Privacy Policy : Ikigai – Laboratorio Social

Privacy Policy

The data controller responsible for the processing of personal data is Ikigai Laboratorio Social S.A.C. (hereinafter, “Ikigai”), identified with RUC No. 20602663044 and domiciled at Calle Bartolomé de las Casas 126, Apt. 301, district of Miraflores, province and department of Lima, whose customer service and contact channel is the email address: hola@ikigai.pe.

Ikigai is a company that provides services in sustainability strategy design, corporate volunteering execution, training programs for entrepreneurs, management and deployment of social programs, personal transformation workshops, coaching and consulting, and the design of innovative solutions to social and environmental problems.

In compliance with the Personal Data Protection Law, Law No. 29733, and Supreme Decree No. 016-2024-JUS, which approves the Regulations of Law No. 29733, Ikigai hereby informs the public regarding the processing of personal data it performs. Furthermore, it hereby requests the consent of those users whose information is collected through Ikigai’s website: http://ikigai.pe/en/ (hereinafter, the “User”).

1. What Information is Collected?

1.1. Information collected through Ikigai’s website

Ikigai collects the following personal information from users who interact with its website and wish to contact Ikigai:

First and last names.
Email address.
Custom message provided by the users.

In the event that claims or complaints are filed through the Complaints Book (Libro de Reclamaciones), in addition to collecting information such as first name, last name, and email address, the type and number of identity document, telephone/cell phone number, the holder’s address, and the details of the complaint are collected, all for the purpose of addressing and resolving the user’s complaint.

1.2. Personal information obtained through the provision of Ikigai’s services

In providing these services, Ikigai collects personal data, either on its own behalf or on behalf of its clients within the framework of a contractual relationship. Consequently, the processing of such information will depend on each specific project executed by Ikigai or each particular engagement agreed upon with the client who decides to retain its services.

Depending on the specific case, Ikigai will act either in the capacity of the data controller (owner of the personal data bank) or, when acting on behalf of a client, as a data processor. In both scenarios, Ikigai has implemented measures to safeguard the confidentiality and security of the information to which it has access.

2. What is this Personal Information Used For?

The aforementioned personal data will be processed for the following purposes:

Necessary Purposes:

To interact with users who wish to contact Ikigai.
To provide our services.
To resolve and respond to complaints and issues regarding the service, as well as to address inquiries, requests, suggestions, and other types of information required through our communication channels.
To send relevant or exclusive communications corresponding to the provision of our services.
To use the personal data provided if we believe it is necessary for security reasons.
To store information in cloud storage services abroad, which is essential for the provision of Ikigai’s services.

Additional or Optional Purposes:

To send advertising regarding our products/services, provided that the user has expressly consented to it.
To use duly anonymized or dissociated information to develop our services, research trends in our sector, or perform any type of activity of historical or statistical value.
To conduct polls and surveys regarding our services, as well as to measure their performance.

3. Quality of Personal Data

The personal data requested is adequate, relevant, and not excessive in relation to the purpose for which it is collected.

The user declares that all information provided is true, complete, accurate, and up to date. Furthermore, the user assumes full responsibility for the veracity, accuracy, integrity, and validity of such information.

4. Data Banks

Personal data will be stored in the following data banks:

“Clients” data bank, with Registration Code RNPDP-PJP No. 20642.
“Website Users” data bank, with Registration Code RNPDP-PJP No. 20643.
“Complaints and Claims” data bank, with Registration Code RNPDP-PJP No. 20640.

5. Transfer of Personal Data to Third Parties

Ikigai does not share personal information with third parties unless it is necessary to manage, develop, and execute its services or to comply with a legal obligation.

It is important to note that the transfer of personal information will depend on each specific project executed by Ikigai, whether on its own behalf or on behalf of client companies.

5.1. Third-Party Providers

Ikigai may transfer the collected personal data to third-party companies solely and exclusively for the purpose of providing the service in specific projects. On such occasions, the owners of the data banks—who must inform the data subjects of their respective personal data banks—will be notified about such transfers and their justification for service delivery purposes.

5.2. Authorities

Personal data may be transferred to administrative entities, judicial authorities, and/or law enforcement authorities, provided that it is established by Law or required by judicial mandate.

