Privacy Policy

The data controller (titular del banco de datos personales) is ANDE Group LLC, a limited liability company organized under the laws of the State of Florida, United States, with offices at 320 Granello Ave. Unit 832, Coral Gables, Florida, United States (“ANDE”, “we”, “us”).

Privacy contact: hello@andehealth.com. Postal requests may be sent to the address above, marked “Privacy / Protección de Datos”.

Where required, personal data collected through this website is stored in a database administered by ANDE and registered or registrable before the Peruvian National Authority for Personal Data Protection (Autoridad Nacional de Protección de Datos Personales, Ministerio de Justicia y Derechos Humanos).

Information you provide voluntarily through our contact or market-partner forms: name, company, role, country, business email, optional telephone, area of interest and message content.

Business correspondence you send to us by email or through professional channels.

Technical information generated automatically when you visit the website: browser and device type, operating system, referring page, pages viewed, approximate location derived from IP address, and cookie identifiers (see the Cookie Policy).

We do not knowingly collect sensitive personal data (datos sensibles), including health data, and we ask you not to submit it through this website. We do not knowingly collect data from persons under 18 years of age.

Purposes: (i) respond to business inquiries and evaluate potential commercial relationships; (ii) assess market-partner applications; (iii) maintain business communications and records; (iv) operate, secure and improve the website; (v) comply with legal, accounting and regulatory obligations.

Legal basis in Peru: your free, prior, express, unequivocal and informed consent, granted when you submit a form; and, where applicable, the execution of a contractual or pre-contractual relationship and compliance with legal obligations, under Law No. 29733 and Supreme Decree 016-2024-JUS.

Providing the data marked as required is necessary to process your inquiry. If you do not provide it, we may be unable to respond.

We do not use website information for medical purposes, do not process health data through this website, and do not make automated decisions producing legal effects about you.

We may share personal information with: service providers acting as processors (hosting, email, analytics, CRM and security); professional advisors (legal, accounting); and competent authorities where required by law or judicial order.

We may share limited business-contact information with a company we represent or with a prospective market partner strictly to progress the commercial relationship you initiated.

We do not sell personal information and do not share it for cross-context behavioral advertising within the meaning of U.S. state privacy laws.

ANDE operates internationally. Personal data may be transferred to and processed in the United States, Peru and other jurisdictions where our service providers operate, whose data-protection standards may differ from those of your country.

For Peruvian data subjects, cross-border transfers are made with your informed consent and/or under contractual safeguards requiring the recipient to maintain protection levels consistent with Law No. 29733 and Supreme Decree 016-2024-JUS.

Personal data is retained only as long as necessary for the purposes described, and in any case for no longer than the period required by applicable commercial, tax and statute-of-limitation obligations. Inquiry records are generally retained for up to five (5) years from the last interaction, after which they are deleted or anonymized.

We apply technical, organizational and legal measures proportionate to the risk — including encryption in transit (HTTPS), access controls, provider due diligence and confidentiality obligations — as required by Law No. 29733 and its Regulation. No system is completely secure; we cannot guarantee absolute security.

If you are in Peru, you may exercise your rights of access, rectification, cancellation (deletion) and objection (derechos ARCO), as well as the rights to information, updating, inclusion, portability, objection to automated decisions and revocation of consent, under Law No. 29733 and Supreme Decree 016-2024-JUS.

Requests may be sent to hello@andehealth.com or to our postal address, attaching identification of the data subject or legal representative. We respond to access requests within twenty (20) business days and to rectification, cancellation or objection requests within ten (10) business days, extendable once with justification.

If your request is denied or unanswered, you may file a protection claim (reclamación) before the Autoridad Nacional de Protección de Datos Personales of the Ministerio de Justicia y Derechos Humanos of Peru.

Depending on your U.S. state of residence, you may have rights to know, access, correct, delete, obtain a portable copy, opt out of sale/sharing or targeted advertising, and to be free from discrimination for exercising these rights. Use the same contact channels; verification of identity may be required, and you may appeal a denial by replying to our decision.

The use of cookies and similar technologies is described in our Cookie Policy. Optional categories are activated only with your consent, which you may withdraw at any time through the cookie preference center.

Commercial emails, where sent, comply with the U.S. CAN-SPAM Act and Peruvian anti-spam rules (Law No. 28493 and Law No. 29571): each message identifies the sender, states its commercial nature and includes a functional unsubscribe mechanism.

We may update this Privacy Policy. The version in force is the one published on this page, identified by its update date. Material changes affecting purposes will be notified and, where legally required, will require new consent.