Privacy Policy

MIKAMBISTA INVESTMENT MANAGEMENT SAC (hereinafter MiKambista) is committed to respecting the privacy rights of all its clients and, in general, of all individuals who provide their data to the company through the website and other integrated channels.
This document contains MiKambista’s Privacy Policy, which is aligned with current regulations on Personal Data Protection (Law No. 29733 and Supreme Decree 003-2013-JUS). This document outlines the purposes of the information you provide us, who is responsible for processing it, the protection measures implemented, and the means to exercise your rights as the owner of the Personal Data, among other aspects. Please read this document carefully to understand the information we collect about you, how we use it, and the circumstances under which we will share it with third parties.

1. What information does MiKambista collect?

1.1. Personal information obtained without registration or login
When you browse our website https://MiKambista.com/, you can do so without registering as a user or logging in. In this scenario, we access the following personal information:

  • Mobile phone number, in case you decide to contact us through the chat option on the application.
  • Messages sent through the chat feature available on the website. Additionally, contact information (first name, last name, phone number, email address) may be requested through this channel to address your inquiry more directly.

1.2. Personal information obtained through user registration on MiKambista
The personal data we obtain when you register on our website, in addition to the information detailed above, includes the following:

1.2.1. Personal data collected during the provision of currency exchange and card payment services
To provide these services, you have the option to register as an individual (natural person), in which case we collect the following personal information:
  • First and last names
  • Email address
  • Mobile phone number
  • Type and number of ID document
  • Password
 
If you choose to log in using Facebook, Google, or Apple, we may collect your name and user profile picture from those platforms. This is done to facilitate your login process and is subject to the privacy policies you accepted as a user of Facebook, Google, or Apple.
Once you are registered, we access the following personal data:
  • When adding a personal bank account to the platform, we collect the bank name, account type, currency, account number, and account name (the latter is optional).
  • Likewise, MIKAMBISTA records the quotes and operations you performed on the platform, meaning those that are in progress, completed, or cancelled.
  • Additionally, at MIKAMBISTA, we can identify you using the code assigned to you to receive benefits.
  • MIKAMBISTA collects your profile picture if you wish to personalize your account with a photograph.
  • We also collect your occupation (e.g., student, employee, unemployed).
  • If you qualify as a Politically Exposed Person (PEP), we will collect the title of the position you held and the public institution where you work or worked.
On the other hand, you have the option to register as a legal entity (company), in which case we will collect the company name, the RUC number for identification, as well as the first and last names, type, and ID document number of your company’s legal representative and shareholders. Additionally, we collect the corporate email address and contact phone number you provide, should these identify an individual within your company.

1.2.2. Collection of biometric personal data

MIKAMBISTA is a digital exchange bureau legally obligated to prevent and combat money laundering and terrorist financing. Similarly, at MIKAMBISTA, we are implementing protection measures against potential fraud or identity theft that could affect our users or the platform itself.
Therefore, we hereby inform you that, for certain financial operations, you will be required to provide biometric personal data during the identification process, which may consist of your fingerprint, facial recognition, and voice recognition.
Please note that the processing of this type of sensitive information complies with the Principles of Purpose and Proportionality established by our personal data protection regulations and is necessary to fulfill the aforementioned purposes.
You can rest assured that the MIKAMBISTA team, as well as the biometric validation service providers who have access to this data, maintain absolute confidentiality and professional secrecy over it, and cannot disclose this information without your consent or unless required by law.

1.2.3. Collection of personal data through KYC regarding the prevention of money laundering and terrorist financing (AML/CFT)

In order to comply with current regulations on the prevention of money laundering and terrorist financing regulated by the Superintendency of Banking, Insurance, and AFP (SBS) through Resolution No. 789-2018, we collect strictly necessary information from certain clients.

