Legal information · IGT MOTORS S.A.C.

Privacy and personal data policy

Version 1.0 · updated on November 10, 2026

This translation is provided for information only. In case of any discrepancy, the Spanish version prevails. View the Spanish version

---

1. Who is responsible for your data

IGT MOTORS S.A.C. is the owner of the personal data banks and the controller of the processing described in this policy. It is the company you should contact to exercise your rights or withdraw your consent.

2. Legal framework

This policy fulfills the duty to inform set out in article 18 of Ley 29733 (Ley de Protección de Datos Personales, the Peruvian personal data protection law) and article 6 of its Reglamento (implementing regulation), approved by Decreto Supremo 016-2024-JUS. The law allows this duty to be met through a published, easy-to-find privacy policy when data is collected online.

3. Data we process

• Identification and contact: name, phone or WhatsApp number, email address, city and, when required to issue the payment receipt, identity document (DNI) or RUC (tax ID) and address.
• Vehicle and request information: make, model, year, engine displacement, installed kit, technical symptoms, and photos or videos you send us.
• Commercial information: quotes, pre-orders from the import simulator, orders, payment receipts, payments, warranties, complaints and communications with our sales advisors.
• Workshops and partners: company name, contact details, location and services. Only the data that a workshop authorizes as public is published on the workshop map.
• Browsing: technical data and measurement and advertising cookies, only if you accept them (see the cookie policy).
• Country you are visiting from: a two-letter country code, used only for the redirection described in section 4.

You provide this data yourself when you write to us or buy from us. We do not request sensitive data (health, biometrics, ethnic origin, political opinions, religious beliefs, union membership, sex life or income) and we ask you not to send it.

4. Redirection by country

When you open the website or the store, your browser checks which country you are visiting from in order to take you to the IGT operation in your country: Colombia (igtmotors.com.co) or Brazil (loja.igtmotors.com.br). From Peru and the rest of the world you stay on this site. The check is made directly from your browser to https://www.cloudflare.com/cdn-cgi/trace, operated by Cloudflare, which receives the IP address of the request as any web server does. IGT does not receive or store your IP address: we only keep the country code in your own browser (igt-pais, for the duration of the session).

To avoid the redirection, add ?pais=pe to the address (for example, https://igtmotors.com.pe/?pais=pe). Your browser will remember that choice (igt-pais-fijo) until you clear your browsing data.

5. What we use your data for

1. Respond to requests for information, quotes and pre-orders received via WhatsApp, phone, email, the website, the import simulator or the online store.
2. Manage sales, issuance of payment receipts, shipping, accounts receivable and collections.
3. Provide technical support and maintenance, and manage product warranties.
4. Handle claims and complaints, including those filed in the Libro de Reclamaciones (complaints book), and comply with legal, accounting and tax obligations and with requests from authorities.
5. Manage the workshop network and publish on the map the public data of partner workshops that authorize it.
6. Protect the security of our systems and prevent fraud.
7. Take you to the website of the IGT operation in your country (section 4).
8. Send commercial information, news and promotions, only if you have given your consent.
9. Measure the use of the websites and the effectiveness of our advertising campaigns, only if you accept the corresponding cookies.

We do not make automated decisions about you or build profiles with your data.

6. Consent: when it is needed and what happens if you do not provide your data

Purposes 1 to 4 do not require your consent, because the data is necessary to prepare, enter into and perform the contractual relationship you request from us, or because a law requires us to process it (article 14 of Ley 29733). For purposes 8 and 9 we ask for your prior, informed, express and unequivocal consent, which you can give with a click or in writing and withdraw whenever you wish, without affecting the rest of your relationship with us.

Providing your data is optional. If you do not give us your contact and vehicle details, we will not be able to prepare the quote or provide support; if you do not give us the data required for the payment receipt, we will not be able to complete the sale. If you do not accept advertising or measurement cookies, nothing changes: you can use the websites and buy as usual.

7. Data banks

Your data is stored in personal data banks owned by IGT MOTORS S.A.C.: "Customers and prospective customers" (quotes, sales, support, warranties and complaints) and "Workshops and partners" (workshop network). Ley 29733 requires personal data banks to be registered in the Registro Nacional de Protección de Datos Personales (National Registry for Personal Data Protection), managed by the Autoridad Nacional de Protección de Datos Personales (ANPD); that registry is public and you may consult it.

