Privacy Policy

as well as the rights users can exercise regarding their information.

"User(s)" are defined as any person who browses the Website, registers as a customer, purchases products, or has provided personal data to the Company through the Website or social media.

The Company promotes the provision of free and informed consent. The Company may modify the provisions of this Privacy Policy. It is the User's responsibility to be aware of the current policy when providing information.

Personal Data and Purposes of Processing:

This refers to information that allows us to know and identify who the User is and that can be used to identify, contact, or locate them. The User must provide truthful, up-to-date, accurate, and complete information and notify the Company in case of any changes.

The personal data collected on the website is processed for the following purposes:

For the acquisition of products from the Company and subscription as a customer on the Website: first and last name, ID number, address, phone number, email address, credit card (name, surname, number, verification code, expiration date).

To provide customer service and delivery of products (contact and inquiries, shipping/delivery of purchased products): first and last name, ID number, phone number, email address, home address.

To use the Contact Form: first and last name, phone number, and email address.

For the Complaints Book for complaints or claims: first and last name, ID number and type, home address, phone number, email address. The data mentioned in items i) through v) are required to meet the purposes of the corresponding items. If not provided, the Company will not be able to fulfill these purposes or provide optimal customer service.

Optionally, personal data may be processed for the following additional purposes, which will only apply if the User has given their free, prior, unequivocal, and informed consent.

Data Bank:

The personal data provided by Users is stored in one or more of the Company’s data banks, depending on their relationship with it, as detailed below:

“Clients” Data Bank: Stores the personal data of Users who purchase a product from the Company.

“Potential Clients” Data Bank: Stores the personal data of Users who request the Company to send advertising material or who require information about the Company’s products.

“Complaints Book” Data Bank.

The Company states that it has the appropriate security measures in place according to the processing to be carried out, as well as technical, organizational, and legal measures necessary to guarantee the confidentiality of personal data.

The personal data collected on the website will be shared with the following recipients:

Recipient Country Purpose Cross-border flow

Shopify Canada E-commerce platform for online sales Yes

Mailchimp USA CRM (Customer database management) Yes

Izipay Peru Payment gateway Yes

Retention of Personal Data:

Personal data will be retained indefinitely until consent is revoked.

Cookies:

The website uses cookies, which may be applied and/or installed on the User's devices. Cookies are text files stored in the user's browser to collect information about their behavior regarding the use of the website. By identifying the User’s activities on the website, they are important for the website’s functionality and improvement. Additionally, they help define the advertisements shared with users, making website content more personalized.

On this website, we use cookies that help improve its quality according to the Users’ browsing habits and styles.

Cookies cannot harm your device and are very useful as they help us identify and resolve errors. They serve various purposes, such as recognizing users, obtaining information about their browsing habits, or customizing the display of content. Some cookies are strictly necessary for the website to function correctly, while others improve website performance by offering different products and services efficiently, among others.

The Company has implemented cookies on the website, classified as follows:

Necessary Category: helps make a website usable by activating basic functions like navigation and access to secure areas. The website cannot function properly without these cookies.

Statistical Category: helps website owners understand how visitors interact, gathering and providing information anonymously.

Marketing Category: used to track visitors on websites. The interaction is to display relevant and engaging ads to the individual user, making them more valuable to third-party advertisers.

Preferences Category: Remembers information about the User that allows them to access the website with specific features that enhance their experience, such as language preferences.

It is important to note that cookies track a user’s searches or browsing habits over a specific period. We provide a cookie manager link where Users can accept or reject cookies that are not strictly necessary for the website’s operation. If rejected, the User can still browse our website. Most browsers allow warning about the presence of cookies or automatically reject them.

The User gives their consent freely, explicitly, and unequivocally by checking the box: “I consent and/or accept cookies.” By giving consent, the User authorizes the website to process them for the purposes mentioned. If the User disagrees with any of these purposes, they can customize them in the cookie management bar on our website.

