Privacy Policy in Peru

1. Purpose

This personal data privacy policy (hereinafter, the "Privacy Policy") aims to inform how JELOU S.A. (hereinafter, "JELOU"), with Unique Taxpayer Registry No. 0992939478001, with registered office at Cedros Norte Street No. 215 and First Street, Urdesa City, Buro 215 Building, Guayaquil, Ecuador, processes the personal data it collects through its website https://www.jelou.ai (hereinafter, the "Website") or through its computer program Chatbot (hereinafter, the "Chatbot").

For these purposes, we will refer to the "Holder" as the person whose data will be collected and processed according to the terms established in the Privacy Policy. Only personal data for which proper consent has been obtained is processed, unless the exceptions established in the applicable regulation for the jurisdiction of the personal data in question apply, as indicated in the Legal Basis of this Privacy Notice.

The processing of personal data derived from this Privacy Policy is legitimate and lawful by virtue of obtaining the Holder's consent and its origin comes directly from them.

2. Legal Basis

This Privacy Notice is regulated by the legislation of your country, in particular, when reference is made to "your country's jurisdiction", "applicable regulation" or "the legislation in force in your country", it should be understood as the regulations listed here corresponding to your country:

3. Retention Period

In principle, the personal data provided by the Holder will be kept for one (1) year from their collection to fulfill the purpose for which they were collected and/or until the Holder revokes their consent, as regulated by the Law and applicable regulations. Personal data is deleted through a secure process after the aforementioned retention period ends.

In some jurisdictions, personal data will be kept for the necessary and reasonable time required to fulfill the purpose for which they were collected and authorized. Once this purpose has been fulfilled, the holder's personal data must be deleted unless their retention is required for compliance with a legal or contractual obligation.

Once the purpose has been fulfilled, your personal data may continue to be processed by us for the following reasons:

• If there is a legal or contractual obligation to keep them;
• If necessary for research, audit and/or regular exercise of our rights in judicial, administrative or arbitration proceedings

4. Banks / Personal Databases

The personal data provided and collected through the website will be stored in the personal database called "WEB USERS", duly registered in the National Registry of Personal Data Protection. The personal data provided and collected through the use of the Chatbot will be stored in the personal database called "POTENTIAL CLIENTS", duly registered in the National Registry of Personal Data Protection and/or in the National Registry of Databases as applicable.

5. Purpose of Processing

Through a virtual form hosted on the Website, JELOU collects personal data of a personal nature, such as names, surnames, phones, emails, address, ID card, RUC number, credit information.

These personal data provided by the Holder will be necessary to provide the online buying and selling services on the JELOU platform. JELOU may perform systematic evaluations of personal aspects and behaviors of its users within the Website, such as the development of profiles, trends and consumption habits, seeking a duly dissociated or at least anonymized treatment of this data, always attending to the security measures, principles and limitations for such purpose, provided in the Law

If the Holder does not provide this data, or provides incorrect or inaccurate data, JELOU will not be able to fulfill the purpose described above and the quality and manner of execution of the services provided by JELOU will be compromised.

Additionally, with the valid consent of the Holder, JELOU may contact them through [phone calls, SMS, emails or other equivalent means], to send advertisements, promotions, discount opportunities, general information. In the event that you do not accept the additional processing of your personal data, this will not affect the access and use of the Website and the services provided there.

Through the use of the Chatbot, JELOU collects personal data of a personal nature, such as names, surnames, phones, emails, address, ID card, RUC number, credit information, messages exchanged between the Chatbot and users, messages between human agents and users, information processed in messages such as images, files and audio, information specifically processed for online contract signing, information necessary for identity verification and user registration in service.

These personal data provided by the Holder will be necessary to provide the JELOU Chatbot services.

Likewise, JELOU will use contact data collected from its users who have contracted the Chatbot service to send recommendations with systems integrated with platforms such as WhatsApp, Facebook, Instagram and other social chat platforms.

