Privacy Policy

This Privacy Policy describes how Figari S.A.C. (RUC 20615803708) ("we", "us", or "our") collects, uses, and protects your personal data when you use the website https://chasqui.store. We comply with Peruvian Personal Data Protection Law (Ley N° 29733) and its regulations.

1. Information We Collect

When you place an order or contact us, we may collect:

• Identification data: full name, document type and number (DNI/RUC)
• Contact data: email address, phone number
• Order data: student name and grade, product selection, pickup location
• Billing data: fiscal name and address (for invoice/factura only)
• Payment data: processed directly by Openpay; we do not store credit card numbers

2. How We Use Your Information

• Process and fulfill your yearbook and photo package orders
• Issue electronic receipts (boleta or factura) as required by SUNAT
• Communicate order status and pickup instructions
• Respond to inquiries via the contact form
• Process complaints via the Libro de Reclamaciones (INDECOPI)
• Comply with our legal and tax obligations

3. Legal Basis for Processing

We process your data based on: (a) performance of the purchase contract; (b) legal obligations under SUNAT and INDECOPI regulations; (c) your explicit consent when you submit forms.

4. Third-Party Service Providers

Your data is processed by the following providers, each bound by their own privacy policies and data processing agreements:

• Openpay — Payment processing (credit/debit card transactions). We never see or store your full card number.
• Google LLC — Gmail SMTP for transactional email and Google Sheets API for optional order export.
• Linode / Akamai Technologies — Cloud hosting infrastructure where the website and database run.
• CyberPanel / LiteSpeed — Web server software managing HTTPS and request handling.
• SUNAT (Peru Tax Authority) — Electronic receipt (boleta/factura) issuance as required by Peruvian law.
• INDECOPI — Consumer complaints (Libro de Reclamaciones) as required by Ley N° 29571.

We do not sell, rent, or share your data with third parties for advertising or marketing purposes.

5. Data Retention

Order and invoice data are retained for the period required by Peruvian tax law (minimum 5 years). Libro de Reclamaciones entries are retained per INDECOPI regulations. Contact form submissions are retained for 1 year unless an ongoing inquiry requires longer retention.

6. Cookies & Local Storage

We use the minimum technologies necessary for the site to function:

• PHPSESSID — first-party session cookie required for cart, checkout, and CSRF protection. Expires when you close your browser.
• localStorage["theme"] — stored in your browser only; remembers your dark/light theme preference. Never sent to our servers.
• Google Analytics (G-BCHK12WTLE) — aggregate traffic analytics. Collects anonymized device, browser, and page-view data via cookies (_ga, _gid, _ga_*). You can opt out via the Google Analytics Opt-out Browser Add-on.

We do not use advertising cookies, retargeting pixels, or social-media tracking.

7. Your Rights (ARCO)

Under Ley N° 29733, you have the right to: Access your personal data, Rectify inaccurate data, Cancel unnecessary data, and Oppose specific processing. To exercise these rights, email us at sales@chasqui.store with proof of identity.

8. Security

We implement technical and organizational measures to protect your data: encrypted HTTPS transport, hashed admin passwords, restricted access, and regular security audits. No system is 100% secure, so we cannot guarantee absolute protection against all risks.

9. Changes to This Policy

We may update this policy. The "Last updated" date at the top reflects the most recent change. Continued use of the site after changes constitutes acceptance.

10. Data Controller