VCA Peru is the trade name of IT-Orval S.A.C., a software service provider specialized in the automation of contact and communication processes with customers, through various channels such as Voip, WhatsApp Business API, Chatbot Web, SMS and others, being able to create and manage campaigns from any channel and allowing to connect more efficiently with customers.

This Privacy Policy (hereinafter, the “Policy”) has been drafted to provide information on the type of personal data that is collected, how it is obtained and what it is used for. VCA Perú ensures the maximum confidentiality and protection of personal data that customers or potential customers, in order to make use of the services, provide us through our website (,, and other documents, forms, social networks, fan page, chatbot, among others.


2.Objetive and Purpose

VCA Peru is aware of the high importance of the privacy of our users and all those who are interested in the products and services offered. Being consistent with this consideration, we are committed to respect your privacy and protect the confidentiality of your private information and personal data. For this reason, through this Privacy Policy, we inform our users, the way in which personal data provided in VCA Peru and Laraigo are collected, treated and protected.

Private personal information does not include information that is available through publicly accessible sources. These are understood as electronic, optical and other technological means of communication designed to provide information to the public and open to general consultation, telephone directories, newspapers and magazines, social media, professional lists, anonymized jurisprudence directories, public registries administered by the National Superintendence of Public Registries as well as any other registry or database qualified as public according to law, the Public Registries administered by the National Superintendence of Public Registries as well as any other registry or data bank qualified as public according to law, the entities of the Public Administration in relation to the information that must be delivered in application of Law No. 27806, Law of Transparency and Access to Public Information.



According to Law No. 29733 – Personal Data Protection Law (hereinafter, the “Law”) and its Regulations, approved by Supreme Decree No. 003-2013-JUS, personal data is understood as any information about a natural person that identifies or makes him/her identifiable through means that can be reasonably used.

On the other hand, the processing of personal data is understood as any operation or technical procedure, automated or not, that allows the collection, recording, organization, storage, conservation, conservation, elaboration, modification, extraction, consultation, use, blocking, suppression, communication by transfer or diffusion or any other form of processing that facilitates the access, correlation or interconnection of personal data.

VCA Peru develops its Personal Data Processing Policy in accordance with the guiding principles set forth in Law No. 29733 – Personal Data Protection Law mentioned below:

  • Principle of legality: the collection of our users’ personal data by fraudulent, unfair or unlawful means is rejected.
  • Principle of consent: the processing of our users’ personal data will be subject to their consent.
  • Principle of purpose: The personal data of our users will be collected for a specific, explicit and lawful purpose, and will not be extended to any other purpose that has not been unequivocally established as such at the time of collection.
  • Principle of proportionality: all processing of our users’ personal data will be adequate, relevant and not excessive to the purpose for which they were collected.
  • Quality principle: Personal data shall be truthful, accurate and, as far as possible, updated, necessary, relevant and adequate with respect to the purpose for which they were collected.
  • Principle of security: they will be kept in such a way as to ensure their security and only for the time necessary to fulfill the purpose of the processing.

VCA Peru and, where appropriate, the persons in charge of the processing, have the appropriate security measures in accordance with the processing to be carried out, as well as adopt the technical, organizational and legal measures necessary to ensure confidentiality of personal data.


4.Information on personal data

The user is informed and freely and voluntarily authorizes VCA Perú to collect, store, conserve, access, use, delete or update his/her Personal Data for its activities in Peru. In this sense, the personal data to which VCA Peru has access as a result of the services it provides or by filling out different forms such as the one that is displayed by clicking on the “Contact” tab on the website. , or its chatbot, will be incorporated into the corresponding “Web Users Personal Data Bank”, forming the organized set of users’ personal data, created by VCA Peru and registered in the National Registry of Personal Data Protection.

The personal data provided by users will be treated with complete confidentiality and may only be known and handled by VCA Peru personnel who need to know such information to provide the services offered. VCA Perú undertakes to maintain professional secrecy with respect to this information and guarantees the duty to keep it safe by adopting all necessary security measures. Authorization will not be required when the personal data is necessary for the execution of a contractual relationship to which the Personal Data Holder is a party.

Should the registered data prove to be inaccurate, in whole or in part, or incomplete, VCA Peru may update and/or replace them with the corresponding rectified or completed data.

The personal data requested from users through different forms on the website, chatbot or physical, are basic contact data and are adequate, relevant and not excessive in relation to the purpose for which they are collected.


5.Purpose of personal data processing

The user expressly authorizes VCA Perú to use his/her data for the following purposes:

* For purposes of providing our services.

* For purposes of access and use of our products.

* To provide technical support.

* To notify changes in our service.

* To validate the information provided and its veracity.

* To personalize, develop and improve our services and the user experience in VCA Peru.

* To resolve and respond to complaints and problems regarding the service, as well as to answer queries, requests, suggestions and other information required through our communication channels.

* Provide any information that VCA Perú believes may be of interest to the user.

* Send relevant or exclusive communications corresponding to the provision of our services.

* To send advertising about our products/services; news; updates; information about the articles we publish in our blog; information and invitations to workshops, courses, webinars, bootcamps and similar, if the user has expressly consented.

* To coordinate demonstrations.

* To provide free access to download digital content offered on our website.

* To investigate and detect possible fraud or other violations of our Terms and Conditions or this Privacy Policy, and/or attempts to harm our users or visitors. We also use the personal data provided if we believe it is necessary for security reasons.