6. Transfer and Recipients

The Holder is informed that their information is shared with third parties according to the following detail:

7. Security Measures

JELOU adopts the necessary security measures to guarantee the protection of the Holder's information in order to prevent its alteration, loss, destruction, damage, processing, disclosure and/or unauthorized or illegal access, taking into consideration the nature of the information and the risks to which they are exposed. To protect the Holder's personal data, JELOU has implemented measures that involve at minimum:

• Control and registration of accesses and privileges, as well as their periodic verification.
• Registration of events, logical interactions,
• Identification and authentication of users through password management and use.
• Copies and backups of information in a controlled and authorized manner.
• Security in personal data processing environments.

8. Communications and Subsequent Processing

JELOU commits not to disclose or share the personal data provided by the Holder without their valid consent, except in the following cases:

• When necessary for the purpose for which the information was collected.
• When the information holder is informed before disclosure or at the time of information collection and their prior and express consent is obtained.
• When there are information requests from administrative or judicial authorities by virtue of requests and orders in the exercise of their functions and the scope of their powers provided by Law.
• When there are requests from administrative authorities aimed at subsequent processing of data for historical, statistical or scientific purposes, provided that such data are duly dissociated or at least anonymized
• In general, information requests by virtue of relevant legal provisions.
• When they are data of a public nature;
• When faced with medical or health emergency cases;
• When they are Data related to the Civil Registry of Persons.

9. Use of Cookies on the Website

The use of cookies on the website can be consulted in our cookie policy, which is available at the following link

10. Exercise of Rights

The Holder can exercise the rights of access, rectification, opposition, cancellation, revocation, portability, deletion, elimination, updating, inclusion, annulment, limitation of processing, not to be subject to a decision based solely on automated assessments, limitation of use, disclosure of personal data, and other rights enshrined in the applicable legislation, through a request that can be sent to the following email address: claims@jelou.ai and including, at minimum, the following information:

• The name and email address of the Holder or any other means to receive responses.
• A document that proves the identity of the applicant and, if applicable, that of their representative with the respective authorization.
• The clear and precise description of the personal data with respect to which the Holder seeks to exercise any of the rights and the specific request.

11. Portability of Personal Data

At the express request of the Holder, JELOU may return the personal data collected from them, in a compatible, updated, structured, common, interoperable and machine-readable format, preserving its characteristics, or deliver them to another controller defined by the Holder.

JELOU will carry out this transfer or communication in an economically and financially efficient, expeditious and unhindered manner.

The portability of the Holder's data will not take place in the case of information inferred, derived, created, generated or obtained from analysis or processing carried out by JELOU.

12. Revocation of Consent

The Holder may revoke the authorization and consent granted to JELOU for the processing of their personal data, by submitting a written request sent to the email mentioned above.

The Holder or their heirs may request the correction, updating or deletion of data, or report non-compliance through a claim or request sent to the email mentioned above, which includes identification, description of the facts, address and relevant documents.

The request for deletion of information and revocation of authorization will not be valid if the Holder has a legal or contractual obligation to remain in the database.

13. Modifications to the Privacy Policy

JELOU expressly reserves the right to modify, update or complete this Privacy Policy at any time. Any modification, update or extension produced in this policy will be immediately communicated through the Website.

In case of a substantial change in the processing policies, regarding the identification of the Controller and the purpose of Processing personal data, JELOU through the Website will inform the Holder of these changes before or at the time of implementing the new policies. If it is a change in the purpose of processing personal data, JELOU will request new data authorization from the Holder.

14. Mechanisms to Know the Processing Policy

The Holder can access our Information Processing Policy, which is published here.

15. Applicable Legislation and Conflict Resolution

The terms of the Privacy Policy are governed by and construed in accordance with the laws of Ecuador and the applicable legal framework according to section 15 where the other applicable jurisdictions are specified.