Política de Privacidad
Last updated: 7 September 2026
Who is responsible for your data
Munay Ki Peru SAC (“Munay”, “we”), trading as Palo Santo Premium, is the data controller.
- Address: Ciudad Real 269, Santiago de Surco, Lima 15096, Peru
- Tax ID (RUC): 20600767861
- Email: export@palosantopremium.com
- Phone: +51 937 189 509
We are based in Peru and sell to businesses worldwide, including the European Union. Where we offer goods or services to people in the EU, the General Data Protection Regulation (GDPR) applies to that processing, and this policy explains how we comply with it.
What we collect, why, and on what legal basis
| Data | Why we process it | Legal basis | How long we keep it |
|---|---|---|---|
| Name, company, email, phone, country — sent through our quote and contact forms | To answer your enquiry and prepare a quotation | Steps taken at your request prior to a contract (Art. 6(1)(b)) | 3 years from the last contact, then deleted |
| Billing and shipping details, order history | To process and ship your order and to keep accounting records | Performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) | As required by Peruvian tax law, at least 5 years |
| Payment data | To take payment. We never see or store full card numbers — the payment provider handles them | Performance of a contract (Art. 6(1)(b)) | We keep only the transaction reference |
| Name, email and review text, when you post a product review | To publish the review on the product page | Consent (Art. 6(1)(a)), given when you submit it | Until you ask us to remove it |
| Anonymised browsing statistics (Google Analytics) | To understand which pages are useful | Consent (Art. 6(1)(a)), given through the cookie banner | 14 months |
| Technical logs and security data | To keep the site available and defend it from attacks | Legitimate interest in the security of our service (Art. 6(1)(f)) | Up to 12 months |
We do not sell personal data, we do not use it for automated decision-making or profiling, and we do not send marketing emails to people who have not asked for them.
Who else processes your data
We rely on a small number of providers, each acting on our instructions:
- Cloudflare, Inc. (USA) — protects and speeds up the website.
- Google Ireland Ltd. / Google LLC — Google Analytics, only if you consent.
- PayPal (Europe) S.à r.l. et Cie, S.C.A. and PayU — payment processing. They act as independent controllers for the payment itself.
- Selva Ecomarketing (Peru) — maintains the website and the forms on it.
We also disclose data where the law requires it, for example to customs authorities when shipping an order.
International transfers
Munay is established in Peru, and some of our providers are in the United States. When personal data of people in the European Economic Area is transferred outside it, we rely on the European Commission’s Standard Contractual Clauses agreed with each provider. You can ask us for a copy of the safeguards that apply to a specific transfer.
Your rights
If the GDPR applies to you, you have the right to: access your data; correct it; have it erased; restrict or object to how we use it; receive it in a portable format; and withdraw consent at any time, without that affecting what we did lawfully before you withdrew it.
To exercise any of these, write to export@palosantopremium.com. We reply within 30 days. We may ask you to confirm your identity first, so that we do not hand your data to someone else.
If you believe we have handled your data badly, you can complain to the data protection authority of the EU country where you live or work. In Peru, the competent body is the Autoridad Nacional de Protección de Datos Personales of the Ministry of Justice.
Children
This is a business-to-business site. It is not aimed at children and we do not knowingly collect their data.
Changes
If we change this policy we will update the date at the top. If the change is significant, we will say so on the site.
See also our Cookie Policy, Legal Notice and Terms and Conditions.