Privacy documents tend to be long and complex. We wanted to make our version as friendly as possible.
The first thing you should know is that this website either belongs to or is marketed by Heptagrama. Heptagrama is a company incorporated in Peru under the name of "Heptagrama S.A.C.". Our address is calle Los Ángeles 125, Lima, Peru. Hereinafter I will just call it "Heptagrama" for brevity's sake, but please understand that every time I use the words "we", "our" or "us" on this page, I am speaking about this company.
All in all, we have a true regard of users' privacy. We do not do anything morally questionable, unethical, disloyal or illegal with any information we can get about any of our users. We do not even have any intention to do so! In legal terms, we abide by the Peruvian "Ley de Protección de Datos Personales" but, as we have many European users, we also comply with European's General Data Protection Regulation to its greatest possible extent.
For any privacy-related question or inquiry, your contact person is Jorge Enrique Aguayo, one of our managers. You can reach him here (for common e-mail communication) or using this GPG public key (for encrypted e-mail communication). Encrypted chat and phone calls are also available upon request.
Does Heptagrama collect information?
In one word, yes. We collect statistical information on all our websites; and, in addition, we collect information when people subscribe, sign up or use specific services we provide. Let me describe this in greater detail below… but, before that, let me tell you that, unless it is expressly stated otherwise, all data is gathered in Finland and processed in Peru.
Every time you visit a web page Heptagrama owns or manages, our web statistics system (also known as a web counter or traffic analytics software) will try to learn the following:
- The time and date of your visit
- The web browser and operating system you used on your visit
- What device you used on your visit, and its screen resolution
- Whether it is the first time you visit us or you are a returning user
- What web pages you saw during your visit
- How you reached each web page
- Your IP address at the moment of your visit
To be extremely specific, Heptagrama's web statistics system uses four kinds of cookies: The first one is a test cookie. It is used to check if your computer will accept the other cookies. The test cookie is erased once its analysis is completed. The second ones are session cookies. They will gather the information mentioned above, and they will last for about half an hour in your device. The third one is a referral cookie. It lets us know how you reached our website, and it will stay in your computer up to six months, counted since your last visit to any web page we control. The fourth one is a visitor cookie. It helps us understand whether this is the first time you visit a website or whether you are a returning visitor. Visitor cookies will stay in your computer up to thirteen months, counted since your last visit to any web page we control. Needless to say, you do not need to wait all that time. You can erase them whenever you want.
Just one more thing: Heptagrama understands that the visitor cookie could potentially be used to identify a specific person, so we have taken an additional measure to disassociate it from your visits: We have programmed the web statistics system to first process its reports, and to then edit half of your IP address with zeroes. This means that we can know all the web pages "some visitor" has seen during his visit, but we can only know the country and city he come from. We voluntarily erase any more specific information from our computers to avoid learning more than we need from any user.
As mentioned above, we collect additional information under specific circumstances, as follows:
- If you sign up to one of your mailing lists, we will collect your e-mail address.
- If you send us an e-mail, we will collect both your e-mail address and your message.
- If you sign up to an account on any of our websites, we will collect your log in information and any other information you place in your account.
- If you sign up to a service we provide, we will collect your full sign up information, as agreed on the website when you signed up.
- Occasionally, we will also gather some information offline to include it in our databases. We will ask for your consent either offline or by e-mail before doing it.
- Lastly, we gather "server logs". This means, we store any information our servers record on every request it receives.
In general, if you provide any information to us voluntarily, we assume you are also giving us your consent to receive, store and process it.
Does Heptagrama use other cookies?
Yes, two, but they do not gather information.
If you log into your account on any of our websites, its software will need to place a session cookie in your device. Session cookies keep you logged in, so you must accept them if you want to use your account. These cookies are usually erased when you log out, so there are not any privacy concerns for you by accepting them.
We also use a cookie to store what version of the site you prefer (normal, dyslexic-friendly or other). That way, you do not need to change the style every time you visit a new web page. This cookie will last on your computer up to one year, counting since the last time you visited one of our web pages.
How do we use the information we gather?
