This personal data privacy policy (the “Privacy Policy”) aims to inform you how KUDZU PERU SAC – KUDZU SAC (hereinafter, “KUDZU”)—identified by Tax ID (R.U.C.) No. 20602533787 and domiciled at Av. El Polo No. 401, Unit 408 (4th Floor), District of Santiago de Surco, Province and Department of Lima—processes the data of customers and/or web users obtained through forms, information requests, registration, and other personal data required during purchases and sign-ups on our website, https://www.bekudzu.com/. REGULATORY FRAMEWORK: This Privacy Policy is governed by Peruvian legislation and, in particular, by the following regulations: Law No. 29733, Personal Data Protection Law (the “Law”); Supreme Decree No. 003-2013-JUS, approving the Regulations to Law No. 29733 (the “Regulations”); and the Information Security Directive, approved by Directorial Resolution No. 019-2013-JUS/DGPDP. RETENTION PERIOD: Personal data provided is retained for as long as necessary to fulfill the purpose for which it was collected. During the retention period, KUDZU will carry out the necessary actions and operations to guarantee the security and protection of the data collected from users. No personal data will be used for any reason or purpose other than those specified in section 4. PURPOSE: KUDZU may collect personal data such as names, age, physical addresses, email addresses, mobile and/or home phone numbers, Tax ID (R.U.C.) numbers, National ID (DNI) or passport numbers (or any other identification document), and financial information related to payment methods or purchases made on the website. The personal data provided will be processed by KUDZU for the following purposes: managing User registration on the Website to issue payment receipts, deliver products, provide notifications regarding promotions, and conduct data analysis. The data collected includes: First and Last Name, Email Address, Mobile Phone Number, National ID (DNI) or Tax ID (RUC), Address, District, and Province. Additionally, emails may be sent periodically via our site containing special offers, new products, and other promotional information that we consider relevant or beneficial to you; these emails will be sent to the address you provide, and you may unsubscribe at any time. TRANSFER AND RECIPIENTS: With your authorization, KUDZU shares your data domestically with the KUDZU Administration and Marketing Team located at its offices in Lima, Peru, as well as with affiliated companies that provide services on the Website for sending promotional material. KUDZU contracts cloud services for personal data storage through SHOPIFY.COM, whose servers are located in the United States. Such information is encrypted by the server and does not constitute cross-border personal data processing. DATA PROTECTION: KUDZU adopts the necessary security measures to guarantee the protection of the personal data provided, preventing alteration, loss, unauthorized processing, and/or unauthorized access, in accordance with the Law and the Regulations. KUDZU will not sell, transfer, or distribute the personal information collected without your consent, unless required by a judge via a court order. DISCLOSURE: KUDZU commits not to disclose or share the personal data provided without having obtained the necessary consent, except in the following cases: Requests for information from authorities acting within the scope of their duties and jurisdiction; requests for information pursuant to court orders; requests for information pursuant to legal provisions. EXERCISE OF RIGHTS: The data subject may exercise the rights of access, rectification, objection, cancellation, revocation, and other rights enshrined in the Law and its Regulations by submitting a formal request to KUDZU via: gestion@bekudzu.com. Notwithstanding the foregoing, KUDZU may retain certain information regarding the data subject who requests cancellation, to serve as evidence in the event of a claim against KUDZU regarding liabilities arising from the processing of said information. The duration of such retention shall not exceed the statutory limitation period for such liabilities or, in the absence thereof, shall not exceed a period of 60 calendar days. Should you consider that your request regarding the exercise...