ETHICS CODE OF ECART PAY S.A.P.I DE C.V.
This Ethics Code establishes the principles, values, and guidelines that ECART PAY S.A.P.I. de C.V. (hereinafter, "ECART PAY"), as a service provider for the processing of payments in digital media, must observe in its electronic operations, in order to guarantee respect for the rights of users, promote responsible practices in the processing of digital payments, and foster a culture of ethical compliance, self-regulation, inclusion, responsible advertising, and protection of personal data.
This Code sets the minimum standards, in a non-exhaustive manner, applicable to the activities of processing and facilitating payments made through electronic means, as well as the corresponding verification and compliance mechanisms.
SCOPE OF APPLICATION
This Ethics Code is voluntary and shall be applicable to all individuals or legal entities, national or foreign, that use the ECART PAY platform to make electronic payments as part of the purchase and sale of goods or services, subscriptions, rentals, or other types of transactions conducted through digital channels within the national territory.
Once adopted, compliance will be mandatory and binding for ECART PAY, which commits to ensuring that all its payment processes comply with the principles set forth herein.
This Code shall not apply to incidents or technical failures arising from force majeure or unforeseen circumstances. Furthermore, its provisions do not replace, limit, or exempt compliance with the applicable regulations for service providers regulated by specialized supervisory entities.
DEFINITIONS
For the purposes of this Code, the following definitions apply:
Payment aggregator: Legal entity that mediates between buyers and sellers for the receipt, processing, and settlement of digital payments in a single concentration account.
Code: This Ethics Code of ECART PAY.
Electronic Commerce: Any transaction involving the offering, payment, marketing, or contracting of goods and services through electronic, digital, optical, or any other technology.
Cardholder: The holder of the Card.
Personal Data: Any information concerning an identified or identifiable individual.
User: All individuals or legal entities that acquire ECART PAY Services and have a User account within the Website.
Electronic payment platform: Technological system operated by ECART PAY that allows the management, authorization, processing, settlement, and reconciliation of online payments.
Advertising: Any commercial communication related to goods or services offered through digital means.
Website and/or Platform: Any of the contents available on or through this Website.
NORMATIVE FRAMEWORK
ECART PAY and its Users shall act in accordance with the Political Constitution of the United Mexican States, the Federal Law on the Protection of Personal Data Held by Private Parties, the Federal Civil Code, and the international treaties ratified by Mexico concerning human rights and consumer protection, as well as any other applicable legislation.
RESPONSIBILITY AND COOPERATION WITH AUTHORITIES
The ECART PAY platform located on the website https://ecartpay.com/ will be available to cooperate with authorities when warranted, particularly in cases where cardholders or users of the payment system are affected. ECART PAY shall only be responsible for the services it offers, as specified in its terms and conditions.
INFORMATION REQUIREMENTS AND FUNCTIONALITY OF THE PLATFORM
ECART PAY must ensure that its platform provides at least the following information:
Corporate name or business name, brands, and address of ECART PAY, and accessible contact methods.
Clear description of how the service works.
Cancellation policy and dispute resolution pertaining to chargebacks.
Complaint procedures and customer service with operational days and hours.
Age restrictions or special usage conditions.
Personal data treatment.
Accepted payment methods, billing processes, and security measures.
Information about fees, additional charges, and taxes.
Electronic payment receipts documenting each transaction.
Procedures for issuing and correcting tax receipts.
TERMS AND CONDITIONS
The Terms and Conditions of use of the ECART PAY digital platform must be drafted and published in Spanish, clearly, visibly, precisely, and accessibly, available at all times for the User before and during the contracting or use of the services. These terms will be legally binding for each transaction executed through the platform and must comply at all times with the provisions established by the Federal Consumer Protection Law, the Law on the Protection of Personal Data Held by Private Parties, and other applicable legislation.
These Terms and Conditions must contain at least the following elements:
General contractual conditions, including the rights and obligations of both parties, payment methods, confirmation process, delivery of services, cancellations, returns, and responsibilities;
Promotions, discounts, or benefits, indicating specific dates, applicable conditions, and limitations;
Restrictions or penalties applicable, including clauses for non-compliance, late cancellations, inappropriate use of services, and economic or administrative sanctions;
Contact methods for support and customer service, as well as official communication channels.
The applicable Terms and Conditions are available for consultation on the ECART PAY digital platform, accessible through the official website.
LEGITIMACY AND ADVERTISING ACCURACY
All forms of advertising or commercial communication related to the offered services must comply with the principles of truthfulness, objectivity, and verifiability, avoiding misleading, inaccurate statements, or those that induce error, in accordance with the provisions of the regulatory body of ECART PAY.
Any message that conceals relevant information, omits applicable conditions, or employs manipulative practices, undue pressure, or exploitation of the consumer's inexperience is prohibited.
DIRECT ADVERTISING AND EXCLUSION MECHANISMS
ECART PAY will incorporate clear and effective mechanisms for users to exercise their right to opt-out of receiving promotional communications or direct advertising in accordance with the Privacy Notice found on the ECART PAY page. Additionally:
All advertising must be fully identifiable as such;
It must include the name or business name of the responsible issuer and contact channels for the exercise of exclusion rights;
Access to services cannot be conditioned on the acceptance of receiving advertising, unless it is an integral part of a clearly informed business model.
PRINCIPLES OF DATA PROCESSING
ECART PAY will adopt ethical and legal principles for the processing of personal data, ensuring the security, confidentiality, and responsible use of the information provided by users.
A Privacy Notice will be made available to the public in accessible and simple language, in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties;
The ARCO rights (Access, Rectification, Cancellation, and Opposition) will be guaranteed at all times;
Specific protection measures for sensitive data will be established;
The treatment, transfer, or use of personal data of minors will not be permitted without the explicit consent of parents or guardians.
SELF-REGULATION
ECART PAY and its Users will implement an internal self-regulation system to ensure compliance with legal and ethical provisions in the digital environment. This system will include: Mechanisms for receiving, following up, and resolving complaints related to non-compliance with legal or contractual obligations; Continuous training for staff on commercial ethics, consumer protection, and data protection; Appointment of an internal compliance officer for e-commerce.
ALTERNATIVE MECHANISMS
In the event of conflicts or claims, ECART PAY will promote the use of alternative dispute resolution mechanisms, such as conciliation or mediation, prioritizing a quick, fair, and accessible solution.
SUPERVISION AND COMPLIANCE
ECART PAY will adopt continuous internal supervision and improvement mechanisms to evaluate compliance with this Code and applicable laws. These include: Periodic internal audits; Semi-annual compliance reports; Implementation of corrective measures in light of findings.
INTERINSTITUTIONAL COMMITMENT
ECART PAY expresses its complete and voluntary adherence to the principles, obligations, and good practices established in this Code, reaffirming its commitment to: Commercial ethics; Advertising transparency; Effective protection of personal data; Respecting and promoting human rights in the digital environment.
SUPPLEMENTARY LEGAL DOCUMENTATION
For interpretation, compliance, and transparency purposes, ECART PAY users, customers, and business partners must consult, in addition to this Code, the legal information published on the official website of the platform, available at https://ecartpay.com/es-MX, which is an integral part of the conditions governing the use of the service.
This information includes, among others: General Terms and Conditions of Use; Comprehensive Privacy Notice; Cookies Policy; and other relevant documents.
These policies are permanently available for online consultation and may be updated by ECART PAY in accordance with applicable legal provisions. It is the user's responsibility to stay informed about their content and modifications.
Last updated: July, 2025.