Here is a list of the cookies used on the website, their type, functionality, and retention period:

Cookie Name Category Functionality Retention Period

CONSENT Necessary Used to detect if the visitor has accepted the marketing category in the cookie banner. Years

PHPSESSID Necessary Maintains the state of the user in all page requests. Session

_ga Statistical Records a unique ID used to generate statistical data about how the visitor uses the website. 2 years

_gat Statistical Used by Google Analytics to control the rate of requests. 1 day

_gid Statistical Records a unique ID used to generate statistical data about how the visitor uses the website. 1 day

VISITOR_INFO1_LIVE Marketing Attempts to calculate the user's bandwidth on pages with embedded YouTube videos. 179 days

YSC Marketing Records a unique ID to maintain statistics of which YouTube videos the user has watched. Session

yt.innertube::nextId Marketing Records a unique ID to maintain statistics of which YouTube videos the user has watched. Permanent

yt.innertube::requests Marketing Records a unique ID to maintain statistics of which YouTube videos the user has watched. Permanent

yt-remote-cast-available Marketing Records the user's video player preferences when viewing embedded YouTube videos. Session

yt-remote-cast-installed Marketing Records the user's video player preferences when viewing embedded YouTube videos. Session

yt-remote-connected-devices Marketing Records the user's video player preferences when viewing embedded YouTube videos. Permanent

yt-remote-device-id Marketing Records the user's video player preferences when viewing embedded YouTube videos. Permanent

yt-remote-session-app Marketing Records the user's video player preferences when viewing embedded YouTube videos. Session

yt-remote-session-name Marketing Records the user's video player preferences when viewing embedded YouTube videos. Session

yt-remote-fast-check-period Marketing Records the user's video player preferences when viewing embedded YouTube videos. Session

Compliance with Obligations:

The Company collects personal data in compliance with the provisions of the Personal Data Protection Law - Law No. 29733 and its Regulations (approved by Supreme Decree No. 003-2013-JUS). Therefore, it commits to:

Not applying or using the obtained personal data for purposes unrelated to the intended objective in this policy.

Not disclosing personal data to other individuals or legal entities.

Maintaining confidentiality regarding these data, even after the relationship with the User ends.

Adopting the necessary technical and organizational measures to ensure the security of personal data and avoid alteration, loss, unauthorized processing, or access, considering the state of technology, the nature of the stored data, and the risks they face, whether from human actions, physical, or natural causes.

Communicating the obligations mentioned in the previous paragraphs to the personnel involved in providing the website’s services.

Destroying all personal data processed, as well as any supports or documents containing personal data once the retention period has ended.

We will only process personal data of minors under 18 years old if such Personal Information is provided by parents, guardians, legal representatives, or any third party with the necessary authority and in cases where such Personal Information is provided for the provision of services offered on the Website or any other service we offer.

The website may contain links to other services and websites not operated or controlled by us ("Third-Party Services"). The policies and procedures we describe here do not apply to Third-Party Services. Links on our website do not imply that we approve or have reviewed Third-Party Services. We suggest contacting these sites directly for information about their privacy policies.

User ARCO Rights:

The User may exercise the following rights regarding their personal data:

Access to information: The User can obtain information about themselves stored in the Company's data banks.

Rectification: The User may request updates, corrections, or addition of new data to their personal data when there is an error, inaccuracy, or incompleteness.

Cancellation: The User may request the deletion of personal data that is no longer required for fulfilling the Company’s obligations.

Opposition: The User may oppose the processing of their personal data when such processing is not required by contract or law.

To exercise these rights, the User must send written communication (or letter) to 545 Northeast 9th Avenue - Florida, United States, or to the email: marketing@aquamedperu.com. The User should explain the circumstances under which they provided the personal data to the Company.

Jurisdiction and Applicable Law:

For matters not expressly provided for in this policy, the provisions of the Peruvian legal system apply. Additionally, any disputes arising from the acceptance and/or interpretation of this policy will be submitted to the jurisdiction of the courts of Cercado de Lima, Lima, Peru, the National Institute for the Defense of Competition and Intellectual Property (INDECOPI), or the National Authority for the Protection of Personal Data.

However, the User and the Company may agree on other alternative dispute resolution mechanisms.