Privacy Policy

1. Definitions

• Service: Set of activities and benefits provided by YAVENDIO through the platform.

• Platform: Software or system for sales management and customer support managed by YAVENDIO, accessible through https://ya.onl/

• Website: Informational website of YAVENDIO available at https://www.yavendio.com/

• User: Any natural or legal person who contracts YAVENDIO's Services to use the platform. 

  
  

2. Data collected through the platform

Users' personal data may be collected through the YAVENDIO platform in the following ways:

2.1. Creating an account

When a User registers on the YAVENDIO platform, they must provide their first and last name, email address, and phone number along with the corresponding country code. After verification, they must create a password. 

The User must then select the desired subscription plan in order to complete the purchase.

2.2. Subscription purchase

When proceeding with payment for the selected subscription, the following data will be collected:

• Card number

• Expiration date

• Security code (CVV)

• First and last names

• Email address

• Mobile phone number

• Installments to be paid

It should be noted that this information is not stored by YAVENDIO, as the payment gateway is responsible for collecting such data in order to complete the transactions carried out by users.

2.3. Other methods of collection

If personal data is collected through telephone calls, email, and/or social media, the purpose of such collection will be to respond to inquiries about YAVENDIO's services and to formalize contractual relationships. 

It is important to indicate that any data processing carried out through external platforms (such as WhatsApp or social networks) is subject to the policies and terms established by those platforms.

2.4. Cookies

Users may browse the website https://www.yavendio.com/ and access the platform https://ya.onl/ without restrictions. In this context, YAVENDIO collects information through its own cookies on both domains.

To ensure an efficient and transparent browsing experience, both the YAVENDIO website and platform use cookies and related technologies (hereinafter, "cookies"). These cookies enable the technical functioning of the website and/or platform, improve its services, personalize content, and generate statistical information.

A cookie is a text file that is stored on your device when you access a website, such as your computer, mobile phone, or other device with Internet access. These files allow the User's browser to be recognized, their preferences to be remembered, and, in some cases, the security of the session to be improved or specific site functions to be facilitated.

2.4.1. Types and purpose of cookies used

Cookies may be classified according to their purpose as follows:

1. Necessary or technical cookies: These enable the website or Platform to function, allowing navigation and the use of its basic functions. These types of cookies do not collect personal information and cannot be disabled through the Platform's settings. Users may disable them directly from their browser, although this may limit the functioning of the website.

2. Analytical or measurement cookies: These allow YAVENDIO to determine the number of users and conduct statistical monitoring and analysis of how the website is used in order to improve its structure and content. The information is processed anonymously and is used solely for internal evaluation purposes. These cookies are activated only with the prior, free, express, informed, and unequivocal consent of the user.

3. Personalization cookies: These enable the user to access the website with predefined settings based on criteria such as language, browser type, or regional settings. Their main purpose is to facilitate and optimize the user experience, without involving the collection of sensitive or identifiable information.

4. Advertising or marketing cookies: These allow personalized ads to be displayed based on the user's browsing profile and enable the measurement of advertising campaigns effectiveness. They are installed only with the user's prior consent and may be first-party or third-party cookies (e.g., from Google, Meta, YouTube, or other digital service providers).

2.4.2. Consent

On the Public Website (yavendio.com): The use of necessary or technical cookies is essential to ensure the proper functioning of the Website. Analytical, personalization, and advertising or marketing cookies require the user's prior, free, express, informed, and unequivocal consent.

On the Platform with authenticated users (ya.onl):

• Technical cookies: Active by default, necessary for the execution of the service contract.

• Analytical cookies: Active by default to improve the product based on our legitimate interest. Users may deactivate them without affecting the Platform's functionality.

• Personalization cookies: Active by default as part of the contracted Service.

• Marketing cookies: Require the user's prior, free, express, informed, and unequivocal consent.

2.4.3. Duration and storage 

There are session cookies, which are automatically deleted when the browser is closed, and persistent cookies, which remain stored for a maximum period of up to two (2) years, depending on their type and purpose. At the end of this period, cookies are automatically deleted from the system.

2.4.4. Management and deactivation of cookies

Cookies are managed in the options or preferences of each browser, usually found in the “Privacy,” “Security,” or “Website Settings” sections. It should be noted that deactivating certain cookies may affect the proper functioning or availability of certain content or services on the website or Platform.

2.4.5. Processing and transfer of information

The information collected through cookies may be used by YAVENDIO and, where applicable, by third-party technological service providers (as specified in section 5 of this document) with whom YAVENDIO maintains contractual agreements on confidentiality and data processing in accordance with applicable regulations.

YAVENDIO does not use cookies to collect sensitive personal data or to carry out automated processing that produces legal effects on the user without their prior consent.

