Privacy policy
We explain what data we collect, why we collect it and what you can do with it. We process your information under Peru's Personal Data Protection Law (Law 29733).
Updated · May 2026
Data controller
OnExotic SAC, Lima, Peru. Contact: onexotic2005@gmail.com. We process your data as controller under Law 29733.
Data we collect
Name, last name, email, phone, shipping address, order history. For drop subscriptions we only store your email. We do not store card data; payment gateways (Culqi) process it directly.
Purpose
Process orders, coordinate shipments, handle claims, notify upcoming drops to subscribers, improve the store via anonymized analytics (Vercel Analytics).
Sharing
Only with those necessary to deliver the service: shipping companies, payment gateway and email provider. We do not sell your data to third parties.
Your ARCO rights
You can access, rectify, cancel or oppose the processing of your data by writing to onexotic2005@gmail.com. We respond within 20 business days max.
Security
Data lives in Supabase with encryption at rest and in transit. We apply Row Level Security so each customer only sees their information.
Contact
For privacy queries: onexotic2005@gmail.com · WhatsApp +51 906 517 394. You may also approach Peru's National Personal Data Protection Authority.