Privacy policy

01. Data controller

The controller of the personal data collected through this website is:

• Legal name: Wanzy Studio E.I.R.L.
• RUC (taxpayer number): 20614635313
• Trade name: Wanzy Studio
• Registered address: Piura, Peru
• Website: https://www.wanzystudio.com
• Contact and privacy email: jhair@wanzystudio.com

Wanzy Studio is a design and software engineering studio based in Peru, specializing in web development, mobile apps, e-commerce, automation, artificial intelligence and technology training for businesses.

This policy applies to Wanzy Studio's corporate website and to the data collected through its own business contact channels.

02. What information we collect

We collect only the information needed to answer inquiries, understand business needs, prepare proposals and maintain professional communication.

Information you give us

When you fill in our contact form, we ask for:

• Name.
• Email address.
• Service or type of project you are interested in.
• Description of your inquiry or need.

Optionally, you can provide:

• Phone or WhatsApp number.
• Name of your company or brand.
• Industry or business sector.
• Country.
• Current stage of the project.
• Estimated timeline.
• Approximate budget.

We may also receive additional information that you choose to share voluntarily by email, WhatsApp, in meetings or in business conversations.

We do not request sensitive personal data through our form. We recommend that you do not include medical information, passwords, confidential financial information, identity documents or other sensitive data that is not needed to handle your request.

Technical and browsing information

When you visit our site, our infrastructure and security providers may process the technical information needed to serve the pages and protect the service, including:

• IP address.
• Browser type and version.
• Technical information about the device.
• Date and time of access.
• Pages requested.
• Information needed to detect automated, abusive or potentially malicious traffic.

This data is used mainly for the operation, maintenance and security of the infrastructure.

We also measure visits and page performance in aggregate with Cloudflare Web Analytics, which does not use cookies or storage in your browser.

Client information

If we later enter into a contractual relationship, we may process additional information needed to formalize agreements, manage the project, coordinate deliverables, issue payment receipts and comply with legal or tax obligations.

The processing of personal data within the systems we build for our clients is governed by the responsibilities and terms of each project.

03. How we use your data

We use your personal data for the following purposes:

1. Answering inquiries sent through our website or contact channels.
2. Understanding the context, needs and goals of a project.
3. Assessing the feasibility of a request and preparing proposals, quotes or recommendations.
4. Arranging meetings, calls and communications related to your inquiry.
5. Following up on requests and proposals while a business conversation is ongoing.
6. Managing contractual relationships and providing the agreed services, where applicable.
7. Complying with applicable legal, administrative or tax obligations.
8. Keeping our digital channels secure and operational.

We do not sell, rent or trade your personal data.

We do not use the data provided in the form for mass advertising campaigns or to add you automatically to marketing lists.

If we offer newsletters, promotional communications or other subscription services in the future, we will ask for the corresponding consent where required.

04. Consent and data processing

When you fill in the contact form, we ask for your consent to process the data you provide in order to answer your inquiry and manage the related communication.

The information in the form is divided into required and optional fields.

The required fields are needed to identify your request and to have a way to reply. If you do not provide them, we cannot process the form correctly.

The optional fields help us understand your project better or contact you through additional channels, but they are not needed to start a conversation.

When you write to us directly by email or other means, we use the information provided to handle your communication, based on consent or the other legally applicable grounds.

When there is a contractual relationship, certain processing may take place in the cases permitted by law without asking for new consent, especially when it is needed to perform the contract or comply with legal obligations.

You can withdraw your consent at any time, without retroactive effect, by writing to the email address given in this policy.

05. Technology providers and third parties

To operate our website and handle the requests we receive, we use specialized technology services.

Cloudflare

Provides hosting infrastructure, content delivery, form processing and security protection.

Cloudflare Turnstile

Used to protect the form against spam and automated submissions. During verification it may process technical information about the browser, the connection and the device to identify potentially abusive traffic.

You can find more information about this technology at https://www.cloudflare.com/turnstile-privacy-policy/.

Cloudflare Web Analytics

Measures visits and page performance on the site in aggregate, without using cookies or storage in your browser.

Resend

Processes the information needed to deliver form messages to the studio's email inbox.

Cal.com

Lets you book initial calls or meetings. When you choose this option, you use Cal.com's service and provide the information needed to manage your booking, under that platform's applicable terms and privacy practices.

WhatsApp

If you voluntarily give us your number and we choose this channel to reply, the communication will also be subject to the terms and privacy practices of WhatsApp, a Meta service.

These providers may process only the data related to the functions they perform, under their respective contractual terms and applicable obligations.

We may also disclose information when there is a valid legal obligation or a request from a competent authority.

We do not share personal data with third parties for their own advertising.

06. International processing and transfers

Wanzy Studio operates from Peru, but some of the technology providers we use for hosting, security, email and scheduling may keep infrastructure or carry out processing in other countries, including the United States.