3. Purposes of personal data processing

The personal information provided by users is used for:

3.1. Necessary Purposes.

• Manage contractual relationships and ensure the optimal provision of the services offered. This includes the proper administration of subscriptions.

• Authenticate user´s identity when they log in and verify the accuracy of the information registered, thereby maintaining the security and integrity of the Platform.

• Maintain effective communication with users. This allows us to inform users about important updates, new services, or to resolve any inquiries in a timely manner.

• Continuously improve the functionality and content of the Platform. For this purpose, user information is dissociated or anonymized, allowing us to evaluate the user experience and to optimize the Website and/or Platform.

• Optimize website navigation and usage through the use of cookies and other technologies.

• Provide adequate customer support. 

• Carry out necessary data transfers. In certain cases, personal information may be shared with national or international companies, such as key suppliers or strategic partners, when this is essential for the proper provision of services.

• Disclose data to public authorities if required by applicable regulations or legal mandates, always acting in strict compliance with the applicable regulatory framework.

3.2. Additional Purposes.

With the user's prior and express consent, advertising communications may be sent to inform them about services or promotions that may be of interest to them.

4. Mandatory nature of data processing 

It is important to emphasize that the collection of certain personal data is mandatory and relevant, as such data is essential in order to fulfill the purposes detailed in this Policy. 

If the requested data is not provided, YAVENDIO will not be able to fulfill the services or interactions required. In cases where providing a piece of information is optional, this will be clearly stated at the time of collection.

5. Transfer of Personal Data to third parties

In order to fulfill the necessary purposes, YAVENDIO processes personal data directly and/or through its service providers -whether located domestically or internationally-. These providers, whether domestic or foreign, will act as personal data processors, in compliance with personal data regulations, the applicable legislation in the country where the processing is carried out (if carried out abroad), and the instructions given by YAVENDIO.

The list of YAVENDIO's providers is displayed in the following section (5.1). If necessary, this list will be updated in a timely manner through this same channel.

Additionally, users' personal data may be shared in the following cases, and always in accordance with applicable personal data protection regulations:

• Requests for information made by authorities and/or regulators in the exercise of their functions and within the limits of their competences.

• Requests for information supported by judicial, legal, and/or administrative orders.

• Requests for information in accordance with applicable legal regulations.

5.1. Transfers to third parties and cross-border data flows

In order to fulfill the services offered by YAVENDIO, data transfers to third parties and cross-border flows of personal data are carried out with the companies detailed below:

5.2. Public Entities

YAVENDIO may transfer personal data to judicial, administrative, and/or law enforcement authorities, in the event that this is requested by applicable regulations or by an administrative and/or judicial mandate.

6. Retention period for personal data

Personal data will be retained as long as necessary to fulfill the purpose for which it was collected. However, this period may end earlier if the user decides to exercise their right to cancel or delete their account, unless there are legal circumstances that prevent such deletion. 

Information that has been anonymized or dissociated will be retained indefinitely, as it cannot be linked to a specific user and is used exclusively for statistical and service improvement purposes.

7. Confidentiality of personal data

YAVENDIO is firmly committed to the confidentiality of the personal data collected. Access to this information is strictly limited to team members who need to know it in order to perform tasks related to the purposes described. Technical and organizational security measures are implemented. These measures are designed to prevent alteration, loss, or unauthorized access to data, considering the current state of technology and the nature of the information.

8. Appointment of Personal Data Officer or Delegate

YAVENDIO has appointed an Officer or Delegate in charge of personal data protection, who will be responsible for ensuring compliance with applicable regulations on privacy and information security. 

This officer is also responsible for addressing inquiries, providing guidance, and resolving concerns related to the processing of personal data.

Their contact information is as follows:

Name: Terry Cruz

Email address: dpo@yavendio.com

9. Acceptance of this Policy

By accepting this Privacy Policy, users declare that they have granted their prior, free, express, informed, and unequivocal consent for the processing of their personal data, as detailed in this document. 

Users also declare that they are over eighteen (18) years of age and assume full responsibility for the truthfulness of this statement. 

Furthermore, Users declare that the personal data they have provided is true, complete, accurate, and up to date, and they assume responsibility for the integrity of such information, as well as for any consequences arising from non-compliance with this statement.

10. Updates and Validity of the Policy

YAVENDIO reserves the right to make modifications and/or updates to this Privacy Policy. These revisions may be based on the company's own criteria or on the need to comply with new applicable legal regulations. 

It is important to note that the most recent and current version of the Policy will always be published on its platform. In the event of any material changes or updates, they will be communicated through the Platform so that users are duly informed.

Privacy Notice for Peru (Law No. 29733, Personal Data Protection Law)

“YaVendió!” (“YAVENDIO”) is a platform owned by ZAFIRO TECH S.A.C., identified with RUC No. 20611379014 and with registered address at Jr. Johann Sebastian Bach No. 168, Urb. Los Alamos de Santa Teresa, district of Santiago de Surco, province and department of Lima, Peru.

