Privacy and personal data protection policy
Updated: November 11, 2026
This policy explains how ARC Talent & Technology S.A.C. processes personal data relating to arctech.pe and its contact form. Spanish is the primary version; translations are provided for reference.
1. Controller and contact
ARC Talent & Technology S.A.C., with its address at Calle Almirante Lord Nelson N.º 130, Dpto. 901, Miraflores, Lima, Peru, is the controller of the data received through this website. For privacy questions or rights requests, email arctechperu@gmail.com.
2. Applicable framework and principles
This policy is drafted under Peru’s Law No. 29733 on Personal Data Protection and its Regulations approved by Supreme Decree No. 016-2024-JUS. Processing must respect legality, consent, purpose limitation, proportionality, data quality, security, access to remedies and an adequate level of protection.
3. Data collected
The form requires your full name, company, email address, service of interest and a description of your needs to handle your inquiry. A phone number is optional. Technical data such as IP address, time, browser and security logs may also be processed to operate and protect the website. We do not request sensitive data, identification documents or résumés through this form. Do not include these or other people’s data without authorization.
4. Purposes and grounds
We use data to receive and respond to inquiries, understand needs, arrange meetings and prepare requested proposals. Consent is given by selecting the checkbox before submission; it is not preselected. Without mandatory details or authorization, we cannot handle an inquiry through the form. Processing necessary for legal obligations or contractual relationships will rely on the statutory exceptions where applicable. Data will not be used for incompatible purposes.
5. Marketing and other services
An inquiry does not subscribe you to advertising or authorize unsolicited marketing. Any additional marketing purpose requiring consent will be explained separately and will be optional. Recruitment, training or services requiring other data will have their own notices and authorizations. This policy alone does not authorize creating a candidate database.
6. Storage, recipients and providers
Inquiries are sent to arctechperu@gmail.com and form part of ARC’s inquiry and business contact records. The form has no website database, but emails and provider logs may contain personal data. Access is limited to authorized staff handling the request. Vercel hosts the website and runs the form; Resend sends messages; Google/Gmail receives and manages them. We do not sell personal data. Disclosure to authorities may occur when legally required.
7. International transfers
Vercel, Resend and Google are providers established in the United States and may process data there or elsewhere through their networks and subprocessors. Using the form involves international transmission or access. ARC undertakes to maintain contractual safeguards and meet cross-border requirements under Peruvian law, taking into account its providers’ processing locations and terms. Consent does not remove those obligations. Information about recipients and safeguards can be requested by email.
8. Retention
Inquiries that do not lead to a contract will be retained for up to twelve months after the last interaction, then deleted or anonymized unless legal duties or justified claims require limited retention. Contractual relationships follow the legal periods and those needed for performance and liability. Technical logs and backups follow limited retention cycles according to their purpose and provider terms. Deletion is coordinated with those cycles.
9. Rights and requests
You may request information, access, rectification, updating, inclusion, cancellation or deletion and objection, withdraw consent and exercise portability where legally applicable. Email arctechperu@gmail.com with the subject “Data protection”, your name, a specific request and a reply channel. Proportionate identity information will only be requested if necessary; do not send an identity document in advance. Withdrawal does not affect earlier lawful processing or legally required retention. Requests will be handled within the Regulations’ deadlines, with notice of justified extensions where applicable. If no answer is provided or you disagree, you may seek protection from Peru’s National Authority for Personal Data Protection.
10. Security and confidentiality
ARC undertakes to apply technical and organizational measures proportionate to risk, including mailbox and platform access controls, credential management, staff confidentiality, updates and incident handling. The website uses HTTPS and server-side form validation. No system is completely secure. Incidents will be assessed and reported to the authority and affected people where required and within the statutory time limits.
11. Cookies, links and children
This version includes no advertising, optional analytics or commercial trackers. Providers may process technical information needed for operations and security. Nonessential technologies will be disclosed and any required consent obtained before activation. LinkedIn links open an external website subject to its own policies. The form is for adult professionals and representatives and is not designed to collect children’s data.
12. Updates and sources
Changes will be published here with an updated date. New consent will be requested before processing for changed purposes where required. See Law No. 29733 and the Regulations approved by Supreme Decree No. 016-2024-JUS.