Legal

Privacy and Personal Data Protection Policy

Version 1.0 · Last updated: November 12, 2026

At BLUPUY S.A.C. (“Blupuy”) we respect your privacy and protect your personal data. This Policy explains what data we collect through our website blupuy.com, what we use it for, who we share it with and how you can exercise your rights, in accordance with Peruvian Law No. 29733 on Personal Data Protection and its Regulations, approved by Supreme Decree No. 016-2024-JUS.

1. Owner of the personal data bank

• Company nameBLUPUY S.A.C.
• Tax ID (RUC)20613640381
• AddressJr. Enrique López Albújar N.° 1615, Int. 101, Urb. Las Brisas (block 14 of Av. Mariano Cornejo), Lima, Lima, Lima, Peru
• Contact emailinfo@blupuy.com

2. Personal data we collect

When you fill in our forms to request a demo or talk to an advisor, we collect:

• First and last name.
• Company or organization.
• Email address.
• Phone or WhatsApp number (optional).
• Information about your needs: solution of interest or number of real estate units you manage (optional).
• Your consent preferences.

For security reasons and to prevent fraud and automated submissions (spam), we also record the IP address, browser type, the page the form was sent from, and the date and time of submission.

We do not request sensitive data. Please do not include it in your messages.

3. Purposes of processing

Necessary purposes, essential to handle your request:

• Handling your request for a demo or for contact with a sales advisor.
• Contacting you by email, phone or WhatsApp about your request.
• Sending you a confirmation that we received your request.
• Managing any pre-contractual and commercial relationship arising from your request.
• Protecting the security of the website and preventing fraud and automated submissions.

Additional purposes, only if you give your consent in the optional checkbox:

• Sending you commercial information, news, event invitations and promotions about Blupuy products and services.

Declining the additional purposes does not affect how we handle your request in any way.

4. Consent

We process your data based on your free, prior, express, unequivocal and informed consent, given by ticking the corresponding checkbox in the form. Consent for additional purposes is separate and optional. You may revoke either one at any time, without retroactive effect, following the procedure in section 9.

5. Data bank

Your data is included in the personal data bank called “Customers and Prospects” (“Clientes y Prospectos”), owned by BLUPUY S.A.C. and registered with Peru's National Registry of Personal Data Protection under code [REGISTRATION CODE].

6. Recipients, processors and cross-border transfers

Blupuy does not sell, rent or transfer your personal data to third parties. To fulfil the purposes described, we may rely on the following providers, acting as data processors under our instructions and bound by confidentiality and security obligations:

• Our own infrastructure: the website, the form and the database run on servers managed by Blupuy in Peru.
• Brevo (Sendinblue SAS, France): email delivery service, used so that our messages arrive correctly. This involves a cross-border transfer of your email address and the message content to the European Union, which provides an adequate level of protection under its General Data Protection Regulation (GDPR).
• Google Fonts (Google LLC, USA): when our site loads, your browser downloads fonts from Google servers, which may receive your IP address.

We may also disclose your data to competent authorities when required by law or court order.

7. Retention period

We keep prospect data for as long as necessary to handle your request and manage the commercial relationship, and for no longer than two (2) years from our last contact, unless you revoke your consent earlier. After that period we will delete or anonymize it. If you become a customer, we will keep the necessary data for the periods required by tax, accounting and other applicable regulations.

8. Security measures

We apply technical, organizational and legal measures to protect your data against loss, alteration, or unauthorized access or processing, including:

• Encrypted communication (HTTPS).
• A database that is not exposed to the internet.
• Access restricted to authorized staff.
• Regular backups.
• Controls against automated submissions.

9. Your rights and how to exercise them

As the owner of your data you may at any time exercise your rights of information, access, rectification, cancellation and objection (ARCO rights), revoke your consent and exercise any other rights granted by applicable law.

To do so, send a request to info@blupuy.com with the subject “Personal data protection”, or submit it at our address. Your request must include:

• Your full name, with a copy of your ID document or, if acting through a representative, the document proving representation.
• The right you wish to exercise and a clear description of your request.
• An address or email to receive our reply.

We will respond within the time limits set by applicable law. If you believe your request was not properly handled, you may file a complaint with Peru's National Authority for Personal Data Protection (Ministry of Justice and Human Rights).

10. Minors

Our services are aimed at companies and professionals. We do not knowingly collect data from minors. If we find that we have done so without the authorization required by law, we will delete it.

11. Cookies and similar technologies

Our site does not use tracking, advertising or analytics cookies. Only technical mechanisms strictly necessary for it to work may be used. Third-party resources loaded by the site are described in section 6.

12. Changes

We may update this Policy to reflect regulatory changes or changes in our services. We will publish the current version on this page with its update date. If the changes affect the purposes for which you gave consent, we will ask for it again.

13. Contact

If you have questions about this Policy or how we process your data, email us at info@blupuy.com.