The processing of personal data of Users located in Peruvian territory shall be governed by the legal provisions established by Law No. 29733, Personal Data Protection Law, and its Regulations approved by Supreme Decree No. 016-2024-JUS, as well as any other applicable Peruvian regulations in force.

1. General concepts according to Law No. 29733

• Personal data: Any numerical, alphabetical, graphic, photographic, or acoustic information about personal habits, location, online identifiers, or any other type of information concerning the physical, economic, cultural, or social aspects of natural persons that identifies them or makes them identifiable. A person is considered identifiable when their identity can be verified directly or indirectly from the combination of data through means that can be reasonably used.

• Sensitive data: Information relating to genetic or biometric data, moral or emotional data, facts or circumstances regarding emotional or family life, personal habits, union membership, physical or mental health, or other similar information that affects their privacy

• Personal data bank: A set of data belonging to natural persons, whether computerized or not, structured according to specific criteria, which allows access to personal data without disproportionate effort, whether centralized, decentralized, or distributed functionally or geographically.

• Personal data processing: Any operation or set of operations, automated or not, performed on personal data or sets of personal data.

• Personal data owner: Natural person to whom the personal data corresponds. 

• Personal data bank owner: Natural person, legal entity under private law, or public entity that determines the purpose and content of the personal database, its processing, and security measures. 

• Data processor: Natural person, private legal entity u, or public entity that processes data on behalf of or at the request of the data controller or personal database owner.

2. Personal databases

Personal data, whose purpose, content, and processing are determined by YAVENDIO, will be incorporated into the databases that form part of its information system and processed exclusively to fulfill the purposes described in this Policy. 

All information collected is stored securely in YAVENDIO's personal databases. The databases containing the  aforementioned personal data are registered, under the ownership of YAVENDIO, in the National Registry of Personal Data Protection of the National Authority for Personal Data Protection of the Ministry of Justice of Peru.

3. Quality of Personal Data

Personal data must be truthful, current, accurate, complete, and correct. YAVENDIO collects this data exclusively for the purposes set forth in this document and not for purposes other than or incompatible with those provided herein.

In accordance with  the Principle of Quality of Personal Data, and in order to have the necessary and/or updated information for the fulfillment of contractual and/or commercial and/or legal obligations, personal data is obtained lawfully through:

• Information provided directly by the owner of the personal data,

• Personal data provided by authorized third parties, and/or

• Public and lawful sources.

In such cases, the information may solely be used for the purposes described, provided that the data subject has given their express consent where applicable, or where the processing falls within the exceptions to consent provided for in the applicable personal data protection regulations. Likewise, the information may be transferred to entitled third parties in order to fulfill the authorized purposes.

Data subjects are obliged, in their relationship with YAVENDIO, to provide truthful, current, accurate, complete, and correct data, and are responsible for the authenticity and validity of such data, as well as for keeping it duly updated.

YAVENDIO shall not be liable for the veracity, accuracy, or authenticity of information that has not been directly produced by it and, consequently, shall not be liable for any damages and/or losses arising from the use of such information.

4. Complaints Book (Libro de Reclamaciones)

When filing a claim or complaint through the platform's virtual Complaints Book, the following user’s personal data is collected:

• First and Last Names

• Cell Phone Number

• Type and Number of Identity Document

• Email Address

5. Transfer of personal data: Third-party providers in Peru

YAVENDIO transfers personal data to Peruvian companies in order to properly provide the services.

The companies that access this information are required to comply with applicable personal data regulations and to maintain the security and confidentiality of such information. Likewise, they may only access this data when necessary to fulfill the purposes detailed in this Policy.

6. Rights of personal data owners

As owners of the personal data collected, Peruvian law grants users the ability to exercise rights regarding their personal data. These rights include, among others, the following:

• Access: Users have the right to know whether their personal data is being processed and, if so, to access it.

• Updating and Rectification: Users may request the correction of their personal data if it is incomplete, inaccurate, or outdated.

• Cancellation or Deletion: Users have the right to request the deletion of their personal data if it is no longer necessary for the purposes for which it was collected or if they decide to revoke their consent.

• Inclusion: Users may request the addition to the personal data bank of any relevant information that is missing, has been omitted, or has been deleted..

• Information: Users have the right to know what personal data is being processed, how it is being processed, and the source of such data, especially if it was not provided directly by them.

• Opposition: You may object to the processing of your personal data if such processing affects your fundamental rights and freedoms, lacks a legal basis, or is used for unsolicited advertising purposes.

• Portability: Users have the right to request that their personal data be provided to them in interoperable formats, thus facilitating its transfer to other entities. It should be noted that this right does not apply to information generated exclusively by YAVENDIO (for example, anonymized data for statistical or service improvement purposes) that has not been provided directly by the user.

