CODE OF ETHICS OF ECART PAY S.A.P.I DE C.V.
This Code of Ethics establishes the principles, values, and guidelines that ECART PAY S.A.P.I. de C.V. (hereinafter, “ECART PAY”), as a payment processing service provider in digital media, must observe in its electronic operations, in order to guarantee respect for the rights of users, foster responsible practices in digital payment processing, and promote a culture of ethical compliance, self-regulation, inclusive, responsible advertising, and personal data protection.
This Code sets forth the minimum standards, in an illustrative but not limiting manner, applicable to the payment processing and facilitation activities carried out by electronic means, as well as the corresponding verification and compliance mechanisms.
SCOPE OF APPLICATION
This Code of Ethics is of voluntary adoption and will be applicable to all natural or legal persons, national or foreign, who use the ECART PAY platform to make electronic payments as part of the purchase and sale of goods or services, subscriptions, rentals, or other transaction modalities carried out through digital channels in the national territory.
Once adopted, its compliance will be mandatory and binding for ECART PAY, which undertakes to ensure that all its payment processes comply with the principles established herein.
This Code will not be applicable to incidents or technical failures derived from fortuitous events or force majeure. Likewise, its provisions do not substitute, limit, or exempt from compliance with the regulations applicable to service providers regulated by specialized supervisory entities.
DEFINITIONS
For the purposes of this Code, the following terms shall be understood as:
Payment aggregator: A legal entity that intermediates between buyers and sellers for the receipt, processing, and settlement of digital payments in a single concentrator account.
Code: This Code of Ethics of ECART PAY.
E-commerce: Any transaction involving the offering, payment, commercialization, or contracting of goods and services through electronic, digital, optical, or any other technology.
Cardholder: The holder of the Card.
Personal Data: Any information concerning an identified or identifiable natural person.
User: All those natural or legal persons who acquire the Services of ECART PAY and who have a User registration within the Website.
Electronic payment platform: A technological system operated by ECART PAY that allows the management, authorization, processing, settlement, and reconciliation of payments made online.
Advertising: Any commercial communication linked to goods or services offered through digital media.
Website and/or Platform: Any of the contents available on or through this Website.
REGULATORY FRAMEWORK
ECART PAY and its Users will act in accordance with the Political Constitution of the United Mexican States, the Federal Law on the Protection of Personal Data Held by Private Parties, the Federal Civil Code, and international treaties ratified by Mexico regarding human rights and consumer protection, and other applicable legislation.
RESPONSIBILITY AND COLLABORATION WITH AUTHORITIES
The ECART PAY platform located on the website https://ecartpay.com/ will be available to collaborate with the authorities when the situation warrants, particularly in cases where cardholders or users of the payment system are affected. ECART PAY will only be responsible for the services they offer, with the scope specified in their terms and conditions.
INFORMATION REQUIREMENTS AND PLATFORM FUNCTIONALITY
ECART PAY must ensure that its platform provides, at least, the following information:
Corporate name, brands, and address of ECART PAY, and accessible contact means.
Clear description of how the service operates.
Cancellation policy and chargeback handling.
Complaint procedures and customer service, with available days and hours.
Age restrictions or special conditions of use.
Processing of personal data.
Accepted payment methods, billing processes, and security measures.
Information on fees, additional charges, and taxes.
Electronic payment receipts documenting each transaction.
Procedures for issuance and correction of tax receipts.
TERMS AND CONDITIONS
The Terms and Conditions of use of the digital platform of ECART PAY must be drafted and published in Spanish, in a clear, visible, precise, and accessible manner, available at all times to the User before and during the contracting or use of the services. These terms will be legally binding in each transaction carried out through the platform, and must at all times comply with the provisions of the Federal Consumer Protection Law, the Law on the Protection of Personal Data Held by Private Parties, and other current legislation.
Said Terms and Conditions must contain, at least, the following elements:
General terms of contracting, including the rights and obligations of both parties, payment methods, confirmation process, service delivery, cancellations, returns, and liabilities;
Promotions, discounts, or benefits, indicating specific dates, applicable conditions, and limitations;
Applicable restrictions or penalties, including clauses for breach, out-of-time cancellation, misuse of services, as well as economic or administrative sanctions;
Contact means for support and customer service, as well as official communication channels.
The applicable Terms and Conditions are available for consultation on the digital platform of ECART PAY, accessible through the official website.
LEGALITY AND TRUTHFULNESS OF ADVERTISING
Any form of advertising or commercial communication related to the services offered must comply with the principles of truthfulness, objectivity, and verifiability, avoiding misleading, inaccurate, or confusing statements, in accordance with the provisions of the regulatory body of ECART PAY.
Any message that conceals relevant information, omits applicable conditions, or uses manipulation, undue pressure, or exploitation of consumer inexperience is prohibited.
DIRECT ADVERTISING AND OPT-OUT MECHANISMS
ECART PAY will incorporate clear and effective mechanisms so that users can exercise their right to opt out of receiving promotional communications or direct advertising in accordance with the Privacy Notice found on the ECART PAY page. Furthermore:
All advertising must be fully identifiable as such;
It must contain the name or corporate name of the responsible issuer, as well as contact channels to exercise opt-out rights;
Access to services may not be conditioned on the acceptance of receiving advertising, unless this forms an integral part of a clearly informed business model.
PRINCIPLES OF PROCESSING
ECART PAY will adopt ethical and legal principles for the processing of personal data, guaranteeing the security, confidentiality, and responsible use of the information provided by users.
A Privacy Notice in accessible and simple language will be made available to the public, in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties;
ARCO rights (Access, Rectification, Cancellation, and Opposition) will be guaranteed at all times;
Specific protection measures will be established for sensitive data;
The processing, transfer, or use of personal data of minors will not be allowed without the explicit consent of parents or guardians.
SELF-REGULATION
ECART PAY and its Users will implement an internal self-regulation system to ensure compliance with legal and ethical provisions in the digital environment. This system will include: Mechanisms for receiving, tracking, and resolving complaints related to non-compliance with legal or contractual obligations; Continuous training of staff on trade ethics, consumer protection, and data protection rules; Designation of an internal compliance officer for e-commerce matters.
ALTERNATIVE MECHANISMS
In case of conflicts or claims, ECART PAY will promote the use of alternative dispute resolution mechanisms, such as conciliation or mediation, prioritizing a quick, fair, and accessible solution.
SUPERVISION AND COMPLIANCE
ECART PAY will adopt continuous internal supervision and improvement mechanisms to evaluate compliance with this Code and applicable laws. These include: Periodic internal audits; Bi-annual compliance reports; Implementation of corrective measures upon findings.
INTER-INSTITUTIONAL COMMITMENT
ECART PAY declares its full and voluntary adherence to the principles, obligations, and good practices established in this Code, reaffirming its commitment to: Commercial ethics; Advertising transparency; Effective protection of personal data; Respect for and promotion of human rights in the digital environment.
COMPLEMENTARY LEGAL DOCUMENTATION
For purposes of interpretation, compliance, and transparency, users, clients, and commercial allies of ECART PAY must consult, in addition to this Code, the legal information published on the official website of the platform, available at https://ecartpay.com/es-MX, which forms an integral part of the conditions governing the use of the service.
Said information includes, but is not limited to: General Terms and Conditions of Use; Comprehensive Privacy Notice; Cookies Policy, and other corresponding documents.
These policies are permanently available for online consultation and may be updated by ECART PAY in accordance with applicable legal provisions. It will be the user's responsibility to remain informed regarding their content and modifications.
Last update: July, 2025.