2. For what purposes do we use this personal information?

The aforementioned personal data will be processed for the following purposes:
  • To process user registration, provide the service, and offer technical support.
  • To validate the user’s identity and information in compliance with current regulations established by the SBS, which regulates the prevention of money laundering and terrorist financing for currency exchange companies.
  • To validate the user’s identity and the accuracy of the provided information against external information sources, such as MIKAMBISTA’s data and other publicly accessible sources or information providers, for purposes related to the prevention of money laundering and terrorist financing.
  • To transfer specific data to banking entities when the operational process requires transferring money to the user’s bank accounts in external entities, as well as to third-party accounts executed at the request and under instructions of the user.
  • To use properly anonymized or dissociated information to develop our services, research trends in the FINTECH sector, or conduct any type of activity of historical or statistical value.
  • For purposes related to the provision of the service.
  • To notify changes regarding our service.
  • To provide any information that MIKAMBISTA believes may be of interest to you.
  • To notify you when we find the ideal exchange rate that matches your needs, provided you have requested it.
  • To investigate and detect potential fraud or other violations of our Terms and Conditions, this Privacy Policy, and/or attempts to harm our users or the platform. We also use your personal data if we believe it is necessary for security reasons.
  • To comply with current regulations established by the Financial Intelligence Unit (UIF) of the SBS, such as keeping a registry of operations, reporting suspicious transactions to the UIF, or complying with any current and future regulations established by the SBS or other legal provisions.
  • To request additional information if you are identified as a Politically Exposed Person (PEP) or a relative of one.
  • To request additional information if your name or transaction is identified as an alert or flagged operation.
  • To conduct polls and surveys regarding our services.
  • To store your information in overseas cloud storage services. This is essential to provide the service through MIKAMBISTA’s platform.

3. Quality of personal data

The personal data requested is appropriate, relevant, and not excessive in relation to the purpose for which it is collected.
You declare that all information provided is true, complete, accurate, and up to date. Furthermore, you assume responsibility for the veracity, accuracy, integrity, and validity of such information. MIKAMBISTA assumes no responsibility for any loss or damage that may arise as a result of a breach of this duty.

4. Transfer of personal data to third parties

MIKAMBISTA respects your privacy and does not share information with third parties unless it is necessary to manage, develop, and execute the platform’s services or to comply with a legal obligation. In such cases, your personal data will be transferred as follows:

4.1. Providers that assist in complying with legal obligations

MIKAMBISTA is regulated in matters of money laundering and terrorist financing prevention through the Financial Intelligence Unit (UIF) of the SBS. Therefore, in order to comply with the obligations imposed by these regulations, we inform you that MIKAMBISTA relies on third-party providers that assist in the fulfillment of our legal obligations.

4.2. Third-party providers

MIKAMBISTA may transfer the aforementioned personal data to outsourced companies—such as biometric data validation companies, invoice management firms, payment processors, software service providers, customer communication service providers, and accounting services, among others—solely and exclusively for the purpose of providing the service.

5. Financial institutions

For the purpose of providing our service, MIKAMBISTA transfers necessary personal data to financial institutions when the operational process carried out on the platform requires the transfer of money to the user’s bank accounts in external entities.

6. Other authorities

Personal data may be transferred to administrative entities, judicial, and/or police authorities, provided that such transfer is established by Law or required by a court order or statutory mandate.

7. Information collected by other platforms and social networks

Our services contain links to third-party platforms, such as “WhatsApp.” Similarly, to facilitate the login process, users may utilize their pre-existing Facebook, Google, or Apple accounts.
MIKAMBISTA does not control these sites and is not responsible for their content, privacy policies, security measures, or how they process your personal data. The inclusion of such links by MIKAMBISTA does not imply any endorsement of the content of those sites, their owners, or operators, nor does it imply the existence of any contractual or commercial relationship with them.
The collection of your information by these platforms and social networks is beyond MIKAMBISTA’s control and is entirely separate from the processing we perform on your personal data. Any information you submit to these third parties is subject to that specific third party’s privacy policy and not MIKAMBISTA’s.
Therefore, we highly recommend that you carefully review the terms of use and privacy policies of such third parties to understand how they collect, use, and share your personal information with us or other third parties.

8. Retention of personal data

The personal data we collect will be retained until the contractual relationship with the data subject ends. Following that, we will retain said data exclusively for promotional and advertising purposes, until the user exercises their right to cancellation.
Please note that we are legally authorized to deny the exercise of the rights to access, deletion, and objection when necessary for: (i) compliance with legal obligations; (ii) the protection of the rights and interests of third parties; (iii) preventing the obstruction of legal proceedings; and (iv) in general, any scenarios permitted and/or mandated by applicable laws.
Furthermore, we may also retain properly anonymized or dissociated information that prevents the identification of its owner, provided it serves a statistical or scientific purpose aimed at improving and developing the products and services we offer in the market.

9. Confidentiality of personal data

The personal data provided will be treated with absolute confidentiality and may only be known and handled by MIKAMBISTA personnel who need to access such information to perform the tasks included in the purposes described above. Our platform is committed to maintaining permanent and indefinite professional secrecy regarding this data.

