ECART PAY
GENERAL INFORMATION
PURPOSE OF PROCESSING YOUR PERSONAL DATA
REQUESTED PERSONAL DATA
SAFEGUARDING PERSONAL DATA
DATA TRANSFER
MEANS AND PROCEDURE TO EXERCISE ARCO RIGHTS AND/OR REVOKE CONSENT FOR THE PROCESSING OF PERSONAL DATA:
OPTIONS AND MEANS TO LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA
USE OF COOKIES
MEANS TO COMMUNICATE CHANGES TO THE PRIVACY NOTICE
I. GENERAL INFORMATION
In compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, Ecart Pay wishes to inform the domains or websites www.ecartpay.com to the individuals who hire the services of Ecart Pay (hereinafter referred to as "Clients"), their Privacy Notice regarding the processing and protection of the personal data of those individuals who voluntarily communicate, through email, by phone or any other electronic, oral or written means with Ecart Pay, fill out forms in which personal data is collected or that enter and/or the website mentioned herein, if this implies the communication of your personal data.
Ecart Pay S.A.P.I. de C.V., hereinafter "Ecart Pay," designates as its address located at BELISARIO DOMINGUEZ 2470, OBISPADO, MONTERREY, NUEVO LEÓN, C.P. 64060
For all effects related to this Privacy Notice, Ecart Pay makes available this Privacy Notice under the following terms:
II. PURPOSE OF PROCESSING YOUR PERSONAL DATA
The personal information you provide will be used solely for:
To carry out your registration, verify and corroborate your identity, as well as the authenticity of the information and documentation provided.
To attend to your request to provide the requested services from time to time, as well as to inform you about changes in them, and evaluate the quality of those services.
To address complaints, suggestions, requests arising from the contracted services, and legal requirements requested by competent authorities.
Billing and collection arising from the contracted services.
To evaluate the quality of the service we provide in order to comply with the obligations we have undertaken with you.
To contact you and/or your contacts and/or references to follow up on any matter related to the services or with these purposes.
To ensure compliance with legal provisions regarding the prevention and identification of operations with resources of illicit origin, anti-corruption, and the rest of applicable regulations, through the implementation of established administrative and technical procedures for such purposes.
To communicate with you about changes in them.
In general, to carry out complementary activities necessary for the achievement of the aforementioned purposes.
Likewise, your personal data may be used for the following secondary purposes:
For marketing and/or advertising purposes.
Commercial prospecting, with the aim of offering you various services provided by third parties related to the requested services.
To notify you about new services from Ecart Pay or products related to those already contracted or purchased.
To conduct studies on consumer and market habits.
If you do not agree with the secondary purposes, you may express your refusal by following the mechanism provided in numeral "VII" of this Notice.
Ecart Pay will not use your personal data for purposes other than those mentioned.
III. REQUESTED PERSONAL DATA
For the purposes of this Privacy Notice, personal data is understood to be any information collected concerning identified or identifiable individuals that disclose their personal data through the websites mentioned herein that may be, without limitation, through:
Email.
Filling out forms through which personal data is collected on the website.
In person when visiting the company.
Creating a user account on the Ecart Pay website and;
In general, the use of any service available on the website that implies the communication of your personal data.
The personal data that Ecart Pay will collect from Clients are:
General identification data: full name, gender, date of birth, nationality, state of birth, address, tax data (RFC), Unique Population Registry Code (CURP), occupation or profession, advanced electronic signature serial number (if applicable). In the case of a legal entity; name or corporate name, date of incorporation, nationality, business activity or economic activity, address, tax data (RFC), advanced electronic signature serial number (if applicable).
Contact data: phone number, email.
Biometric data: facial and/or voice recognition.
Property data: financial data related to your property balance, income, and bank accounts.
For biometric and/or sensitive data, which require special protection, it will be taken into account that for this, explicit and written consent will be obtained or through some technological medium made available.
IV. SAFEGUARDING PERSONAL DATA
Personal data will be safeguarded based on the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality, and responsibility, which are enshrined in the Law.
V. DATA TRANSFER
Ecart Pay may share your personal data with third parties with whom it has previously signed contracts with confidentiality clauses and protection of personal data.