• Revocation or Denial: Users may revoke their consent to the processing of personal data at any time, or deny its use for additional purposes that have not been previously authorized.

• Suspension: Users may request the temporary suspension of the processing of their personal data if it is inaccurate or irrelevant to the purposes for which it was collected.

• Objective processing: Users have the right not to be subject to decisions that produce legal or discriminatory effects, or automated evaluations of personal aspects without human intervention. 

• Automated decisions: Users may request an explanation of decisions made through automated processes, request their review by a person, and question them.

It is important to note that the exercise of these rights might be subject to exceptions. This may occur, for example, if the user has an active contractual relationship with YAVENDIO, if the data is necessary to respect freedom of expression and information, if it is required to comply with current legal provisions, if the information is necessary to take legal action, or when reasons of public interest exist.

Privacy Notice for Brazil (LGPD – Lei Nº 13.709/2018)

By using the YAVENDIO platform, the user understands that their personal data will be processed and shared as described in this document and accepts its terms.

The processing of personal data of Users located in Brazilian territory shall be governed by the Lei Geral de Proteção de Dados Pessoais (LGPD), Law No. 13,709/2018, in the following scenarios:

• When the processing operation is carried out in Brazilian territory.

• When personal data is processed for the purpose of offering or supplying goods or services, or processing data of individuals located in Brazil.

• When the personal data being processed has been collected in Brazil. 

All processing of personal data carried out by YAVENDIO is based on the Guiding Principles of current Peruvian legislation, which provides an adequate level of data protection. Notwithstanding this, the data processing is based on the provisions of Article 7 of Brazilian Law No. 13,709/2018, as detailed below:

• When the data owner has granted prior authorization.

• To comply with obligations imposed by Brazilian law.

• To perform a contract or preliminary procedures related to a contract to which the data owner is a party.

• To support, promote, and ensure the proper functioning of the services, provided that the processing is carried out in a manner consistent with the data owner’s legitimate expectations.

On the other hand, YAVENDIO guarantees its users their rights as owners of personal data as stated in Article 18 of the LGPD. Therefore, users may, free of charge and at any time,:

• Oppose the processing of their personal data at any time;

• Confirm the existence of personal data processing, in a simplified manner or in a clear and complete format;

• Access their personal data, requesting a legible copy in printed form or by secure and reliable electronic means;

• Correct their personal data, requesting its editing, correction, or updating;

• Limit their personal data when it is unnecessary, excessive, or processed in violation of the law through anonymization, blocking, or deletion;

• Revoke their consent, withdrawing their authorization for the processing of your data.

YAVENDIO processes personal data directly and/or through its service providers, either located domestically or internationally, to fulfill the necessary purposes. YAVENDIO transfers personal data to Brazilian companies to ensure proper provision of their services. The companies that access this information are required to comply with the laws of the country where the personal data is processed (Brazil) and to maintain the security and confidentiality of such information. Likewise, they may only access this data when necessary to fulfill the purposes detailed in this Policy.

Regional privacy notice for Delaware, United States (Delaware Personal Data Privacy Act)

By using the YAVENDIO platform, the user understands that their personal data will be processed and shared in the manner described in this document and agrees to its terms.

The processing of personal data of Users located in the State of Delaware, USA, shall be governed by the Delaware Personal Data Privacy Act (“DPDPA”).

The DPDPA provides Delaware consumers with the following privacy rights:

• The right to confirm whether or not YAVENDIO processes their personal data, as well as to access such data.

• The right to correct inaccuracies in their personal data, taking into account the nature of the personal data and the purpose of its processing.

• The right to delete personal data about the user.

• The right to obtain a copy of the user’s personal data processed by YAVENDIO , in a portable format and, to the extent technically possible, in a format that allows the user to transmit the data to another controller without hindrance. In this case, processing must be carried out by automated means.

• The right to disable the processing of their personal data for the following purposes:

  • Targeted advertising;

  • Sale of personal data;

  • Profiling in support of fully automated decisions that produce legal effects or similarly significant effects on the user.

All processing of personal data carried out by YAVENDIO is based on the Guiding Principles of current Peruvian legislation, which provides an adequate level of data protection. Notwithstanding this, the data processing is based on the provisions of the Delaware Personal Data Privacy Act (DPDPA).

YAVENDIO processes personal data directly and/or through its service providers, either located domestically or internationally, in order to fulfill the necessary purposes. YAVENDIO transfers personal data to US companies to ensure proper provision of their  services. The companies that access this information are required to comply with the laws of the state where the personal data is processed and to maintain the security and confidentiality of such information. Likewise, they may only access this data when necessary to fulfill the purposes detailed in this Policy.