10. Security of personal data

In compliance with current regulations, we have adopted the necessary technical and organizational security measures to guarantee the protection of our users’ stored, transmitted, and processed personal data. This is done to prevent alteration, loss, unauthorized processing, or access that could affect the integrity, confidentiality, and availability of the information, taking into account the state of technology, the nature of the data stored, and the risks to which they are exposed.
Among the risk management measures we adopt are those aimed at determining any risk of incidents, preventing, detecting, and managing incidents, and mitigating their impacts.
Additionally, personal data is collected through an encrypted channel as part of the registration process. Likewise, the password used at the time of registration is fully encrypted.
In this regard, any information you provide us is sent at your own risk. MIKAMBISTA is not responsible for illegal interceptions or violations of its systems or databases by unauthorized persons, nor for the improper use of information obtained through those means, or any unlawful intrusion that escapes its control and is not attributable to the company.
Notwithstanding the foregoing, should MIKAMBISTA detect a security breach affecting the provided personal data, and if this poses a high risk to your rights and freedoms, we will immediately notify you of the situation in clear and plain language so that you can easily understand the nature of the data breach committed against your personal data.

11. Rights as a Personal Data Subject

11.1. ARCO Rights

ARCO rights (Access, Rectification, Cancellation, and Objection) constitute the set of rights through which you can exercise control over your personal data.

These rights allow you to:

    1. Access your information stored in our databases.
    2. Rectify such data.
    3. Delete (Cancel) your data from our database.
    4. Object to the use of your data if you discover it is being processed for a purpose not described in this document. [1]

Please note that you cannot request the deletion of your personal data if you still have an active relationship with MIKAMBISTA, if your express intention is to consume MIKAMBISTA’s services, or if legal obligations prevent us from deleting your information (for example, if public entities such as the SBS or SUNAT still require MIKAMBISTA to transfer the data subject to the deletion request).
 
Furthermore, we are not obligated to delete your personal data when its processing is necessary to respect freedom of expression and information, for reasons of public interest, or to initiate legal action against platform users.
On the other hand, please remember that if you request a modification of your data, you are responsible for updating it prior to registering your next transaction.

11.2. Right to Personal Data Portability

You have the right to request the return of the personal data you provided to MIKAMBISTA or request that it be transmitted to another company or companies, provided that the processing of this information is based on your valid consent or a contract. This data will be provided to you in a structured, commonly used, and machine-readable format.

12. Data Controller, Representative, and Personal Data Protection Officer

Please be advised that MIKAMBISTA, whose identifying details are set forth at the beginning of this Privacy Policy, is the entity responsible for processing the personal data collected on the platform (the Data Controller). As such, we are responsible for ensuring the lawful, fair, transparent, adequate, relevant, and secure processing of the personal data you provide, as well as for obtaining your free, prior, informed, express, and unequivocal consent.

13. Minors

The MIKAMBISTA platform and application are neither directed to nor designed for minors (individuals under 18 years of age) to conduct transactions. However, we have no means of validating whether the data entered belongs to an adult; therefore, we assume no liability for the actions of users on the platform who have falsely declared themselves to be of legal age.
In the event that we become aware that collected personal data belongs to a minor without the consent of a parent, tutor, or legal guardian, appropriate measures will be taken to delete this data as soon as possible. Additionally, any participation in processes involving the minor will be invalidated.

14. Consent

By accepting this Policy, you grant us your free, express, unequivocal, and informed consent to process your personal data in accordance with the purposes outlined above.

15. Amendments to this Privacy Policy

MIKAMBISTA reserves the right to modify its Privacy Policy in the event of changes in current legislation, doctrine, jurisprudence, or based on its own corporate criteria. If any changes are introduced to this policy, the new text will be published, and your prior consent regarding such changes will be requested.
If you do not agree with the new Privacy Policy for reasons that justify withdrawing your authorization to process your personal data, you may request that MIKAMBISTA remove your information through the designated channels, unless any of the aforementioned grounds for denial apply.
 
  • Responsible Department: Management (Gerencia)
  • Office Address: AV. Jose Gálvez Barrenechea Nro. 200 Int. 102 Urb. Santa Catalina – Lima – La Victoria
  • Email Address: contacto@MiKambista.com
  • Phone Number: (01) 758 2436

 

MIKAMBISTA INVESTMENT MANAGEMENT SAC, a company incorporated under Peruvian law, identified with RUC No. 20605353356.