Privacy Policy — Panama
Version 1.1
Effective date: September 13, 2026
Controlling version: Spanish; this English text is a convenience translation.
Malaquita International, S.A., RUC 155687125-2-2019 DV 66, located at Edificio Telva Graciela, Office L-A, Republic of Panama, is responsible for personal data used to operate Lavé in Panama. Contact us at info@lavelaundry.services, WhatsApp +507 6360-6030, or https://lavelaundry.services.
1. SCOPE
This Policy applies to the Lavé Client app, the operational driver and laundry apps, the administration panel, and website forms. It explains what data we process, why we use it, who receives it, and how rights may be exercised.
2. DATA WE PROCESS
We may process name, email, phone, country, language and profile image; protected credentials, verifications, sessions, devices, IP address and security logs; addresses, references, selected coordinates, operating area, orders, schedules, garments, quantities, weight, services and statuses; payment or refund amount, currency, status, provider reference and receipts; photographs, QR codes, counts, discrepancies, incidents, messages and administrative actions; points, coupons and antifraud signals; and, for staff and partners, role, territory, assigned laundry, availability, routes and activity needed to perform and audit the service.
Lavé must not store the complete card number or security code. Those details are handled by the enabled payment provider.
3. DEVICE PERMISSIONS
The client app uses notifications for operational messages. Addresses are typed or selected through search or a map; precise, persistent device location is not required to create an address. Driver and laundry apps may use camera, photos and foreground location for QR codes, evidence, routes, pickup and delivery. These functions are not presented as permanent tracking outside an authorized operation.
4. PURPOSES AND LEGAL BASES
We process data to create and protect accounts; quote, charge, coordinate, process, collect and deliver orders; handle discrepancies, claims and refunds; send necessary service notices; administer points and coupons; prevent fraud and protect people, garments and systems; meet accounting, tax, consumer and authority requirements; and improve stability and security with minimized data.
Applicable bases include contract performance and pre-contractual steps, legal obligations, consent when required, and legitimate interests subject to balancing. Promotions require the applicable authorization and must always offer an easy opt-out.
5. RECIPIENTS AND PROVIDERS
We share only what is needed with laundries, drivers, authorized administrators and operational providers. These may include Render and PostgreSQL for hosting and operational data; Cloudflare R2 for private storage; Expo and Firebase for notifications; MojoAuth for access verification; Tilopay or another enabled payment provider; Google Maps Platform, Apple Maps or OpenStreetMap/Leaflet for addresses and routes; WhatsApp for support when the person chooses it; HubSpot for website forms; and app stores and operating systems under their own policies.
We do not sell personal data. If we introduce a materially new provider or purpose, we will update this Policy and the applicable agreements before transferring data.
6. INTERNATIONAL TRANSFERS
Some providers may process data outside Panama. We apply Law 81 of 2019 and its regulations, suitable contractual and security measures, and access limitations. Details of current providers may be requested from the privacy contact.
7. RETENTION
We retain an account while the relationship exists and it is needed. Orders, payments, billing and adjustments are retained for applicable tax, accounting, consumer and legal-defense periods. Evidence without a claim is normally retained for up to 24 months; evidence connected with a claim, fraud or litigation is retained through resolution and the applicable defense period. Support records are normally retained for up to 24 months and security logs up to 12 months, unless an investigation or legal duty requires longer. Backups are deleted through their secure rotation cycle.
8. ACCOUNT DELETION
A client may request deletion from Profile in the app or through https://lavelaundry.services/en/delete-account/. The process deletes sessions, recovery data, notifications, push tokens, addresses, loyalty data, coupons and the private profile photo, and anonymizes the user record. Orders, payments and evidence that must remain for law, accounting integrity, fraud prevention or legal defense are restricted and, where possible, separated from direct identifiers.
Staff and partner accounts are managed administratively to preserve contractual, employment, security and audit obligations. Deletion does not immediately reach backups awaiting rotation or records subject to mandatory retention.
9. SECURITY AND INCIDENTS
We use role- and territory-based access, credential protection, private storage, validation, logs and reasonable risk-based safeguards. No system is infallible. If an incident occurs, we investigate, mitigate, document and notify persons or authorities when the law requires it.
10. RIGHTS
A person may request access, information, correction, updating, deletion, objection, restriction, portability, withdrawal of consent and review of automated decisions where applicable. We verify identity and respond within the legal period, explaining any restriction based on retention duties, third-party rights, fraud prevention or security.
Send requests to info@lavelaundry.services. A complaint may also be filed with Panama's National Authority for Transparency and Access to Information (ANTAI), without limiting other remedies.
11. CHILDREN AND SENSITIVE DATA
The client platform is not directed to minors who lack legal capacity to contract. We do not intentionally request unnecessary sensitive data. Photos, location or notes may reveal it incidentally; users should avoid excessive information and we restrict access, use and retention.
12. WEBSITE, COOKIES AND FORMS
The website uses HubSpot forms for contact, laundry and franchise inquiries. Before enabling non-essential cookies or technology, we will provide notice and request the consent required. Form data will not be used for advertising without an applicable legal basis.
13. CHANGES
We may update this Policy for legal, operational or technical changes. Material changes will be communicated and renewed acceptance will be requested when needed. We retain the version, language and acceptance date.
Primary law: Panama Law 81 of March 26, 2019 and Executive Decree 285 of May 28, 2021.