Privacy Policy

At Hicafi Asesores y Consultores S.A.C. ("Hicafi", "we") we recognize the importance of protecting the privacy of individuals whose personal data we process in connection with our accounting, tax, and audit services. This Privacy Policy describes how we collect, use, store, and protect such information, in compliance with Law No. 29733, Peru's Personal Data Protection Law, and its Regulations approved by Supreme Decree No. 003-2013-JUS.

01Data controller

The party responsible for the processing of personal data collected through this website and through the provision of our services is Hicafi Asesores y Consultores S.A.C., domiciled in Miraflores, Lima, Peru, with contact email contacto@hicafi.com. Hicafi is registered, as applicable, with the National Authority for the Protection of Personal Data of the Ministry of Justice and Human Rights.

02Data we collect

Depending on your relationship with Hicafi (site visitor, prospect, or client), we may collect the following categories of personal data:

• Identification and contact data: first and last names, company name, national ID (DNI) or tax ID (RUC), address, phone number, and email address.
• Data provided in forms: information entered in the contact form or when requesting a consultation, including the reason for the inquiry.
• Accounting and tax data: financial, accounting, and tax information that the client provides for the delivery of our professional services.
• Browsing data: IP address, browser type, pages visited, and cookies, as detailed in our Cookie Policy.
• Communication data: messages exchanged via WhatsApp, email, or phone in connection with the business relationship.

03Purpose of processing

The personal data collected is used for the following purposes:

• Responding to inquiries and requests for information made through the website, WhatsApp, email, or phone.
• Providing the accounting, tax planning, financial audit, business consulting, and company incorporation services contracted by the client.
• Preparing proposals, quotes, and service agreements.
• Complying with legal, tax, and regulatory obligations applicable to Hicafi and its clients.
• Sending informational or commercial communications, only when the data subject has given consent for this purpose.
• Improving the website browsing experience and performing statistical usage analysis.

04Legal basis

The processing of personal data is based on the free, prior, express, informed, and unequivocal consent of the data subject, given when completing a form, starting a WhatsApp conversation, or engaging our services. Likewise, in the case of clients' accounting and tax data, processing is also based on the performance of the professional services agreement and compliance with legal obligations applicable to accounting activity.

05Data retention

Personal data will be retained for as long as necessary to fulfill the purpose for which it was collected, and thereafter for as long as the contractual relationship with the client continues. Once that relationship ends, data will be retained for the periods required by Peruvian tax, accounting, and corporate regulations, and will be securely deleted or anonymized once no longer necessary.

06ARCO rights

In accordance with Law No. 29733 and its Regulations, the data subject has the right to exercise, at any time and free of charge, the following rights:

• Access: to know what personal data of theirs is processed by Hicafi and for what purpose.
• Rectification: to request correction of inaccurate, incomplete, or outdated data.
• Cancellation: to request deletion of their personal data when it is no longer necessary for the purpose that motivated its processing.
• Opposition: to object to the processing of their personal data for specific purposes, including the sending of commercial communications.

These rights may be exercised through a written request addressed to Hicafi in accordance with the procedure indicated in section 10 of this policy. Hicafi will respond to the request within the timeframes established by Law No. 29733.

07Data transfer to third parties

Hicafi does not sell or transfer for consideration the personal data of its clients or users. However, your data may be shared with third parties in the following circumstances:

• Technology service providers that support the operation of the website, information storage, and communication tools (for example, hosting or messaging services), subject to confidentiality obligations.
• Competent public entities, when required by a legal mandate or request from the corresponding authority (for example, SUNAT or other regulatory bodies).
• External advisors connected to the delivery of the contracted service, when strictly necessary and with due confidentiality guarantees.

08Information security

Hicafi adopts reasonable technical, organizational, and legal measures to protect personal data under its processing against unauthorized access, loss, alteration, or improper disclosure. These measures include restricted access to information, the use of secure connections on the website, and staff training on data protection matters. However, no electronic transmission or storage system is completely infallible, so Hicafi cannot guarantee absolute security.

09Changes to this policy

Hicafi may update this Privacy Policy to reflect regulatory, operational, or technological changes. Any modification will be published on this same page, indicating the date of its last update. We recommend reviewing this policy periodically.

10Contact to exercise rights

To exercise your ARCO rights, submit inquiries, or file complaints related to the processing of your personal data, you may write to us at:

• Email: contacto@hicafi.com
• Phone: +51 908 901 648
• Address: Miraflores, Lima — Peru

You may also write to us directly through our contact form.