8. Who receives your data and which countries it travels to

We do not sell your data. Only the following have access to it:

• IGT Motors Group companies: the parent company in Brazil and the international office in Spain, which support the Peru operation in management, administration, factory technical support and warranties.
• Hostinger: hosting of the websites and of the data you send us through them, on servers located outside Peru.
• Meta Platforms (WhatsApp): conversations with our advisors take place on WhatsApp. If you accept advertising cookies, Meta also receives ad measurement data.
• Google (United States): measurement of visits and ads (Google Analytics and Google Ads), only if you accept the corresponding cookies.
• Carriers, when an order has to be delivered to you, and authorities, when a regulation or an order requires it.

Several of these recipients are outside Peru, so there is a cross-border flow of personal data. We carry it out because it is necessary to perform the contractual relationship with you or because you have given your consent (article 15 of Ley 29733), and we require recipients to assume, at a minimum, the same protection and confidentiality obligations that Peruvian law imposes on us (articles 18 to 20 of the Reglamento). Technology providers act as processors: they process the data on our behalf and only for the purposes of this policy.

9. How long we keep your data

• Customers: for as long as the business relationship and the product warranty last and, afterwards, for the time that tax, accounting and consumer protection rules require receipts, records and complaints to be kept.
• Quotes and inquiries that do not end in a purchase: for as long as they are needed to handle and follow up on your request. You may ask us to delete them at any time.
• Advertising: until you withdraw your consent or object.
• Workshops and partners: for as long as the workshop is part of the network and for the time required by legal obligations.

Once these periods have expired, we delete the data or make it anonymous.

10. Your rights

As the data subject, you have the right to:

• Information: know why and how your data is processed, who receives it and how long it is kept.
• Access: know which of your data we hold, how it was collected and to whom it has been transferred. This includes portability: receiving the data you gave us in a structured, commonly used format, or asking us to transmit it to another controller where technically feasible.
• Rectification: update, complete or correct your data when it is inaccurate or incomplete.
• Cancellation: request the deletion of your data when it is no longer necessary or when you withdraw your consent, provided there is no legal or contractual duty to retain it.
• Opposition: object to the processing of your data on legitimate grounds and, in any case, to receiving advertising.
• Withdrawal: withdraw your consent at any time, without having to give a reason.

11. How to exercise your rights and how long we take to respond

Write to filipe@igtquantum.com.br or submit your request at our address. It is free of charge. The request must include: your full name with a copy of your identity document (and, if you act through a representative, the document that proves it); your specific request; a postal or email address for our reply; date and signature; and any supporting documents. We will acknowledge receipt.

Right	Maximum response time
Information	8 business days
Access (including portability)	20 business days
Rectification, cancellation and opposition	10 business days
Stop receiving advertising or withdraw consent	10 business days

Time limits run from the day after the request is submitted (article 69 of the Reglamento). Except for the right to information, they may be extended once, for an equal period, if there is a reason that justifies it; in that case we will let you know before the initial period expires. If a requirement is missing, we will tell you within 5 business days and you will have 5 business days to fix it; if we need additional information or documents, we will ask for them within 7 business days, you will have 10 business days to send them, and the response time will be suspended in the meantime.

Department responsible for handling these requests: Dirección de Operaciones (Operations Department) of IGT MOTORS S.A.C..

12. If you are not satisfied with our response

If we do not respond in time, or if the response does not satisfy you, you may file a claim with the Dirección de Protección de Datos Personales of the Autoridad Nacional de Protección de Datos Personales (ANPD), the data protection authority of Peru's Ministerio de Justicia y Derechos Humanos, including through its digital platform "Yo cuido mis datos personales", or go to the Peruvian courts through a habeas data action (article 24 of Ley 29733). You may also report to the ANPD any processing you consider contrary to the law.

13. Minors

Our websites and products are intended for workshops, companies and adults. We do not knowingly collect data from children under 14; processing such data requires the consent of their parents or guardians. Adolescents aged 14 to 17 may consent on their own as provided in the Reglamento. If we detect data of a minor provided without that consent, we will delete it.

14. Security

We apply the technical, organizational and legal measures required by Ley 29733 and its Reglamento to prevent the alteration, loss and unauthorized processing of or access to your data: access restricted to the people who need it, passwords and user profiles, encrypted connections, backups and a duty of confidentiality for our staff and our providers, which continues even after the relationship ends. If a security incident affecting your rights occurs, we will notify you and the ANPD within 48 hours of becoming aware of it, in the cases set out in article 34 of the Reglamento.

15. Effective date and changes

This policy is effective as of the date shown at the top. Any substantial change will be announced on this website before it is applied; if the change requires your consent, we will ask for it again.