Skip to content

Privacy policy

Last updated: 30 de julio de 2026

This is a courtesy translation. The binding version of this policy is the Spanish one, drafted under Peruvian law. If the two texts differ, the Spanish text prevails.

At Sbeltia we handle health information, the most strictly protected category of personal data under Peruvian law. This document explains, plainly, what data we collect, what we use it for, how long we keep it and what you can ask us for at any time.

1. Who is responsible for your data

The controller of the personal data file is Grupo Sbeltia S.R.L. (RUC 20609170337), que opera bajo el nombre comercial «Sbeltia», with its registered address at Av. Arequipa 1860, Of. 1702, Edificio IQ Lince — Lince, Lima, Perú.

For anything relating to this policy you can write to us at info@sbeltia.pe or call us on (+51) 927 460 535.

2. The legal framework we apply

This policy is governed by Law No. 29733, the Personal Data Protection Act, and its regulations approved by Supreme Decree No. 003-2013-JUS. As far as medical care and the clinical record are concerned, Law No. 26842, the General Health Act, and the Ministry of Health's technical standards on clinical record management also apply. As providers of a consumer service, we are also covered by Law No. 29571, the Consumer Protection and Defence Code.

3. What data we collect

We do not ask for more than we need in order to look after you. Depending on the stage of the relationship, we handle:

  • Identification and contact data: first and last names, identity document, date of birth, telephone number, email address and city of residence.
  • Appointment request data: the procedure you are interested in, the date you would prefer and any comment you choose to write on the form.
  • Health data: medical and surgical history, allergies, medication, test results, clinical progress and clinical photographs. This is sensitive data and it is only collected within medical care, never through the website form.
  • Billing data: what is needed to issue the payment receipt required by SUNAT, the Peruvian tax authority.
  • Browsing data: IP address, device type and pages visited, in aggregate form, so we know which content is useful.

4. What we use it for

  • To answer your appointment request and arrange the date of the consultation.
  • To create and keep your clinical record, which is mandatory for all healthcare.
  • To carry out post-operative follow-up and remind you of your check-ups.
  • To issue payment receipts and meet tax and accounting obligations.
  • To deal with complaints, enquiries and requests from the competent authorities.
  • To send you information about procedures, offers and clinic news, only if you give us separate consent. You can withdraw it whenever you want and you will be cared for just the same.

5. Consent

By sending the appointment form you authorise us to handle the data you write on it for the sole purpose of contacting you and scheduling your consultation. Handling health data requires separate, express, written consent, which is explained to you and signed at the practice before any procedure.

Clinical photographs are taken for medical purposes. They are not published or used for advertising without specific, written and revocable authorisation, separate from the informed consent for the surgery. You may authorise medical use and refuse advertising use without that affecting your care in any way.

6. Who we share the information with

We do not sell or transfer your data. The only people who access it are:

  • The medical and nursing staff involved in your care, bound by professional secrecy.
  • The clinics and surgical centres where your procedure is carried out, strictly as far as is necessary to perform it.
  • Laboratories and diagnostic support services we refer you to for your case.
  • Suppliers acting as data processors (email, web hosting, scheduling system), bound by contract to use the data only in order to provide us with their service.
  • Judicial, administrative or health authorities, where a rule obliges us to.

Some of these suppliers host the information on servers outside Peru. That cross-border flow is carried out in accordance with article 15 of Law No. 29733, requiring safeguards equivalent to those offered by Peruvian law.

7. How long we keep it

The clinical record is kept for the period set by the health regulations in force, which is not less than five years from the last episode of care. Accounting and tax data is kept for the period required by the relevant legislation. Data collected solely to schedule an appointment that never took place is deleted after twelve months. Data used to send you marketing communications is kept until you withdraw your consent.

8. How we protect it

We apply technical, organisational and legal measures proportionate to how sensitive the information is: access restricted by role, personal and non-transferable credentials, encryption of the website's communications, backups and confidentiality undertakings signed by all staff. No system is infallible; should an incident affecting your data occur, we will tell you and take whatever corrective measures are appropriate.

9. Your rights

The law gives you rights of access, rectification, cancellation and objection — known in Peru as the ARCO rights — as well as the right to withdraw your consent and not to be subject to decisions based solely on automated processing.

Specifically, you can ask us to:

  • Tell you what data of yours we hold and where it came from.
  • Correct anything that is wrong or incomplete.
  • Delete whatever is no longer necessary, other than what we are required by law to keep, such as the clinical record.
  • Stop a particular use, for example sending you marketing communications.

To exercise them, write to us at info@sbeltia.pe stating your full name, your identity document and which right you wish to exercise. We will reply within the periods set by the regulations: up to twenty working days for the right of access and up to ten working days for rectification, cancellation and objection, counted from when we receive your request.

If you believe we did not deal with your request properly, you may go to the National Personal Data Protection Authority of the Ministry of Justice and Human Rights.

10. Cookies and measurement tools

This site uses first-party cookies, needed for the website to work, and may use analytics cookies to find out which pages are most useful. You can block or delete them from your browser settings; if you do, some functions may stop behaving as expected.

11. Minors

We do not collect data from children under fourteen through this site. Care for minors always requires the presence and authorisation of their parent or guardian.

12. Changes to this policy

We may update this document when the rules or the way we work change. The version in force is always the one published on this page, with the update date shown at the top. If the change significantly affects how your data is handled, we will tell you through the contact details you gave us.

Any questions about how your data is handled? Write to us and we will answer.