* To use properly anonymized or dissociated information for the purpose of developing our services, researching trends in our industry, or conducting any type of historical or statistical value activities.

* To carry out surveys and polls about our services, as well as to measure their performance.

* To store information in offshore cloud storage services. This is indispensable for the provision of Securitec’s services.

In summary, the legal basis on which VCA Peru uses the personal data collected is as follows:

* The consent of the user.

* To provide our services and improve the user experience.

* For purposes of functionality and operability of the website.

* In order to provide support, resolve any questions or queries and resolve complaints.

* To protect the security of our users, website and products.

* To satisfy a legitimate interest (which does not override our duty to protect the personal data collected) such as research and development of our services, promoting the website and protecting our legal rights and interests.

* To process the data for the purpose of complying with a legal obligation.

* To process the data for the purpose of fulfilling a contractual obligation.


6.Online chat

Users authorize VCA Peru to process their personal data for the purpose of providing answers to queries made through the “Online Chat”, WhatsApp Business Api or other communication channel, whereby the measures adopted in this Privacy Policy shall apply.


7.Transfer of personal data at national or international level.

The user authorizes the transfer of their data to companies at national or international level (cross-border flow) related and/or associated with VCA Peru in order to properly manage the products and services requested by users and the steps that arise subsequently, in relation to the purpose indicated in the preceding paragraphs, extending to them the express authorization for their use. VCA Peru guarantees the adequate level of protection of the personal data of users for the transfer of personal data, according to a protection comparable to that provided by this Law or by international standards on the subject.

This personal data may also be communicated to administrative entities, judicial and/or police authorities, as long as it is established by law or when required by them.


8.Personal data security

In compliance with current regulations, the Information Security Directive approved by Directorial Resolution No. 019-2013-JUS/DGPDP of the National Authority for the Protection of Personal Data, VCA Peru has adopted the technical and organizational security and confidentiality measures appropriate to the category of personal data, necessary to maintain the required level of security, with the aim of avoiding as far as possible the alteration, loss or unauthorized processing or access that may affect or affect the integrity, confidentiality and availability of the information.

However, although VCA Peru makes efforts to protect the personal data collected through the use of various security techniques, the transmission of information through communication networks and the Internet is not completely secure due to unlawful acts such as cyber-attacks or actions attributable to the user himself by not being cautious with his own data.

In this sense, all information provided will be sent at the user’s own risk. VCA Perú is not responsible for illegal interceptions or violation of its systems or databases by unauthorized persons, as well as the improper use of the information obtained by such means, or any illegitimate intrusion beyond its control that is not attributable to VCA Perú.

Additionally, although VCA Perú ensures the protection of the personal information of its users, they are responsible for not disclosing data that would allow third parties to have access to them (for example, password and user identification). The user is the only one who knows this information, so it should not be disclosed to third parties.

In case the user considers that there was some kind of security violation or identifies that someone accessed your account, you must immediately notify VCA Peru through the email provided in point 11 of this Policy.

Likewise, in the event VCA Peru detects a breach of security of the personal data provided, and this entails a high risk to the rights and freedoms of the user, VCA Peru will communicate it to the user in clear and simple language, so that the user can easily understand the nature of the breach committed against his or her personal data.

Such communication will not be necessary when VCA Peru has adopted appropriate technical and organizational protection measures applied to the personal data concerned, so that they are unintelligible to whoever tried to access them (e.g. encryption). Nor will it be necessary when it involves a disproportionate effort for VCA Peru, since in the case of several affected users it is easier to opt for a public communication or other options.


10.Exercise of Access, Rectification, Cancellation and Opposition Rights

Internet Users who have provided personal data to VCA Peru may contact VCA Peru in order to exercise their rights of information, access, updating, inclusion, rectification and deletion, to prevent the provision of their personal data, to oppose the processing or objective processing of the data, under the terms set forth in the legislation in force. These rights may only be exercised by the owner of the personal data or his proxy, in accordance with the law.

In order to exercise these rights, users should contact the following e-mail address:, with the reference “Personal Data Protection”, specifying their data, proving their identity and the reasons for their request. The person signing the request must attach a simple copy of the documents proving the identity of the holder (National Identity Card or equivalent document) or, as the case may be, that of the attorney-in-fact, as well as a simple copy of the power of attorney granted by notary when applicable.

Likewise, VCA Perú informs its users of the existence of administrative channels to enforce their rights to be exercised before the National Data Protection Authority or jurisdictional before the Judiciary for the purposes of the corresponding habeas data action.



As this is a virtual tool, which does not allow direct physical contact between VCA Peru and the owner of the personal data, VCA Peru will collect and process the personal data based on the presumption of good faith that the person providing the data is of legal age, is proficient in Spanish or English, is of sound mind, has full civil capacity and is the owner of the personal data or acts as a representative of the owner of the data provided, in the event that they are owned by third parties.

If you have any queries regarding this Policy, please contact us at the following e-mail address:


12.Validity and modification of this Personal Data Protection Policy

VCA Peru’s Personal Data Protection Policy is constantly updated, therefore VCA Peru reserves the right to modify its Policy in the event that there is a change in current legislation, doctrine, jurisprudence or business criteria. Should any change be made to this Policy, the new text will be published on this website. All users are recommended to periodically access this Privacy Policy, which they will find on the website

Last Updated November 08, 2022.