Privacy Policy
Last updated: 24 June 2026
1. Data controller
Ambiros Neural Factory S.A.C., with its registered address in Arequipa, Peru, is the controller of the personal data collected through the SAM platform (samacredita.com). Privacy contact: info@samacredita.com.
2. Data we collect
We collect the following data depending on how the service is used: • Account data: name, email address, company and job title of the user who contracts the service. • Worker data: full name, national ID number, job title, start date, medical examination results, completed training and document expiry dates. • Usage data: IP address, browser, device and pages visited, for analytics and security purposes. • Contact data: name, email and company provided voluntarily through the chat on the website.
3. Purpose of processing
Data is used solely to: • Deliver the contracted service (management of accreditation, training and medical examinations). • Send automatic document expiry alerts to authorised users. • Respond to enquiries and demo requests received through the website chat. • Improve the security, stability and functionality of the Platform. • Comply with applicable legal obligations in the Republic of Peru.
4. Legal basis
Processing is based on: (a) performance of the service contract signed with the contracting firm; (b) the worker's express consent where required by law; and (c) the controller's legitimate interest in the security and integrity of the system. In every case, Peru's Law No. 29733 on the Protection of Personal Data and its implementing regulation are observed.
5. Data sharing
We do not sell or transfer personal data to third parties. We share data only with infrastructure providers (cloud servers) acting as processors under confidentiality and security agreements. All providers comply with international security standards (ISO 27001 or equivalent).
6. Retention
Worker data is retained for the duration of the service contract and, once terminated, for a maximum of 12 further months, unless the law requires a longer period. Contact data received through the chat is retained for a maximum of 24 months.
7. Rights of the data subject
Under Law No. 29733 and its implementing regulation, data subjects have the right to access, rectify, cancel or object to the processing of their data (known in Peru as ARCO rights). Requests may be sent to info@samacredita.com stating full name, contact email and the type of request. We will respond within a maximum of 20 working days.
8. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction: encryption in transit (TLS 1.3), encryption at rest, role-based access control, audit logs and automatic backups.
9. Cookies
The Platform uses strictly necessary technical cookies for the service to work (session authentication and remembering the chosen language). It also uses third-party analytics cookies (Vercel Analytics) to measure use of the website anonymously and in aggregate. Users may configure their browser to block or delete cookies, although this may affect how the service works.
10. Amendments
We reserve the right to update this Policy at any time. In the event of substantial changes, we will notify users with an active account by email at least 15 days in advance.