Your data, with purpose and control.

1. Data controller and scope

UGCIA Agencia is a portal operated by Johan Alexander Salazar Baigorria, Natural person, with its address at Chiclayo. This policy applies to data provided on ugciaagencia.com, its business communications and its Complaints Book. External services a person chooses to use, such as WhatsApp or email, also apply their own policies. Your selected service country and purpose are saved only in your browser’s local storage. You can change these preferences or remove them by clearing site data. They are not automatically sent to the team and do not, by themselves, determine the applicable law or your legal status as a consumer.

2. Data we may process

Depending on the channel, we may process first and last names; company, job title and professional details; email, phone number and address; identity documents when necessary for a claim or to establish rights; information about the brand, campaign, requested service, budget, deadlines and message content; product or service details, amount, description and request; details of a minor's representative; voluntarily submitted files; and the date, time, sequential reference number, status and essential technical evidence.

We do not request sensitive data to provide a quote. Do not send health, biometric or financial data, passwords or unnecessary information about third parties.

3. Purposes

Data will be used to answer inquiries; prepare requested proposals; continue the conversation initiated by the person; carry out precontractual and contractual measures; register, process, respond to and retain claims or complaints; handle rights requests; protect the site against abuse; and comply with legal obligations or requests from authorities.

An inquiry or claim does not authorize advertising. Promotional communications will require separate, optional and revocable consent.

4. Databases and registration status

Enabling new stored-data forms requires identifying the databases, their controller and applicable registration, as well as processors and transfers. Updating the website provider does not establish registration or transfer previous databases or case files. Public intake through the Complaints Book remains disabled.

5. Required fields

Fields marked as required allow us to identify and handle the request. Once enabled, the Book will require a name, identity document, email for the receipt, system-generated date, product or service, amount, type, details and the consumer’s specific request. If a letter is selected, a postal address will also be required. A phone number will be optional and its absence will not prevent registration.

6. Recipients, processors and transfers

Johan Alexander Salazar Baigorria does not sell data. The prepared Book uses the site’s hosting and backend infrastructure and a D1 database for encrypted persistence. A transactional email provider is contemplated in the code, but no active credential or verified delivery exists; the effective processor, location, transfers and applicable safeguards will be published before activation. Once activated and tested, the email provided by the consumer will automatically receive the receipt. WhatsApp and email applications also apply their own policies.

7. Retention

• Inquiries and prospects: handled through the external channel voluntarily selected by the person; the site has no active stored-data commercial contact form. Its operational retention and deletion rule will be defined and published before one is enabled.
• Complaints Book: the form, attachments, response and receipts for at least 2 years from submission; if proceedings are ongoing, with restricted access until they are concluded.
• Rights requests and contracts: only for the time needed to handle the request, evidence the actions taken and comply with applicable legal duties and limitation periods.

When the applicable period expires, data will be deleted, anonymized or blocked if an obligation or dispute remains. No period is declared where a verifiable operational process does not yet exist.

8. Automated decisions

No solely automated decisions with legal or similar effects will be made, nor will profiling with such effects be carried out.

9. Security

The form and responses are encrypted at rest; the reference number, status and operational dates remain available for management. Abuse controls use a non-reversible HMAC representation of the connection address and do not store the clear IP. The handling console requires the authenticated and authorized owner identity and records access to each case. Backups, recovery, continuity, incident handling, key rotation and secure deletion must still be verified before opening public intake.

10. Rights and ARCO channel

To exercise rights to information, access, rectification, updating, inclusion, cancellation, objection, revocation or portability, where applicable, write to contacto@ugciaagencia.com with the subject “ARCO Rights”. Provide your first and last names, the right you wish to exercise, your specific request, an email address for notifications, the date and your signature, and verify your identity. If acting through a representative, attach proof of their authority. The procedure is free, and we will send an acknowledgment of receipt. Do not send identity documents through WhatsApp.

Maximum response periods: information, 8 days; access, 20 days; rectification, cancellation or objection, 10 days. Except for the right to information, a reasoned extension may be granted once, within legal limits.

11. Minors

Commercial forms are not directed at minors. A claim submitted by a minor must include the details of their father, mother or representative.

12. Changes and contact

The policy will be updated when processing activities, providers, transfers or legal requirements change. Contact: contacto@ugciaagencia.com; guidance via WhatsApp: +51 953 531 505.