The purpose of this personal data privacy policy (the “ Privacy Policy ”) is to inform how KUDZU PERU SAC – KUDZU SAC (hereinafter, KUDZU), identified with RUC 20602533787 and with address at Av. el Polo No. 401 interior 408 (Floor 4), District of Santiago de Surco; Province of Lima and Department of Lima, processes the data of customers and/or web users through forms, information requests, registration and other personal data required during purchases and registration on our Website https://www.bekudzu.com/

REGULATORY FRAMEWORK

This Privacy Policy is regulated by Peruvian legislation and, in particular, by the following regulations:

• Law No. 29733, Personal Data Protection Law (the “ Law ”)
• Supreme Decree No. 003-2013-JUS, approving the Regulations of Law No. 29733 (the “ Regulations ”)
• Information Security Directive, approved by Directorial Resolution No. 019-2013-JUS/DGPDP.

STORAGE PERIOD

The personal data provided will be kept as long as necessary to fulfill the purpose for which it was collected. During the conversation period, KUDZU will carry out the necessary actions and operations to guarantee the security and protection of the data collected by users. No personal data will be used for any reason or purpose other than that indicated in section 4.

PURPOSE

KUDZU may collect personal data such as names, age, physical addresses, email addresses, cell phone and/or home numbers, RUC numbers, DNI or passport numbers or any other identification document, financial information related to payment methods or purchases on the Website. The personal data provided will be processed by KUDZU for the following purposes:

1. Manage the registration of Users on the Website to issue payment receipts, deliver products, notify promotions and analyze data. The data collected is as follows:

• Name and Surname
• Email
• Cellular phone
• DNI or RUC
• Address
• District
• Province

2. Manage the registration of Clients on the Website to issue payment receipts, deliver products, notify promotions and analyze data. The data collected is as follows:

• Name and Surname
• Email
• Cellular phone
• DNI or RUC
• Address
• District
• Province

Likewise, emails may be sent periodically through our site with special offers, new products and other advertising information that we consider relevant to you or that may provide you with some benefit. These emails will be sent to the address you provide and may be canceled at any time.

TRANSFER AND RECIPIENTS

With your permission, KUDZU shares your data nationwide with the KUDZU Administration and Marketing Team located in its offices in Lima, Peru, as well as with affiliated companies that provide services on the Website for the sending of advertising. KUDZU hires cloud services for the storage of personal data through SHOPIFY.COM whose servers are located in the United States. This information is encrypted by the server and does not in any way constitute cross-border processing of personal data.

SAFEGUARDING OF INFORMATION

KUDZU adopts the necessary security measures to guarantee the protection of the personal data provided in order to avoid its alteration, loss, treatment and/or unauthorized access, as established in the Law and the Regulation. KUDZU will not sell, assign or distribute the personal information that is collected without your consent, unless required by a judge with a court order.

DIVULGATION

KUDZU undertakes not to disclose or share the personal data provided without the prior consent, except in the following cases:

• Requests for information from authorities in the exercise of their functions and within the scope of their powers.
• Requests for information pursuant to court orders.
• Requests for information pursuant to legal provisions.

EXERCISE OF RIGHTS

The data owner may exercise the rights of access, rectification, opposition, cancellation, revocation and other rights enshrined in the Law and its Regulations, by means of a formal request addressed to KUDZU through: gestion@bekudzu.com Notwithstanding the foregoing, KUDZU may retain certain information of the data owner who requests cancellation, in order to serve as evidence in the event of a claim against KUDZU for liabilities arising from the processing of said information. The duration of said conservation may not exceed the legal prescription period for said liabilities, or failing that, may not exceed a period of more than 60 calendar days.

If you consider that you have not been assisted in the exercise of your rights, you may file a claim with the National Authority for the Protection of Personal Data, under the grounds and requirements indicated in the Law and its Regulations.

MODIFICATIONS TO THE PRIVACY POLICY

KUDZU expressly reserves the right to modify, update or supplement this Privacy Policy at any time. Any modification, update or addition to this Privacy Policy will be immediately published on the website, so that the data subject will be informed of what information is collected, how and under what circumstances KUDZU uses and processes their information.