Skip to content
SOL CAPITAL

Legal

Privacy Policy

Last updated:

Last updated: 25 August 2026.

1. Data controller

SOL CAPITAL ASSET MANAGEMENT S.A.C. ("SOL Capital"), domiciled in San Isidro, Lima, Peru, owns this website, holds the corresponding personal data bank, and is responsible for the processing of the personal data described in this policy, in accordance with Peruvian Law No. 29733, the Personal Data Protection Law, and its Regulations approved by Supreme Decree No. 016-2024-JUS.

2. Personal data we process

We may process the following categories of personal data:

  • Contact form: name, email address, company or institution, inquiry type, message content, and browsing language.
  • Client Portal and Data Room: name, email address, title, company, authorised transactions, process status, documentation requirement status, and messages or observations exchanged through the portal.
  • Authentication and security: access codes stored in encrypted or hashed form, session data, access date and time, IP address, and technical records required to prevent fraud, abuse, or unauthorised access.

Fields identified as mandatory are required to handle an inquiry or enable the requested access. Refusing to provide them may prevent us from handling the request or providing the relevant functionality.

The Client Portal is primarily intended for process tracking and for recording the informational status of documentation. Unless SOL Capital expressly enables and communicates a specific feature, we do not request that transaction documents be uploaded through the site.

This site does not use advertising or tracking cookies. It uses only strictly necessary technical cookies, such as language preferences and secure Client Portal session cookies.

3. Purposes of processing

We process personal data to:

  • Handle and respond to inquiries received through the site.
  • Assess information requests and manage current or prospective business relationships.
  • Authenticate users and administer secure access to the Client Portal.
  • Track mandates and private-debt structuring and placement transactions.
  • Display process progress, upcoming milestones, and documentation requirement status.
  • Send access codes and other transactional service communications.
  • Maintain activity records, prevent unauthorised access, and protect platform security.
  • Comply with applicable legal, contractual, and regulatory obligations.

We do not sell personal data or use it for third-party advertising.

4. Legal basis

Contact-form processing is based on the free, prior, express, informed, and unequivocal consent granted when the form is submitted. Client Portal data is processed to manage the requested or existing relationship with the company represented by the user, carry out coordination related to the mandate or transaction, and protect the security of the service. We may also process information where necessary to comply with legal or regulatory obligations.

Where processing is based on consent, it may be withdrawn at any time, without retroactive effect, through the site's contact form.

5. Processors, recipients, and international transfers

We use technology providers that process data on behalf of SOL Capital to operate the website and Client Portal:

  • Vercel: website hosting, execution, and distribution.
  • Supabase: database, authentication, and Client Portal infrastructure.
  • Resend: delivery of access codes and transactional communications.

These services may involve processing or storing data outside Peru, including in the United States of America and Brazil. SOL Capital adopts reasonably necessary contractual, organisational, and security measures to ensure that such processing is carried out in accordance with Law No. 29733 and its Regulations.

Where necessary to perform a mandate, certain professional contact details may be disclosed to prospective financing providers, advisers, or counterparties, within the scope of the transaction and subject to the corresponding confidentiality and data-protection obligations.

6. Retention period

We retain data only for as long as necessary to fulfil the purposes described and meet applicable legal or contractual obligations:

  • Access codes expire after 10 minutes and may only be used once.
  • Verified Client Portal sessions last for a maximum of 24 hours unless the user signs out earlier.
  • Portal profiles, messages, and activity records are retained while the transaction remains active and subsequently for the periods required to meet legal, contractual, security, or claims-defence obligations.
  • Inquiry data is retained for as long as necessary to respond and manage any resulting relationship.

Once the purpose has been fulfilled and the applicable periods have expired, the data is deleted, restricted, or anonymised, as appropriate.

7. ARCO rights

You may exercise your rights of access, rectification, cancellation, and objection (ARCO rights), and withdraw your consent, by submitting a request through the site's contact form. The request must state your full name, the right you wish to exercise, and a means of contact for the response. We may request reasonable information to verify your identity.

We will handle the request within the time limits established by applicable regulation. If you believe your request has not been handled appropriately, you may file a claim with the Peruvian National Authority for the Protection of Personal Data.

8. Personal data bank

The data processed through this site and the Client Portal is incorporated into the corresponding personal data bank held by SOL CAPITAL ASSET MANAGEMENT S.A.C. for the management of contacts, access, and Client Portal transactions.

9. Security measures

We apply reasonable technical, organisational, and legal measures to protect personal data against unauthorised access, alteration, loss, destruction, or disclosure. These measures include encryption in transit, access controls, limited-duration sessions, one-time codes, activity records, and data minimisation.

10. Minors

The website and Client Portal are intended for companies, shareholders, executives, financing providers, advisers, and other professionals involved in corporate transactions. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, we will take the necessary steps to delete it.

11. Changes to this policy

We may update this policy to reflect regulatory, technological, or operational changes. The current version will be published on this page and will state its last-updated date. Where appropriate, material changes will be communicated through reasonable means.