Privacy policy

Who is responsible

The controller of your personal data is Global Solutions L.A. S.A.C. ("Global Solutions Labs", "we", "us"), RUC 20610545654, based in Lima, Peru. For anything about your data, write to privacy@globalso.dev.

We process personal data in accordance with Peru's Personal Data Protection Law (Law No. 29733) and its Regulation (Supreme Decree No. 016-2024-JUS). When we process data of people in the European Union, we also apply the General Data Protection Regulation (GDPR).

What data we collect

This website has no forms, accounts, analytics or advertising. We handle personal data in two situations only:

• Server logs. When you visit, our hosting provider records your IP address, the page requested, the date and time, and your browser's user agent. We keep these logs for 30 days.
• Email. When you write to us, we receive your email address, your name if you include it, and whatever you choose to tell us.

We don't ask for sensitive data. Please don't send it to us by email.

Why we use it

• Server logs: to keep the website secure and available, detect abuse and investigate incidents. Legal basis: our legitimate interest in protecting our systems.
• Email: to answer you and follow up on what you asked. Legal basis: your consent when you write to us, and, where relevant, the steps you request before entering into a contract.

We don't sell your data, use it for automated decisions or profile you.

Data in our products

When a client uses PlatformD or No ID, the client decides what personal data is processed and we act as its processor under a separate data processing agreement. This policy doesn't cover that processing. No ID publishes its own privacy policy at no-id.org.

Who we share it with

We share personal data only with providers we need to run the website and our email, and only what they need:

• Hosting: the provider that serves this website.
• Email: the provider that hosts our mailboxes.

We may also disclose data when the law or a competent authority requires it.

International transfers

Some of these providers may store data outside Peru. When that happens we use providers that offer an adequate level of protection, or contractual safeguards as required by Peruvian law and, where it applies, the GDPR.

How long we keep it

• Server logs: 30 days, unless needed longer to investigate a specific security incident.
• Email: for as long as the conversation is active and up to two years after it ends, unless a contract or the law requires us to keep it longer.

Your rights

You can ask us to:

• tell you what data we hold about you and how we use it (access and information);
• correct data that is wrong or incomplete (rectification);
• delete your data (cancellation);
• stop using your data for a particular purpose (opposition);
• give you your data in a structured, commonly used format (portability).

Write to privacy@globalso.dev from the address the request is about, or include a copy of an identity document. We answer within the time limits set by the Regulation. If you're not satisfied with our answer, you can file a complaint with Peru's National Authority for Personal Data Protection (Ministry of Justice and Human Rights) or, if you're in the EU, with your local data protection authority.

Security

We protect data with encryption in transit, restricted access, short-lived credentials and audit logs. No system is perfectly secure; if a breach affects your data, we'll tell you and the authority as the law requires.

Children

This website is aimed at businesses. We don't knowingly collect data from children under 14.

Changes

If we change this policy, we'll update the date at the top. If a change affects how we use data we already hold, we'll tell the people affected.