As a result, certain personal data may be processed or transferred internationally for the purposes described in this policy.

These operations will be carried out in compliance with the obligations and safeguards required by Peruvian personal data protection law.

The use of international providers does not authorize the use of your data for purposes other than those described.

07. How long we keep information

Messages sent through the contact form are delivered to the studio's email inbox.

The form does not currently keep its own database of messages on the website.

Inquiries and business requests: we keep messages for up to 12 months from the last communication when no business relationship results.

After that period, we delete them from our active records, unless there is a legal reason to keep them.

Clients and contractual relationships: when an inquiry becomes a contractual relationship, we keep the necessary information for the duration of the relationship and, afterwards, for the periods required by the applicable legal, tax, contractual or liability obligations.

Technical information: infrastructure, security and automated verification logs may have specific retention periods set by the security configuration and the terms of the relevant providers.

Deletion of information will be subject, where applicable, to the legal periods for retention, blocking and secure deletion.

You can ask us to delete your data before these periods end, in the cases established by applicable law.

08. Cookies and similar technologies

Our site uses infrastructure and security services that may use technical identification, verification or storage mechanisms needed for them to work.

These include Cloudflare Turnstile, whose purpose is to tell legitimate requests apart from automated traffic and protect the forms.

Certain security configurations may require cookies or other technical mechanisms to complete verification.

If you choose a color theme (light or dark), the site saves that preference in your browser's local storage. It stays only on your device and is not sent to our servers.

Cloudflare Web Analytics, which we use to measure visits in aggregate, does not use cookies or local storage.

We do not use form information to build advertising profiles or to show personalized advertising.

If we add analytics or advertising cookies or other tracking technologies that require consent, we will explain their characteristics and enable the appropriate consent mechanisms before turning them on.

You can manage or delete cookies and stored data in your browser settings. Disabling certain technical mechanisms may affect some security features or the sending of the form.

09. Information security

We apply reasonable technical and organizational measures to protect personal information against unauthorized access, loss, alteration, disclosure or misuse.

These measures include infrastructure protection mechanisms, access controls, communications over HTTPS and automated traffic prevention systems, according to the characteristics and configuration of our services.

Access to information about inquiries and projects is limited to authorized people who need it to handle the request or provide the relevant service.

Although we work to maintain a secure environment, no system connected to the Internet can guarantee that all risks are eliminated.

In the event of incidents affecting personal data, we will act in accordance with the assessment, documentation and notification obligations set out in the applicable regulations.

10. Your rights over your personal data

Under Law No. 29733 and its Regulations, you can exercise your personal data protection rights.

Right to information: know the conditions under which your data is collected and used.

Right of access: request information about the personal data we process about you.

Right to rectification: request the correction or update of inaccurate, incomplete or outdated information.

Right to cancellation: request the deletion of your data where legally appropriate.

Right to object: object to the processing of your data in the cases provided for by law.

You can also withdraw the consent you gave, when the processing is based on it.

How to exercise your rights

To submit a request, write to:

jhair@wanzystudio.com

State the right you want to exercise and provide the information reasonably needed to identify the data related to your request.

We may ask for additional information only when it is needed to verify your identity or process your request correctly.

We will handle requests within the time limits set by current Peruvian regulations.

If you believe your rights have not been properly addressed, you can turn to Peru's National Authority for Personal Data Protection (Autoridad Nacional de Protección de Datos Personales), following the corresponding procedure.

More information: https://www.gob.pe/anpd

11. Automated processing and artificial intelligence

Wanzy Studio offers professional services related to artificial intelligence, automation and systems development.

However, providing these services does not mean that the personal data submitted through the contact form is automatically used to train artificial intelligence models.

The site uses automated security mechanisms, such as Cloudflare Turnstile, to verify the legitimacy of submissions.

These checks may temporarily prevent a form from being sent when the security verification is not passed. In those cases, we offer alternative ways to contact us.

We do not use the contact form to make automated decisions that produce legal effects or similarly significant consequences for people.

The processing of personal data within specific artificial intelligence projects will be defined according to its purpose, scope, contractual agreements and applicable legal obligations.

12. External sites and client projects

Our site may include links to external platforms, professional profiles, technology providers and websites built for clients.

The projects published in our portfolio are shown for information and professional presentation purposes.

When you visit an external site, the processing of any data you provide directly to that site may be subject to its own privacy policy.

This policy does not replace the policies, agreements or terms that apply to independent platforms or to the systems we build for third parties.

13. Changes to this policy

We may update this Privacy Policy to reflect changes in our services, internal processes, technology providers or legal provisions.

We will publish the current version on this page and indicate the date of its last update.

When a change involves new processing purposes that require consent, we will ask for it in accordance with applicable regulations.

14. Contact

If you have any questions about this policy, want to know how we handle your data or need to exercise your rights, you can get in touch with us.