PRIVACY AND PERSONAL DATA PROTECTION POLICY

ILEANOVO ECUADOR

Last updated: December 10, 2025

1. INTRODUCTION

ETHOSMAYEIA S.A. (hereinafter, “ILEANOVO”), in compliance with the Organic Law on Personal Data Protection (LOPDP), published in the Official Register Supplement No. 459 of May 26, 2021, its General Regulations, and other applicable regulations, informs users of the website https://ileanovo.com/ecuador regarding the processing of personal data collected through said website and other digital channels.
ILEANOVO guarantees that the processing of personal data will be carried out in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, proportionality, minimization, confidentiality, and security.

2. IDENTITY OF THE DATA CONTROLLER

Legal Name: ETHOSMAYEIA S.A.
Trade Name: Ileanovo
Website: https://ileanovo.com/ecuador
Contact Email: Ileanovoquito@gmail.com
Domicile: Republic of Ecuador
Data Controller: Ileanovo Ecuador

3. SCOPE OF APPLICATION

This Policy applies to:

Website users
Persons filling out contact or assessment forms
Patients or potential patients
Persons providing medical information via digital means

4. PERSONAL DATA COLLECTED

4.1 Identification Data

First and last names
ID card or identity document number
Age

4.2 Contact Data

Phone number
Email address
City and country

4.3 Sensitive Data (Health)

Information related to hair health
Clinical photographs of the scalp
Medical history provided voluntarily

⚠️ The processing of sensitive data is carried out only with express consent, in accordance with Article 25 of the LOPDP.

4.4 Technical and Navigation Data

IP Address
Device type and browser
Cookies and usage metrics.

5. PURPOSES OF PROCESSING

Personal data will be processed to:

Provide information about medical and aesthetic services
Conduct preliminary medical assessments
Schedule appointments and clinical follow-ups
Contact the user for informational or assistance purposes
Send promotional communications with express authorization
Comply with legal, sanitary, and regulatory obligations

6. LEGAL BASIS FOR PROCESSING

The processing of personal data is based on:

The free, specific, informed, and unambiguous consent of the data subject
The execution of a pre-contractual or contractual relationship
Compliance with legal obligations

7. DATA SUBJECT CONSENT

By providing their personal data, the data subject declares that they have read and accepted this Privacy Policy and expressly authorizes the processing of their data, including sensitive data where applicable.
Consent may be revoked at any time.

8. RETENTION PERIOD

Personal data will be kept:

For the time necessary to fulfill the purpose of the processing
While a relationship with the data subject exists
In accordance with the timeframes established by Ecuadorian regulations

Subsequently, the data will be deleted, blocked, or anonymized.

9. SECURITY MEASURES

ILEANOVO implements technical, organizational, and administrative measures to guarantee:

Confidentiality
Integrity
Availability of personal data

Limiting access solely to authorized personnel.

10. TRANSFERS AND DATA PROCESSORS

Personal data may be shared exclusively with:

Technology providers and digital platforms
Service providers under confidentiality agreements
Public authorities when a legal obligation exists

❌ ILEANOVO does not sell personal data.

11. RIGHTS OF THE DATA SUBJECT

The data subject may exercise the following rights:

Access
Rectification and update
Deletion
Opposition
Portability
Suspension of processing

📩 Requests to the email:
ileanovoquito@gmail.com

USE OF COOKIES

The website uses cookies to improve the user experience and obtain browsing statistics.
The user can configure them from their browser.

MODIFICATIONS

ILEANOVO reserves the right to modify this Policy at any time.
Modifications will be published on the website and will become effective upon publication.

CONTROL AUTHORITY

The data subject may file complaints with the:
Superintendence of Personal Data Protection – Ecuador