Privacy Policy

Cat E-commerce S.A.C., with Tax ID (RUC) No. 20123456789 and registered address at Av. José Pardo 601, Miraflores, Lima, is the data controller responsible for processing your personal data. We strictly comply with the Personal Data Protection Law — Law No. 29733, its regulations (Supreme Decree No. 003-2013-JUS), Legislative Decree No. 1353, and all applicable Peruvian legislation. Our personal data bank is registered with the National Authority for Personal Data Protection.

This Privacy Policy describes what information we collect, how we use it, who we share it with, and what rights you have as a data subject. By using our website and services, you accept the practices described in this document.

Additionally, Cat E-commerce has appointed a Data Protection Officer (DPO), responsible for handling inquiries, requests, and complaints related to personal data processing. You may contact our DPO directly via email at dpo@catecommerce.pe or by phone at +51 999 888 777.

Our commitment to privacy is absolute. We implement technical, administrative, and organizational measures to protect your information against unauthorized access, loss, alteration, or unlawful disclosure. Personal data will be stored for as long as necessary for the declared purposes or until the data subject withdraws consent, subject to legal retention requirements.

To provide you with our services, we collect the following categories of data:

• Identification data: Full name, surname, and DNI or Foreign Resident ID number (required for issuing electronic receipts and invoices).
• Contact data: Email address, phone number, and home address for order delivery.
• Payment data: Credit card, debit card, or bank account information. Important: this data is processed directly by certified payment gateways (Visa, Mastercard, PagoEfectivo). Cat E-commerce does not store full card numbers or CVV codes.
• Browsing data: IP address, browser type, operating system, pages visited, time spent, and products viewed. This data is collected through cookies and similar technologies.
• Device data: Unique device identifier, model, operating system version, and language settings.

We do not collect sensitive data as defined by Law No. 29733, unless strictly necessary and with your express written consent.

Your personal data is processed exclusively for the following purposes:

• Order processing: Managing, invoicing, delivering, and tracking your purchases made through our platform.
• Transactional communications: Sending purchase confirmations, order status updates, electronic receipts, and delivery notifications.
• Customer support: Handling inquiries, complaints, claims, and warranty, exchange, or return requests.
• Marketing and advertising: Sending promotions, personalized offers, and product updates, provided you have given your prior and express consent. You may withdraw this consent at any time.
• Fraud prevention: Verifying transaction authenticity and preventing illicit activities through anomaly detection systems.
• Legal compliance: Responding to requests from administrative and judicial authorities in accordance with Peruvian law.

We do not use your data for purposes other than those described without informing you in advance and obtaining your consent where required.

All processing of your personal data is based on your prior, express, and informed consent, in accordance with Article 5 of Law No. 29733.

By registering on our site and accepting this Privacy Policy, you are expressing your free and specific consent for the processing of your data according to the purposes detailed herein. For the sending of commercial and advertising communications, additional and differentiated consent is required, via an independent checkbox (opt-in).

You have the right to withdraw your consent at any time, without affecting the lawfulness of prior processing. To do so, follow the procedure described in the ARCO Rights section or send an email to privacy@catecommerce.pe. Withdrawal of consent has no retroactive effect.

Law No. 29733 grants you the following rights over your personal data:

• Right of Access: You may request information about the data we have registered, the purposes of processing, and any transfers made.
• Right of Rectification: If your data is inaccurate, erroneous, or incomplete, you may request its correction or update.
• Right of Cancellation: You may request the deletion of your data when it is no longer necessary for the purpose that motivated its collection, or when the processing is excessive or contrary to the law.
• Right of Objection: You may object to the processing of your data for specific purposes, such as advertising or profiling.

These rights are exercised free of charge, unless the request is manifestly unfounded or excessive, in which case a proportional cost may be charged for the administrative expenses incurred.

To exercise any of your ARCO rights, follow this procedure:

1. Send an email to privacy@catecommerce.pe from the email address associated with your account.
2. In the subject line, state "Personal Data Protection" and specify the right you wish to exercise (Access, Rectification, Cancellation, or Objection).
3. Attach a clear and legible copy of your National Identity Document (DNI) or Foreign Resident Card (CE) to prove your identity. If the request is made by a representative, they must attach a notarized power of attorney and a copy of both parties' ID documents.
4. Clearly and precisely describe your request, indicating the data you wish to know, correct, cancel, or to which processing you object.

