This policy explains what personal data we process, what we use it for, who we share it with and how you can exercise your rights, under Peru’s Personal Data Protection Law (Law No. 29733) and its regulations. The Spanish version prevails.
Who we are
Xnovart is the trade name of TCM CORPORATION S.A.C.S., a Peruvian company that builds Clinilize and the other Xnovart products. It is the owner of its customers’ database and the controller of that data.
- Company name
- TCM CORPORATION S.A.C.S.
- RUC (tax ID)
- 20616568192
- Trade name
- XNOVART
- Registered address
- Cal. José Antonio Galán Nro. 1813 Int. A, Urb. Santa Verónica Ba. 2, La Esperanza, Trujillo, La Libertad, Perú
- Privacy and rights
- hola@xnovart.com
What data we process
From the companies that subscribe to our products and the people who use them, we process:
- Identity and contact: name, email address, phone and WhatsApp number.
- Billing: company or personal name, RUC or ID document, tax address and payment history.
- Usage and technical data: sign-ins, actions inside the applications, IP address, browser, device and the logs our systems keep for security.
Patient data in Clinilize
The data a clinic records about its patients in Clinilize, including medical records, belongs to the clinic: the clinic owns that database and is the controller. Xnovart acts as processor: it handles that data on the clinic’s behalf, following its instructions and only to provide the service. The same applies to the data any customer records about its own customers in the other Xnovart products.
If you are a patient and want to exercise your rights over that data, contact your clinic. If you write to us, we will pass your request on to it.
What we use it for
- Providing the service you subscribed to and keeping your account running.
- Invoicing and collecting payments.
- Sending you account notices, such as due dates, payments and service changes, by email and WhatsApp.
- Helping you when you ask for support.
- Keeping our systems secure and preventing unauthorized access.
Who we share it with
Only with the providers that help us deliver the service, and only as far as they need it: server hosting, email delivery, Cloudflare (network and site security), Meta Platforms (WhatsApp) and payment gateways. Also with authorities, when a law or an order requires it.
Some of these providers are outside Peru, for example in the United States, so your data may be transferred internationally. Such transfers are made only to provide you the service.
WhatsApp notices
Account notices may reach you on WhatsApp at the number you registered. If you no longer want them there, reply BAJA to any of those messages. Account notices will still reach you by email.
How long we keep it
For as long as our relationship with you lasts and, after that, for as long as tax, accounting and legal rules require.
Your rights
You can exercise your rights of access, rectification, cancellation and objection by writing to hola@xnovart.com. Tell us who you are and which right you want to exercise, and attach a document that proves your identity.
If you believe we did not handle your request properly, you can file a complaint with Peru’s National Authority for Personal Data Protection, part of the Ministry of Justice and Human Rights.
Changes to this policy
If we change it, we will publish the new version on this page with its update date.