ECART PAY
GENERAL INFORMATION
PURPOSE OF THE PROCESSING OF YOUR PERSONAL DATA
PERSONAL DATA REQUESTED
SAFEGUARDING OF PERSONAL DATA
DATA TRANSFER
MEANS AND PROCEDURE TO EXERCISE ARCO RIGHTS AND/OR REVOCATION OF CONSENT FOR THE PROCESSING OF PERSONAL DATA:
OPTIONS AND MEANS TO LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA
USE OF COOKIES
MEANS TO COMMUNICATE CHANGES TO THE PRIVACY NOTICE
I. GENERAL INFORMATION
In compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties, Ecart Pay wishes to inform the domains or websites www.ecartpay.com for persons who contract the services of Ecart Pay (consequently referred to as "Clients"), of its Privacy Notice regarding the treatment and protection of personal data of those individuals who voluntarily communicate, in an illustrative but not restrictive manner, via email, telephone, or any other electronic, oral, or written means with Ecart Pay, fill out forms in which personal data is collected, or who enter and/or access the website mentioned herein, if this involves the communication of your personal data.
Ecart Pay S.A.P.I. de C.V., hereinafter "Ecart Pay," designates its address as Avenida Dr. I. Morones Prieto No. 2110, Pte., Local 3-E, Colonia Loma Larga, Monterrey, Nuevo León, C.P. 64710.
For all purposes related to this Privacy Notice, Ecart Pay makes this Privacy Notice available under the following terms:
II. PURPOSE OF THE PROCESSING OF YOUR PERSONAL DATA
The personal information you provide to us will be used solely for:
Registering, verifying, and corroborating your identity, as well as the authenticity of the information and documentation provided.
Addressing your request to provide you with the requested services from time to time, as well as informing you about changes in them, and evaluating the quality of such services.
Attending to complaints, suggestions, requests arising from the contracted services, and legal requirements requested by competent authorities.
Billing and collection derived from the contracted services.
Evaluating the quality of the service we provide to comply with the obligations we have undertaken with you.
Contacting you and/or your contacts and/or references to follow up on any matter related to the services or the present purposes.
Ensuring compliance with legal provisions on the prevention and identification of operations with funds of illicit origin, anti-corruption, and other applicable regulations, through the implementation of administrative and technical procedures established for such purposes.
Communicating to you changes regarding the same.
In general, carrying out complementary activities necessary to achieve the aforementioned purposes.
Additionally, your personal data may be used for the following secondary purposes:
For marketing and/or advertising purposes.
Commercial prospecting, with the purpose of offering you various services provided by third parties related to the requested services.
Notifying you about new Ecart Pay services or products that are related to those already contracted or acquired.
Conducting studies on consumer and market habits.
If you do not agree with the secondary purposes, you may manifest your refusal following the mechanism provided in section "VII" of this Notice.
Ecart Pay will not use your personal data for purposes other than those mentioned.
III. PERSONAL DATA REQUESTED
For the purposes of this Privacy Notice, personal data shall be understood as any information collected concerning identified or identifiable physical or moral persons who communicate their personal data through the websites mentioned here, which, in an illustrative but not restrictive manner, could be through:
Email.
Filling out forms through which personal data is collected on the website.
In person when visiting the company.
Creating a user account on the Ecart Pay website, and;
In general, using any service present on the website that involves the communication of your personal data.
The personal data that Ecart Pay will collect from Clients are:
General identity data: full name, gender, date of birth, nationality, federal entity of birth, home address, tax details (RFC), Unique Population Registry Code (CURP), occupation or profession, series number of advanced electronic signature (if applicable). In the case of a legal entity: company name or trade name, date of incorporation, nationality, line of business or economic activity, address, tax details (RFC), series number of advanced electronic signature (if applicable).
Contact details: phone number, email address.
Biometric data: facial and/or voice recognition.
Financial data: financial details, relating to asset balance, income, and bank accounts.
For biometric and/or sensitive data, which require special protection, it will be taken into account that your express written consent or consent through an available technological medium will be collected for this purpose.
IV. SAFEGUARDING OF PERSONAL DATA
Personal data will be safeguarded based on the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility, which are enshrined in the Law.
