Website and Customer Privacy Notice

1. Scope and controller

This notice covers cloudata.pe website inquiries, purchases, subscription administration, live chat, support tickets, and the electronic Complaints Book. Product-specific notices may provide additional details. Contact help@cloudata.pe for privacy requests.

2. Information processed

• Contact and identity data: name, email, phone, address, country, document type and number, business name, and tax identifier.
• Transaction data: product, plan, amount, currency, tax component, order reference, subscription status, and Culqi customer, card-token, and subscription identifiers.
• Support data: messages, attachments, chat history, requested resolution, and complaint or claim records.
• Website analytics: page path, referring source, country and city, device type, browser family, timezone, and a keyed one-way visitor identifier. IP addresses are encrypted at rest, restricted to authenticated administrators for real-time operational visibility, and removed from analytics events after no more than 24 hours. Full user-agent strings are not stored.
• Security data: truncated operational metadata, HMAC identifiers, login and audit events, and IP-derived one-way hashes used for abuse prevention.

First-party analytics is disabled when the browser sends Global Privacy Control or Do Not Track. Cloudata does not receive or store full card numbers, card security codes, or card expiration dates. Card entry and tokenization occur directly in Culqi's PCI DSS checkout.

Support request metadata

Support submissions may include an encrypted network address, browser time zone and local submission time, language, user-agent, referring page, and available coarse country, region, or city metadata. Cloudata uses this context to investigate abuse, secure the support service, and understand the origin of a request; it is not used for advertising or precise location tracking.

3. Purposes and legal bases

We process data to provide requested products, administer subscriptions and licenses, issue transaction records, answer support and consumer claims, prevent fraud, secure administrative access, comply with tax and consumer law, and establish or defend legal claims. Depending on the relationship and jurisdiction, processing is based on contract, legal obligation, legitimate security and service interests, or consent.

4. Service providers and international processing

Culqi processes payment tokens and card transactions. Google-hosted email infrastructure may deliver support and transaction notices. Cloud infrastructure providers host the website and encrypted database. These providers act under their own legal obligations or service agreements. Data may be processed outside the customer's country with safeguards required by applicable law.

5. Security

Sensitive database fields are encrypted at application level. Searchable identities use keyed HMAC values instead of plaintext indexes. Payment keys remain server-side, webhook events are authenticated and reconciled with Culqi, administrative access uses password and TOTP controls, and audit records track privileged operations. No security measure can eliminate every risk.

Cookie and consent choices

Necessary browser storage supports security, sessions, and saved privacy preferences. Optional first-party analytics and advertising technologies remain disabled until the visitor consents. Choices can be changed at any time through Privacy choices in the footer.

6. Retention

Order, subscription, invoice-support, and consumer complaint records are retained for the periods required by Peruvian tax, consumer, anti-fraud, and dispute obligations. Support content is retained while necessary to resolve the request and maintain an appropriate service record. First-party website analytics events are retained for no more than 400 days. Security logs are retained for a limited operational period. Data is then deleted, anonymized, or securely isolated when legal retention prevents deletion.

7. Rights and choices

Subject to applicable law, individuals may request access, correction, deletion, objection, restriction, portability, or withdrawal of consent. Send a request through the support form with enough information to verify identity. Consumers may also contact the competent data-protection authority in their jurisdiction.

8. Contact

CLOUDATA SOLUTIONS E.I.R.L.
RUC 20607800651
Av. El Sol Este 428, Urb. San Ignacio, Barranco, Lima, Peru
+51 991 215 604
help@cloudata.pe

Resumen en español

Tratamos datos de contacto, compra, soporte y reclamos para entregar servicios, administrar licencias, atender solicitudes, prevenir fraude y cumplir obligaciones legales. Los datos de tarjeta se ingresan directamente en Culqi. Los campos sensibles almacenados por Cloudata se cifran y los identificadores de búsqueda usan HMAC. Puede ejercer sus derechos escribiendo a help@cloudata.pe.