6. Cross-Border Data Flows

In order to fulfill our services, we carry out cross-border transfers of personal data with the companies detailed below:

Supplier Name	Code	Address	Purpose
GoDaddy.com LLC	86-0850417	14455 North Hayden Road, Suite 219, Scottsdale, AZ, 85260, United States.	Provision of web hosting services, domain name registration and management, cloud storage, technical support, and management of corporate email accounts.
Alphabet Inc.	35852691	1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.	Provision of productivity and collaboration services (Google Workspace), cloud data storage and processing (Google Cloud), web traffic and behavior analysis (Google Analytics), and digital advertising campaign management (Google Ads).
The Rocket Science Group LLC	58-2554149	405 N Angier Avenue NE, Atlanta, GA 30308, United States.	Provision of email marketing services, management and segmentation of subscriber lists, automation of newsletter distribution, analysis of advertising campaign metrics, and cloud storage of business contact data.
SendPulse Inc.	035647896	220 E 23rd St #401, New York, NY 10010, United States.	Provision of automated marketing services, bulk and transactional email distribution (email marketing), management and storage of subscriber databases, development and configuration of multi-channel chatbots (WhatsApp, Telegram, Instagram), creation of pop-ups, and acquisition campaign analytics.
Meta Platforms, Inc.	20-1665019	1 Meta Way, Menlo Park, California 94025, USA.	Cloud hosting, technical support, and secure processing of client and prospect databases through commercial communication tools and corporate advertising platforms.

7. Retention of Personal Data

The information collected by Ikigai will be stored for the duration of the contractual relationship with us or for as long as required to fulfill the purpose for which the data was collected.

Ikigai Laboratorio Social may retain duly anonymized or dissociated information for the purpose of developing new services, researching trends, among other business purposes.

8. Confidentiality of Personal Data

The personal data provided will be treated with absolute confidentiality and may only be known and handled by Ikigai personnel who require access to such information for the performance of their duties. Ikigai undertakes to maintain permanent and indefinite professional secrecy regarding the same.

9. Security of Personal Data

In compliance with current regulations, we have adopted the necessary technical and organizational security measures to guarantee the protection of personal data to which Ikigai has access. This is done to prevent its alteration, loss, or unauthorized processing or access that could affect the integrity, confidentiality, and availability of the information, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed.

10. Exercise of ARCO Rights and Other Rights

As the data controller responsible for the collected personal data, Law No. 29733 grants clients and/or users the power to exercise rights in relation to their personal data. These rights are detailed below:

Access: Clients and/or users have the right to know whether their personal data is being processed and, if so, to access it.
Update and Rectification: They may request the correction of their personal data if it is found to be incomplete, inaccurate, or outdated.
Cancellation or Erasure: Clients and/or users have the power to request the deletion of their personal data if it is no longer necessary for the purposes for which it was collected or if they decide to revoke their consent.
Inclusion: They may request that any relevant information that is missing, has been omitted, or deleted be incorporated into a personal data bank.
Information: Clients and/or users have the right to know what personal data is being processed, how it is processed, and its source, especially if it was not provided directly by them.
Objection: They may object to the processing of their personal data if such processing affects their fundamental rights and freedoms, lacks a legal basis, or is used for unsolicited marketing purposes.
Portability: Clients and/or users have the right to request that their personal data be delivered to them in interoperable formats, thereby facilitating its transfer to other entities. It should be noted that this right does not apply to information generated exclusively by Ikigai (for example, anonymized data for statistical or service improvement purposes) that has not been directly provided by the client and/or user.
Revocation or Denial: They may revoke their consent for the processing of personal data at any time, or deny its use for additional purposes that have not been previously authorized.
Suspension: They may request the temporary suspension of the processing of their personal data if it is inaccurate or irrelevant to the purposes for which it was collected.
Objective Processing: Users have the right not to be subjected to decisions that produce legal or discriminatory effects, or automated evaluations on personal aspects without human intervention.
Automated Decisions: An explanation can be demanded regarding decisions made through automated processes, requesting their review by a natural person and contesting them.

Important Restrictions:

A user who still maintains an active relationship with Ikigai, or whose express intention is to use our services, may not request the deletion of their personal data.

We are not obligated to delete the requested personal data when its processing is necessary to execute an active obligation between Ikigai and the user, comply with a legal obligation, for reasons of public interest, or to initiate legal action against users.

These rights may be exercised by submitting a request via email to hola@ikigai.pe. To do so, the following information must be provided:

A copy of the National Identity Document (DNI), alien registration card (carnet de extranjería), or passport.
A clear request regarding the measures Ikigai should take concerning the requested personal data.
Supporting documentation for the request, if applicable.

Ikigai will respond to the request through the email address provided by the user. The response timeframe will depend on the type of request made, in accordance with Supreme Decree No. 016-2024-JUS and the Regulations of Law No. 29733.

11. Consent

By accepting this policy, the user provides their free, express, unequivocal, and informed consent to the processing of their personal data in accordance with the purposes set forth above.

12. Miscellaneous

For any inquiries regarding this Policy, the user may write to us at the following email address: hola@ikigai.pe

13. Amendments to this Privacy Policy

Ikigai reserves the right to modify its Privacy Policy in the event of a change in current legislation or based on its own business criteria.

Last updated: July 09, 2026