Our Data Protection Committee will evaluate your request and issue a response within a maximum period of 20 business days from receipt of the complete request, in accordance with Article 43 of the Regulation of Law No. 29733. If the request is complex or requires additional verification, the period may be extended by up to 10 additional business days, with prior justified communication.

Your personal data is never sold, rented, or commercialized to third parties. We only share information when strictly necessary to fulfill the described purposes and always under confidentiality agreements that guarantee the same level of protection required by Peruvian law. Below, we detail the categories of third parties and the data shared:

Payment processors:

• Stripe Inc. (United States) — Credit and debit card payment processing. Operates under PCI DSS Level 1 certification. Transfers data in encrypted form.
• PayPal Holdings Inc. (United States) — Alternative payment gateway. Data transferred: name, email address, and transaction amount.
• Niubiz (Visanet Perú S.A.) (Peru) — Local acquirer for card payments in local currency (soles).

Logistics operators:

• Olva Courier S.A.C. (Peru) — Nationwide order delivery. Data transferred: name, delivery address, and contact phone.
• Shalom Empresarial S.A.C. (Peru) — Logistics for Metropolitan Lima and express shipping.

Analytics and marketing tools:

• Google LLC (United States) — Google Analytics 4 for web traffic analysis. Anonymized data. Operates under standard contractual clauses approved by the European Commission.
• Meta Platforms Inc. (United States) — Facebook Pixel for conversion measurement and advertising. Only activated with your express consent.

Public entities:

• SUNAT (Peru) — Issuance of electronic tax receipts and compliance with tax obligations.
• INDECOPI (Peru) — Handling of consumer complaints and compliance with the Consumer Protection Code.

For international data transfers, we ensure the recipient country provides an adequate level of protection. For countries without recognized adequate protection, we have entered into contractual clauses guaranteeing the same protection obligations in force in Peru, in accordance with Article 15 of Law No. 29733 and Articles 18 through 21 of Supreme Decree No. 016-2024-JUS. For transfers necessary for the performance of the contractual relationship, the exception in Article 15(4) of Law No. 29733 applies.

At Cat E-commerce, we implement technical, administrative, and physical security measures to protect your personal data:

• SSL/TLS Encryption: All communications between your browser and our servers are protected through 256-bit encryption protocols.
• PCI DSS Certification: We comply with the highest security standards for credit card payment processing. We do not store CVV codes or full card data on our servers.
• Access control: Access to personal data is restricted exclusively to authorized personnel who need it to perform their duties. All our employees sign confidentiality agreements and receive periodic training in data protection.
• Data minimization: We only collect and retain the data strictly necessary for the declared purposes, for the time required by law.

In the event of a security breach affecting your personal data, we will notify you by email within a maximum of 48 hours from detection, explaining the nature of the incident, the data affected, and the measures taken to mitigate it. We will also notify the National Authority for Personal Data Protection in accordance with applicable regulations.

Our website uses cookies and similar technologies to improve your browsing experience. Cookies are small text files stored on your device when you visit a website. The cookies we use are classified into:

• Essential cookies (mandatory): Necessary for the website's operation. They include session cookies (they keep your cart active while browsing) and security cookies (they prevent CSRF attacks). They do not require consent and cannot be disabled.
• Analytics cookies: We use Google Analytics to understand how you interact with our store, which pages you visit, and how long you stay. This data is collected anonymously and helps us improve site performance.
• Marketing cookies: We use Facebook Pixel to display personalized advertising on social media based on your browsing behavior. These cookies are only activated if you give your express consent through our cookie banner.

You can configure your browser to reject all cookies or to notify you when a cookie is sent. However, if you disable essential cookies, some site features (such as the shopping cart) may not work properly. For more information, please see our full Cookies Policy.

Cat E-commerce S.A.C. reserves the right to modify this Privacy Policy at any time, in order to adapt it to legislative or jurisprudential developments or changes in our data processing practices.

Last update: June 2026.

All modifications will be published on this same page and, when the changes are substantial, we will notify you via the email address registered in your account with reasonable notice before they take effect.

Continued use of our services after the publication of modifications implies acceptance of the new terms. We recommend reviewing this page periodically to stay informed about how we protect your personal data.