Legal

Privacy Policy

Effective Date: July 24th, 2026

This policy explains, in plain language, what personal data we collect through peptidesinmexico.com, why we collect it, who helps us process it, and the rights you have over it.

1. Who is responsible for your data

Peptides In Mexico is a division of A&M Capital, S.A. de C.V., the data controller (responsable del tratamiento):

Controller: A&M Capital, S.A. de C.V. — Peptides In Mexico division
Domicile: Torre 1 World Trade Center, Local 201A, Colonia Escalón, San Salvador, El Salvador
Email: [email protected]
Phone / WhatsApp: +52 33 4898 1492

Our data practices are governed by the Personal Data Protection Law of El Salvador (Legislative Decree No. 144, in force since November 28th, 2024), supervised by the State Cybersecurity Agency (Agencia de Ciberseguridad del Estado — ACE).

2. What data we collect

Through the contact form on this site:

Identification and contact data: full name, email address, country, and phone / WhatsApp number (optional).
Your main goal: the option you select (for example, repair & recovery, metabolism, cognition). Because it can reveal health-related interests, we treat it as sensitive data — see Section 3.
Your message: anything you choose to write in the free-text field.

The form also records the page you sent it from and the date and time you gave your consent.

If you contact us directly by WhatsApp or email, we receive the contact details and content you send us.

Technical data: our hosting provider (Cloudflare) processes connection data such as IP addresses in server and security logs in order to deliver and protect the site. We do not use this data to identify you.

We do not collect your data from any other source, and we never sell personal data.

3. Health-related interests are sensitive data

Please do not include detailed medical information in the message field — no diagnoses, test results, medication lists, or clinical histories. Your general goal is all we need to point you in the right direction.

The goal you select and anything health-related you choose to write are treated as sensitive personal data under Salvadoran law (Article 37, Decree 144). We only process them with your express, unequivocal consent — the checkbox on the form — and only to respond to your inquiry. This website does not provide medical care; any actual medical attention is given by a licensed physician under professional secrecy.

4. Why we use your data, and on what legal basis

To respond to your inquiry and send you the information you requested — based on your express consent (Articles 26–27) and on pre-contractual steps taken at your request (Article 28).
To follow up on the inquiry you started, by email or WhatsApp — same basis as above.
To comply with legal obligations that apply to us.

If we ever want to send you commercial communications beyond your own inquiry, we will only do so with your consent — and you can object or withdraw that consent at any time (see Section 5).

5. Your rights (ARCOPOL)

You have the right to:

Access — know what data we hold about you.
Rectification — correct inaccurate or incomplete data.
Cancellation — have your data deleted.
Opposition — object to a specific use of your data.
Portability — receive your data in a commonly used format.
Oblivion — have your data erased and no longer processed ("right to be forgotten").
Limitation — restrict how your data is processed.

To exercise any of them, or to withdraw your consent, email our Data Protection Officer at [email protected] (subject: “Data Protection”) with your name, a copy of your identity document, and a description of the data and the right you want to exercise.

Exercising your rights is free of charge.
We will respond within 20 business days, extendable once by 20 more business days for complex requests.
If you are not satisfied with our response, you have the right to file a complaint with the ACE (Agencia de Ciberseguridad del Estado) in El Salvador.

6. Data Protection Officer

Our Data Protection Officer channel is [email protected], subject line “Data Protection”. Use it for any privacy question, request, or complaint.

7. Who processes data on our behalf

We use a small number of service providers (processors) under contract:

Cloudflare, Inc. — website hosting, content delivery, and security.
Google LLC — when you submit the form, your answers are transmitted through Google Apps Script, stored in a Google Sheet, and emailed to our inbox.

These providers process data only to provide their services to us. WhatsApp (Meta Platforms) is different: it is an independent service governed by Meta’s own terms — see Section 10.

8. International transfers

Cloudflare and Google servers may be located outside El Salvador. Where that happens, the transfer is made with contractual safeguards and protection standards no lower than those of Salvadoran law (Article 44, Decree 144). By submitting the form or contacting us, you consent to this transfer.

9. Cookies

This website does not set cookies, does not use tracking pixels, does not run analytics scripts, and does not store anything in your browser. That is why you do not see a cookie banner. If we ever add analytics, it would be a cookieless, aggregate tool, and this policy would be updated first.

10. WhatsApp

If you contact us through a WhatsApp button, your phone number, profile, and messages are also governed by WhatsApp’s own terms and privacy policy (Meta Platforms). We only use your WhatsApp contact to reply to you.

11. Security

We protect your data with technical and organizational measures: encryption in transit (HTTPS/TLS), access limited to the small team that answers inquiries, and data minimization — we only ask for what we need. No system is completely secure, so we cannot promise absolute security, but we work continuously to protect your information (Article 36).

12. If a data breach ever happens

If a security breach affects your personal data, we are committed to notifying the ACE, the Attorney General’s Office (Fiscalía General de la República), and you within 72 hours of becoming aware of it (Article 25).

13. How long we keep your data

Only as long as needed to handle your inquiry and any relationship that follows, or as long as a legal obligation requires (for example, accounting and tax records must be kept for the periods set by Salvadoran law). After that, we delete it.

14. Minors

This website is intended for adults. It is not directed at anyone under 18, and we do not knowingly collect data from minors. If you believe a minor has sent us data, write to the Data Protection Officer and we will delete it.

15. Your local rights

We serve people mainly in Mexico. Nothing in this policy limits the mandatory data protection rights you hold under your local law — for example, Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

16. Changes to this policy

Any update will be published on this same page with a new effective date at the top. This page is the official channel for communicating changes to this policy.

17. Contact

Peptides In Mexico — a division of A&M Capital, S.A. de C.V.
[email protected] · WhatsApp +52 33 4898 1492
Torre 1 World Trade Center, Local 201A, Colonia Escalón, San Salvador, El Salvador