Privacy policy

At Procabell (operated by CORVELI EIRL, RUC 20600154967), we respect your privacy and are committed to protecting your personal data in accordance with Law No. 29733, the Personal Data Protection Law, and its Regulations (Supreme Decree 003-2013-JUS).

This policy applies to the procabell.com website and to the data we collect through our locations, contact forms, WhatsApp channels and our online store. We recommend reading it in full before using our services, as it describes what data we collect, what we use it for, who we share it with, and what rights you have over it.

1. Data controller

CORVELI EIRL, RUC 20600154967, headquartered at Jirón Caracas 2675, Jesús María, Lima, Peru, is the controller of the personal data collected through this website. As the data controller, we determine the purposes and means of processing your data, and we are responsible for its proper use and protection under current regulations.

Note: our locations outside Lima (Trujillo, Arequipa) operate under their own business names. For specific questions about data processed at those locations, contact us at the same email address listed in section 8.

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Identification and contact data: name, DNI/identity document, email address, phone number, address.
• Health data (sensitive data): medical information related to consultations, diagnoses, hair restoration treatments, before/after photos of the procedure for clinical purposes, and medical history relevant to your care. If we were also to use your photos for promotional or marketing purposes (for example, on social media or in testimonials), we will ask for your express, separate authorization before publishing them, and you may revoke it at any time.
• Purchase data: products purchased, shipping address, order history (through our online store).
• Browsing data: IP address, browser type, device, pages visited, time spent on the site, and cookies (see section 7).
• Communication data: messages sent via WhatsApp, contact or appointment booking forms, and any information you choose to share with us voluntarily in those conversations.

3. Legal basis and consent for health data

Health data is considered sensitive data under Law No. 29733. We only collect and process it with your prior, informed, express and written consent, given before or during your in-person or virtual medical consultation, usually through an informed consent form or document that you sign at our location or digitally before your procedure. This consent is separate from simply using the website, and you may request a copy of the document you signed at any time.

4. Purpose of processing

We use your personal data to:

• Schedule and manage medical appointments and consultations.
• Provide medical care and follow up on treatments.
• Process purchases made in our online store.
• Respond to inquiries sent via WhatsApp or contact forms.
• Send informational or promotional communications (only if you have consented to this, and always with the option to unsubscribe).
• Analyze website usage to improve it and detect technical issues.
• Comply with legal, accounting and regulatory obligations, including requests from health or tax authorities.

5. Who we share your data with

We do not sell your personal data. We share it only with:

• Payment gateway / WooCommerce: to process purchases in our online store, your payment data is handled directly by the payment provider; we do not store it, nor do we have access to your full card number.
• Google Analytics, Meta (Facebook Pixel) and similar tools: to understand how the site is used and measure the effectiveness of our advertising. These tools may set their own cookies — see the Google and Meta policies.
• WhatsApp Business: messages you send us through this channel are also subject to the WhatsApp/Meta privacy policy.
• Hosting and email providers: companies that provide the technical infrastructure we need to run the site and send notifications.
• Partner laboratories and centers: when your treatment requires pre-operative tests or other third-party services we have agreements with, we share only the data strictly necessary for that coordination.
• Competent authorities: when required by law, for example during a health or tax inspection.

6. International data transfers

Some of the tools mentioned (Google, Meta) process data on servers located outside Peru, including the United States and other countries where these companies operate infrastructure. These companies have their own international data protection compliance mechanisms (such as standard contractual clauses and privacy certifications). We do not transfer your health data to third parties for purposes other than your medical care.

7. Cookies

We use different types of cookies to make the site work properly and to understand how you use it:

• Necessary cookies: enable essential functions such as the WooCommerce shopping cart and login. Without them, the site does not work properly.
• Analytics cookies: such as Google Analytics cookies, help us understand which pages you visit and how to make the site easier to navigate, in aggregate and without identifying you personally.
• Advertising cookies: such as the Meta (Facebook) Pixel, let us measure the effectiveness of our ads and show you relevant content on other platforms.

You can set your browser to reject cookies or delete them at any time, although this may limit some site features, such as the shopping cart.

8. Your rights (ARCO rights)

You have the right to:

• Access the personal data we process about you.
• Rectify inaccurate or incomplete data.
• Cancel (delete) your data when it is no longer necessary.
• Object to the processing of your data for specific purposes (for example, marketing).

To exercise these rights, email us at info@procabell.com with your full name, the right you wish to exercise, and a copy of your identity document so we can verify your identity. We will respond to your request within the time limits set by Law No. 29733.

If you are not satisfied with our response, or believe we did not properly protect your data, you have the right to file a complaint with the National Authority for Personal Data Protection of Peru's Ministry of Justice and Human Rights, the government agency responsible for overseeing compliance with this law.

9. Retention period

• Medical/health data: for as long as the doctor-patient relationship lasts and for any additional period required by the medical records regulations applicable in Peru, even after your treatment has ended, to ensure continuity of care and comply with legal obligations for keeping medical records.
• Purchase data: for the time required by tax and accounting obligations set by SUNAT (Peru's tax authority) and other authorities.
• Contact/marketing data: until you request its deletion or withdraw your consent.

Once these periods expire, we securely delete or anonymize your data.

10. Data security

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, loss or alteration, including restricted access controls for your medical records and encrypted connections on our website. No system is 100% foolproof, so we cannot guarantee absolute security. If we detect a breach affecting your data, we will notify you as required by applicable regulations.

11. Minors

Our services are intended for people over 18 years of age. If you are a minor, we need the express consent of your parent or legal guardian, who must be present and sign the corresponding documentation before any consultation or procedure, and before we collect or process your data.

12. Changes to this policy

We may update this policy from time to time, for example if we change technology providers or if the applicable regulations are updated. We will post any changes on this page, along with the date of the last update. We recommend reviewing it periodically.

13. Contact

If you have any questions about this policy or how we handle your data, email us at info@procabell.com.