V. DATA TRANSFER
Ecart Pay may share your personal data with third parties with whom it has previously entered into contracts containing confidentiality and personal data protection clauses.
The third parties to whom Ecart Pay may transfer personal data are:
Affiliates, holding companies, subsidiaries, associates, commission agents, managers, companies, and/or shareholders that form part of the commercial group related to Ecart Pay, professional advisors, and/or insurance companies.
Providers that perform services for Ecart Pay for the maintenance or fulfillment of the legal relationship with Clients.
The National Electoral Institute for the purpose of validating identity to combat identity theft.
Competent authorities, as provided in the applicable legislation.
Where requested by banking or credit institutions to process payments and transfers.
When Ecart Pay shares your personal data, it does so in a way that those third parties take the necessary measures to protect the confidentiality and security of the personal data; however, the third-party recipients of the personal data will assume the same obligations as Ecart Pay as set out in this Notice.
We will understand that you have given your consent for the processing and transfer of your personal data in accordance with this Privacy Notice if you do not express your opposition through the means made known to you in this Privacy Notice.
VI. MEANS AND PROCEDURE TO EXERCISE ARCO RIGHTS AND/OR REVOCATION OF CONSENT FOR THE PROCESSING OF PERSONAL DATA
You may access, rectify, and cancel your personal data, as well as oppose its disclosure, through the procedures Ecart Pay has implemented through its support area. You may request the form to access, rectify, cancel, and oppose the disclosure thereof. Additionally, you will have a period of 5 (five) business days to express your refusal of the processing of your personal data for secondary activities. For more information on how to exercise your Access, Rectification, Cancellation, and Opposition Rights (ARCO Rights), oppose the disclosure of your data, revoke your consent, or express your refusal to process them, you should contact us by sending an email to support@ecartpay.com.
The exercise of any of the ARCO Rights is not a prerequisite nor does it prevent the exercise of another.
The following requirements are essential in order to address your request:
The name of the holder and address or other means to communicate the response to your request;
Documents proving identity or, as the case may be, the legal representation of the holder.
The clear and precise description of the personal data regarding which any of the aforementioned rights are sought to be exercised, and;
Any other element or document that facilitates the location of the personal data.
Indicate contact details to communicate the response to your request.
If the information provided in the form is incorrect or insufficient, or if the corresponding accreditation documents are not attached, Ecart Pay, within 5 (five) business days following receipt of the request, may require you to provide the elements or documents necessary to process the same. You will have 10 (ten) business days to respond to the requirement, starting from the day after you received it. Failure to respond within that timeframe will result in the request being deemed as not submitted.
Ecart Pay will communicate the determination adopted within a maximum of 20 (twenty) business days from the date the request was received, so that, if deemed appropriate, it becomes effective within the 15 (fifteen) business days following the communication of the response. The response will be given electronically to the email address specified in the form.
VII. OPTIONS AND MEANS TO LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA
You may limit the use or disclosure of your personal data by sending your request to the email support@ecartpay.com.
The requirements to prove your identity, as well as the procedure to address the request, will be governed by the same criteria outlined in the previous section.
If your request is deemed appropriate, Ecart Pay will register it in Ecart Pay's own exclusion list so that you stop receiving our promotions.
VIII. USE OF COOKIES
Ecart Pay uses various technologies to improve the efficiency of its websites, including your experience when browsing those sites. These technologies include the use of cookies. Cookies are small amounts of information stored in the browser used by each user so that the server remembers certain information that can be used later. This information allows us to identify you and save your personal preferences to provide a better browsing experience. We remind you that you can disable or adjust the use of cookies by following the procedures of the internet browser you use.
IX. MEANS TO COMMUNICATE CHANGES TO THE PRIVACY NOTICE
Ecart Pay reserves the right, under its sole discretion, to change, modify, add, or remove parts of this Privacy Notice at any time. In such case, Ecart Pay will publish those modifications on the website www.ecartpay.com where the date of the latest version of the notice will be indicated. We recommend visiting this page periodically to stay informed about any changes hereto.
If you consider that your right to the protection of personal data has been violated by any conduct or omission on the part of Ecart Pay, or if you suspect any violation of legal provisions, you may contact the Secretariat of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno); for more information, visit https://www.gob.mx/buengobierno.
Last update: June, 2026.
