Legal

Privacy Policy

Last updated: May 2026 Draft scaffold — pending legal review.

This policy explains what data Koretreat Market SAS collects through koretreat.com, why we collect it, and your rights under Ecuador's Ley Orgánica de Protección de Datos Personales (LOPDP).

1. Information we collect

[TODO: legal review] We collect personal data you submit through the contact, distributor, and pharmacovigilance forms (name, clinic, email, phone, role, message), automatic technical data (IP, browser, pages visited), and any files you voluntarily upload. List sensitive-data categories explicitly per LOPDP Art. 7.

2. How we use your data

[TODO: legal review] (a) Respond to your inquiry, (b) manage the distributor program, (c) fulfil pharmacovigilance obligations, (d) site analytics, (e) regulatory reporting to ARCSA when required. Confirm legal basis for each (consent, legitimate interest, legal obligation).

3. Sharing

[TODO: legal review] Form submissions are stored in our self-hosted Dolibarr CRM. The site is hosted at Namecheap (United States). We do not sell personal data. List any third-party processors (analytics, email, hosting) and the country where they process data.

4. Cookies

See the Cookies Policy for details on the cookies and similar technologies we use.

5. Your rights

[TODO: legal review] Under the LOPDP you may access, rectify, delete, port, restrict or object to processing of your data, and withdraw consent at any time. Describe the process to exercise each right and the response window (typically 15 days).

6. Data retention

[TODO: legal review] Specify retention windows per data category (e.g. 24 months for marketing inquiries, 10 years for pharmacovigilance per ARCSA rules).

7. Security

[TODO: legal review] Describe technical and organisational measures: HTTPS, access controls on Dolibarr, encrypted backups, etc. State who to contact in case of a suspected breach.

8. International transfers

[TODO: legal review] If any processor is outside Ecuador, name the country and the safeguards in place.

9. Changes to this policy

We may update this policy. The latest version is always at this URL with the updated date at the top.

Questions?

For privacy questions or to exercise your rights, email privacidad@koretreat.com or write to Koretreat Market SAS, Quito, Ecuador.