The third parties to whom Ecart Pay may transfer personal data are:
Affiliates, subsidiaries, controlling companies, associated companies, commission agents, administrators, companies and/or shareholders that are part of the commercial group related to Ecart Pay, professional advisors and/or insurance companies.
Suppliers providing services to Ecart Pay for the maintenance or fulfillment of the legal relationship with Clients.
The National Electoral Institute to verify your identity to combat identity theft.
Competent authorities, as provided in the applicable legislation.
Requested by banking or credit institutions, for the execution of payments and transfers.
When Ecart Pay shares your personal data, it will ensure that such third parties take the necessary measures to protect the confidentiality and security of personal data; however, the third-party recipients of personal data will assume the same obligations as Ecart Pay indicated in this Notice.
We will understand that you have granted your consent for the processing and transfer of your personal data in accordance with this Privacy Notice if you do not express your opposition through the means communicated to you in the Privacy Notice.
VI. MEANS AND PROCEDURE TO EXERCISE ARCO RIGHTS AND/OR REVOKE CONSENT FOR THE PROCESSING OF PERSONAL DATA
You may access, rectify, and cancel your personal data, as well as oppose the disclosure of the same through the procedures that Ecart Pay has implemented through its support area. You may request the format to access, rectify, cancel, and oppose the disclosure of the same. Likewise, you will have a period of 5 (five) business days to express your refusal to the processing of your personal data for secondary activities. For more information on how to exercise your Rights of Access, Rectification, Cancellation, and Opposition (ARCO Rights), oppose the disclosure of your data, revoke your consent, or express refusal to their processing, you should contact us by sending an email to support@ecartpay.com.
Exercising any of the ARCO Rights is not a prerequisite and does not prevent the exercise of another.
The following requirements are essential to attend to your request:
The name of the holder and address or other means to communicate the response to your request;
The documents that prove the identity or, if applicable, the legal representation of the holder.
A clear and precise description of the personal data regarding which it seeks to exercise any of the aforementioned rights and,
Any other element or document that facilitates the location of the personal data.
Indicate contact data to communicate the response to your request.
In case the information provided in the form is incorrect or insufficient, or if the required accreditation documents are not attached, Ecart Pay, within 5 (five) business days following the receipt of the request, may require you to provide the necessary elements or documents to process it. You will have 10 (ten) business days to respond to the requirement, counted from the day after you receive it. If you do not respond within that period, your request will be considered not submitted.
Ecart Pay will communicate the determination made within a maximum period of 20 (twenty) business days from the date the request was received, so that, if appropriate, it may be made effective within the following 15 (fifteen) business days after the response is communicated. The response will be given electronically to the email address specified in the form.
VII. OPTIONS AND MEANS TO LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA
You may limit the use or disclosure of your personal data by sending your request to the email support@ecartpay.com.
The requirements to prove your identity, as well as the procedure to attend to the request, will be governed by the same criteria mentioned in the previous section.
In case your request is granted, Ecart Pay will register it in their own exclusion list so that you stop receiving our promotions.
VIII. USE OF COOKIES
Ecart Pay uses various technologies to improve the efficiency of your websites, including your experience when navigating those sites. Among these technologies is the use of cookies. Cookies are small amounts of information stored in the browser used by each user so that the server remembers certain information that can be used later. This information allows for your identification and storing your personal preferences to provide you with a better browsing experience. We remind you that you can disable or adjust the use of cookies by following the procedures of the internet browser you utilize.
IX. MEANS TO COMMUNICATE CHANGES TO THE PRIVACY NOTICE
Ecart Pay reserves the right, at its sole discretion, to change, modify, add or remove parts of this Privacy Notice at any time. In such case, Ecart Pay will publish such modifications on the website www.ecartpay.com where the date of the latest version of the notice will be indicated. We recommend visiting this page periodically to be informed of any changes to this notice.
If you consider that your right to the protection of your personal data has been violated by any conduct or omission on the part of Ecart Pay, or there is a presumed violation of legal provisions, you may go to the Anti-Corruption and Good Government Secretariat, for more information visit https://www.gob.mx/buengobierno.
Last updated: March, 2026.
