Privacy on this site

1. Data controller

Controller

YAPI S.A.S., tax ID (RUC) 1091798207001

Address

Calle Bolívar s/n y Arturo Pérez, Edificio Julio Miguel Aguinaga, Piso 1, Atuntaqui, Antonio Ante, Imbabura, Ecuador

Data protection

dpo@yapi.ec

2. Scope

This notice covers the yapi.ec website only. YAPI products — YAPI Loyalty, for example — process data for other purposes and have their own privacy policy, provided with each product.

3. What data we process and why

• When you visit the site. This site has no forms and uses no first-party cookies, analytics tools, advertising pixels or third-party scripts. Our hosting provider, Cloudflare, processes the technical data of each request (IP address, browser type, requested page) to deliver the site and protect it from abuse, and may use strictly necessary cookies for that security.
• When you write to us. If you email us, we process your address, any details you choose to include and the content of your message, solely to reply and follow up on your request.

4. Legal basis

Technical processing of your visit is based on our legitimate interest in the site working and being secure. Processing of your email is based on the request you start by writing to us and, where applicable, on your consent.

5. Retention

We keep emails for as long as needed to handle your enquiry and any relationship that follows from it, and delete them once they are no longer needed, unless the law requires us to keep them. Technical visit data follows the hosting provider's security retention periods.

6. Recipients

We do not sell or share your data. It is processed on behalf of YAPI S.A.S. by Cloudflare (site hosting and security) and Zoho (email). Both may process it outside Ecuador, under their own data-protection terms.

7. Your rights

Ecuador's Personal Data Protection Law (LOPDP) gives you, free of charge, the rights of access, rectification and updating, erasure, objection, portability and suspension of processing, as well as the right not to be subject to decisions based solely on automated assessments and to withdraw your consent.

To exercise them, write to dpo@yapi.ec stating the right you wish to exercise. We will reply within fifteen days of receipt, a period that may be extended as the LOPDP allows.

If you believe your rights were not respected, you may file a complaint with Ecuador's Superintendency of Personal Data Protection (spdp.gob.ec).

8. Changes

If the site starts processing data differently — with analytics, for example — we will update this notice before doing so and change its last-updated date.