Last updated: 12 January 2026
Privacy Policy
At Flubrio S.A.C. ("Flubrio") we process your personal data responsibly and in strict compliance with Peru's Personal Data Protection Law No. 29733, its Regulation approved by Supreme Decree No. 003-2013-JUS, and the directives in force from the National Authority for Personal Data Protection as of 2026.
1. Data controller
The data controller is Flubrio S.A.C., tax ID 20612048731, domiciled at Av. Javier Prado Este 4200, office 1102, San Isidro, Lima 15036, Peru. You can reach us at privacy@flubrio.com.
2. Data we process
We process identification data (first and last name, DNI or equivalent), contact data (email, phone, region), socioeconomic data you voluntarily share, and browsing data (IP, browser, pages visited, cookie identifiers).
3. Purposes
We use your data to: (i) provide access to the platform and financial education services; (ii) send informational and commercial communications about Flubrio where consent exists; (iii) comply with legal, tax and contractual obligations; (iv) perform aggregated analytics for statistical purposes.
4. Legal basis
Processing is based on your free, prior, express and informed consent, on the performance of the contractual relationship and on the fulfilment of legal obligations in force in Peru.
5. Retention period
Your data is retained while you maintain an active account and, where applicable, for the legal periods that apply (up to ten years for tax and accounting information under Peruvian regulations).
6. Recipients
We do not sell your data. We share strictly necessary information with technology providers contracted under confidentiality clauses, and with the competent authorities when required by law.
7. International transfers
Some cloud infrastructure providers are located outside Peru. In such cases we guarantee an adequate level of protection through contractual clauses and internationally recognised certifications.
8. Data subject rights
You may exercise your rights of access, rectification, cancellation, opposition, information, objective processing and consent withdrawal at any time by writing to privacy@flubrio.com. If your rights are not addressed you may contact the National Authority for Personal Data Protection at the Ministry of Justice and Human Rights.
9. Security measures
We maintain technical and organisational measures aligned with ISO/IEC 27001:2022 and ISO 27701, including in-transit and at-rest encryption, role-based access management, audit logs and operational continuity plans.
10. Updates
This policy may be updated to reflect regulatory or service changes. We will publish the current version on this page and, where relevant, notify you by email.