Privacy Policy

At Consultoría Integral 365 E.I.R.L. (“CI365”, “we”) we respect your privacy. This Privacy Policy explains what personal data we process, for what purpose and under what conditions, as well as the rights available to you.

This Policy is governed by Law No. 29733, the Personal Data Protection Law of Peru and by its Regulations, approved by Supreme Decree No. 016-2024-JUS, in force since 30 March 2025.

1. Owner of the personal data bank

• Legal name: Consultoría Integral 365 E.I.R.L.
• Tax ID (RUC): 20610886770
• Registered address: Ate, Lima, Perú
• Privacy contact: jorab@consultoriaintegral365.com

2. Personal data we process

2.1 Data you provide

This Site contains no data collection forms. Contact takes place by email or through the channels listed in the contact section. When you write to us, we process the data you choose to include in your message, typically:

• First name and surname.
• Email address and, where applicable, telephone number.
• The company or entity you represent and your role.
• The content of your message and any information you voluntarily include in it.

2.2 Browsing data

The Site is static and does not use cookies, tracking pixels, advertising or analytics tools that build profiles of its visitors.

However, our hosting provider automatically logs technical data inherent to the operation of the internet — IP address, date and time of the request, browser type and requested page — for the sole purpose of delivering the content, maintaining service security and preventing abuse. We do not link those logs to identified individuals or use them for commercial purposes.

2.3 Sensitive data and minors

We do not request sensitive data as defined by Law No. 29733. Please do not include such information in your communications unless it is strictly necessary and has been agreed in advance.

The Site is aimed at professionals and organisations, not minors, and we do not knowingly collect their data. If we become aware that we have processed a minor’s data without the appropriate authorisation, we will delete it.

3. Purposes of processing

We process your personal data solely to:

• Handle and respond to enquiries, information requests and proposals you send us.
• Prepare and send quotations or service proposals when you request them.
• Manage pre-contractual and contractual relationships with clients, suppliers and partners.
• Comply with applicable legal, accounting and tax obligations.
• Ensure the security and proper functioning of the Site.

We do not use your data to send unsolicited marketing communications, to build profiles, or to make automated decisions producing legal effects concerning you.

4. Lawful basis

Processing is based, depending on the case, on:

• Your free, prior, express, informed and unequivocal consent, given when you voluntarily send us a communication.
• Performance of a contract or pre-contractual measures taken at your request.
• Compliance with legal obligations to which we are subject.

Where the basis is consent, you may withdraw it at any time by writing to jorab@consultoriaintegral365.com, without affecting the lawfulness of processing carried out before the withdrawal.

5. Retention period

We keep data for as long as necessary to fulfil the purpose for which it was collected:

• Enquiries that do not lead to a commercial relationship: up to twelve (12) months from the last contact.
• Clients and suppliers: for the duration of the relationship and thereafter for the applicable legal, accounting and tax limitation periods in Peru.

Once those periods have elapsed, data is securely and irreversibly deleted or anonymised.

6. Recipients and processors

We do not sell, transfer or trade your personal data. Only providers acting as processors on our behalf may access it, bound by contract and by confidentiality and security obligations:

• Website hosting: GitHub, Inc. (GitHub Pages).
• Email and productivity: Microsoft Corporation (Microsoft 365).

We may also disclose data to administrative or judicial authorities where legally required to do so.

7. Cross-border data flows

The providers listed above may host or process information on servers located outside Peru, mainly in the United States of America and the European Union. This constitutes a cross-border flow of personal data under Law No. 29733 and its Regulations.

In such cases we require our providers to offer contractual guarantees of an adequate level of protection, equivalent to that provided by Peruvian law, through data protection contractual clauses and security and confidentiality commitments.

8. Security measures

We apply technical, organisational and legal measures to protect personal data against unauthorised processing, loss, alteration or improper access. These include:

• Encryption of Site traffic using HTTPS/TLS.
• Multi-factor authentication and access control on a least-privilege basis.
• Logging and periodic review of access to information.
• Confidentiality agreements with staff and providers.

No system is completely infallible. Should a security incident affecting your personal data occur, we will notify the National Authority for Personal Data Protection within forty-eight (48) hours of becoming aware of it and, where applicable, inform you, in accordance with the Regulations in force.

9. Your rights (ARCO)

As the data subject, you have the right to:

• Access: find out what data of yours we process, its origin, purpose and to whom it is disclosed.
• Rectification: correct inaccurate, incomplete or outdated data.
• Cancellation: request deletion of your data where the purpose has been fulfilled, the processing period has expired or you withdraw consent.
• Objection: object to processing where it causes you harm or a legitimate ground applies.

You may additionally exercise the rights to information, portability and withdrawal of consent recognised by the Regulations in force.

How to exercise them

Send a request to jorab@consultoriaintegral365.com, or to our address in section 1, enclosing:

1. Your full name and a copy of your identity document.
2. The right you wish to exercise and a clear description of your request.
3. An address or email where we can send our reply.
4. Any supporting documents, where applicable.

We will reply within a maximum of twenty (20) days for the right of access and ten (10) days for the rights of rectification, cancellation and objection, counted from receipt of the request. Exercising these rights is free of charge.

10. Complaints to the authority

If you believe your request was not handled properly or that your rights have been infringed, you may lodge a complaint with the National Authority for Personal Data Protection (ANPD) of the Peruvian Ministry of Justice and Human Rights, via gob.pe/autoridad-nacional-de-proteccion-de-datos-personales.

11. Changes to this Policy

We may update this Policy to reflect regulatory changes or changes in our processes. The version in force is always the one published on this page, showing its last updated date. If a change is substantial and affects the processing of your data, we will communicate it through the available contact channels.

12. Contact

For any question about this Policy or about the processing of your personal data, write to jorab@consultoriaintegral365.com.

See also our Terms of Service.