links and services
The site may link to third-party platforms, such as social networks, payment gateways, stores that sell our publications and video-conferencing tools. When you follow those links you leave the scope of this policy: the processing of your data is then governed by the policies of each platform, over which IFHA has no control.
Changes to this policy
We may update this policy to reflect changes in the law, in technology or in our practices. The version in force is always the one published on this page, with its update date at the bottom.
When a change substantially affects how we process your data, we will let you know by email or with a prominent notice on the site before it takes effect and, if the new purpose requires it, we will ask for your consent again.
Contact
For any question about this policy or the processing of your personal data, write to info@ifha.com.ar or call +54 9 11 2892 4489. We answer all personal data requests within the legal time limits.
Last updated: October 14, 2026 · Version: 3.1 (English)
Based on the Spanish original, version 3.1 of September 25, 2026, updated on October 14, 2026 for the English site (hosting location, legal bases and cookie inventory). For the factual information about providers, locations and cookies, this version is the current one; as to your rights, the version more favorable to you prevails.
History: 3.1 — Sep 21: Mailrelay instead of Mailchimp; Sep 22: Cloudflare Turnstile on forms; Sep 25: Microsoft Bing, Ahrefs, DMCA.com and Meta’s CAPI Gateway added to the provider table, and reCAPTCHA removed; Oct 14 (English version): hosting location (Brazil), legal bases for measurement and advertising, the ifha_origen cookie, pre-enrollment in the purposes table, and Meta Advanced Matching and Google enhanced conversions declared.
Controller: Eido S.A.S. — CUIT 30-71934933-8 — Av. Libertador 405, San Fernando (B1646), Buenos Aires Province, Argentina
IFHA is a brand of Eido S.A.S. (eido.com.ar).
+54 9 11 2892 4489