In general, Heptagrama uses the data it receives for the uses and purposes it was collected. This means the following:
- We use the statistics information to analyse how we are doing online, and to see how we can improve. We usually review generic reports, but now and then we can also review one specific user's interactions to try to understand something in greater detail.
- We use the e-mails gathered on the mailing list forms to send the notifications and subscription messages you asked us to send you.
- We use the information on your e-mails to read your messages and to reply to them. These are known as transactional e-mails, and they are not usually mentioned in privacy notices. We are including them here to be absolutely transparent with you.
- We use the information you sent when you signed up to a service to allow you to log in to that same service later.
- We use any other information you included in your account later to be able to use it as that service requires. Most of the times, you will choose how to use that information, and Heptagrama will mainly just store it for you.
- If you buy products or services from our company, and you provide your contact information for the delivery of those products or services, then we will use that information to deliver the products or services you ordered.
- If we gather information offline, we will use it for the uses and purposes it was gathered offline, and we will request your permission either by e-mail or in writing.
- We use server logs information to analyse and counteract any cyberattack, cyberattack attempt, or suspected cyberattack attempt we receive.
- As a general rule, we do not combine the information we receive from different services in any way. We reserve the right to do it if we need to.
- Lastly, you must know we do not run automated analysis of personal data either.
How long do we keep the collected information?
- We store the statistics information for a year, but we store the reports indefinitely.
- We store the e-mails gathered on the mailing lists forms until either the user unsubscribes or until we deem convenient to unilaterally cancel the subscription (for example, in the event we notice the e-mail address does not exist any more).
- We store the information in transactional e-mails (as defined above) with two different criteria: If we deem that the e-mail is of personal nature or that it aims at a short-term interaction with us, then we store it as long as it is necessary to read and reply to it; then, we erase it. If we deem that the e-mail is of business nature or that it aims at a long-time interaction with us, then we store it as long as we deem it necessary, at our discretion.
- We store the information you sent to sign up to a service we manage until you cancel your membership in that service. In the event the deletion is not automatic, then we store it for a reasonable time, until our staff is able to find it and erase it manually.
- We store the information you include in your accounts until you opt to erase it, until we close your account or until we close the service, whichever occurs first.
- We store the information you included for the delivery of a product or service up to one year, counting from the date of your last purchase.
- We store server logs for an average of one year. Time varies according to the kind of server log.
As every company that has a few employees, you must know we store data in different computers, according to the functions of each employee. In addition, Heptagrama, as a company, keeps up-to-date copies of all this information, and backups of the same for security purposes. Unless expressly stated otherwise, all information will be stored in Finland or Peru.
Does Heptagrama share any information?
As a general rule, no. Heptagrama does not share, sell, exchange or otherwise trade with any information of any of our users. Every employee at Heptagrama knows how to handle information securely because we train them how to do so. We also monitor the compliance with our information security policies, and limit each employee's access to just what he needs to carry out his job.
We reserve the right, however, to share information under these four circumstances:
- When we receive a formal information request under the privacy law in force
- When we receive a formal information request from a Peruvian prosecuting authority, a Peruvian police department, or the Interpol
- When we receive a court order by a Peruvian judge to disclose information
- When we believe, in our sole discretion, that sharing information may help save or protect the environment, the health or the life of any individual.
The current laws in force grant you a few rights with regard to privacy.
You have the right to be informed about our practices. That is why we publish this privacy information.
You have the right to access a copy of the information we have about you. To make use of this right, please contact us as explained above.
You have the right to rectify any information you consider inaccurate or incorrect. To make use of this right, please contact us as explained above.
You have the right to ask us to erase any information we have about you. To make use of this right, please contact us as explained above.
You have the right to restrict the processing of your information. To make use of this right, please contact us as explained above.
You have the right to object the processing of your information. To make use of this right, please activate "Do Not Track" on your browser, and refrain from subscribing, signing up or purchasing a product or service from Heptagrama. Our web statistics system will respect your "Do Not Track" request and not track you. Not subscribing, signing up or purchasing is the best way to guarantee you we are not going to process your information.
You have the right to data portability, understood that you can request us to transfer your data to another company. To make use of this right, please contact us as explained above.