ECART PAY
GENERAL INFORMATION
PURPOSE OF THE PROCESSING OF YOUR PERSONAL DATA
REQUESTED PERSONAL DATA
SAFEGUARDING OF PERSONAL DATA
DATA TRANSFER
MEANS AND PROCEDURE TO EXERCISE ARCO RIGHTS AND/OR REVOCATION OF CONSENT FOR THE PROCESSING OF PERSONAL DATA:
OPTIONS AND MEANS TO LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA
USE OF COOKIES
MEANS TO COMMUNICATE CHANGES TO THE PRIVACY NOTICE
I. GENERAL INFORMATION
In compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, Ecart Pay wishes to inform the domains or websites www.ecartpay.com to individuals who contract Ecart Pay services (hereinafter referred to as “Clients”), of its Privacy Notice regarding the processing and protection of the personal data of those individuals who voluntarily communicate, by way of example but not limited to, via email, by phone, or through any other electronic, oral, or written means with Ecart Pay, fill out forms in which personal data is collected, or access the website mentioned here if this involves the communication of your personal data.
Ecart Pay S.A.P.I. de C.V., hereinafter “Ecart Pay,” states that its address is located at BELISARIO DOMINGUEZ 2470, OBISPADO, MONTERREY, NUEVO LEÓN, C.P. 64060
For all matters related to this Privacy Notice, Ecart Pay makes this Privacy Notice available under the following terms:
II. PURPOSE OF THE PROCESSING OF YOUR PERSONAL DATA
The personal information you provide will be used solely for:
To carry out your registration, verify and corroborate your identity, as well as the authenticity of the information and documentation provided.
To attend to your request to provide you with the requested services from time to time, as well as to inform you of changes to them and evaluate the quality of such services.
To attend to complaints, suggestions, requests arising from contracted services, and legal requirements requested by the competent authorities.
Billing and collection arising from the services contracted.
To evaluate the quality of the service we provide to fulfill the obligations we have contracted with you.
To contact you and/or your contacts and/or references to follow up on any issue related to the services or with the above purposes.
To ensure compliance with legal provisions regarding the prevention and identification of operations with resources of illicit origin, anti-corruption, and other applicable regulations, by implementing the established administrative and technical procedures for such purposes.
To inform you of changes to them.
In general, to carry out complementary activities necessary for achieving the previous purposes.
Additionally, your personal data may be used for the following secondary purposes:
For marketing and/or advertising purposes.
Commercial prospecting, the above for the purpose of offering you various services provided by third parties related to the requested services.
To notify you about new services of Ecart Pay or products that are related to those already contracted or acquired.
To conduct studies on consumption habits and market trends.
If you do not agree with the secondary purposes, you can express your refusal by following the mechanism provided in numeral “VII” of this Notice.
Ecart Pay will not use your personal data for purposes other than those mentioned.
III. REQUESTED PERSONAL DATA
For the purposes of this Privacy Notice, personal data is understood to be any information collected concerning identified or identifiable individuals that communicate their personal data through the websites mentioned here, which, by way of example but not limited to, may be through:
Email.
Filling out forms by which personal data is collected on the website.
In person when visiting the company.
Creating a user account on the Ecart Pay website and;
In general, using any present service on the website that implies the communication of your personal data
The personal data that Ecart Pay will collect from Clients are:
General identification data: full name, gender, date of birth, nationality, state of birth, address, tax data (RFC), Unique Population Registry Code (CURP), occupation or profession, advanced electronic signature serial number (if applicable). In the case of legal entities; name or corporate name, date of incorporation, nationality, business or economic activity, address, tax data (RFC), series number of advanced electronic signature (if applicable).
Contact data: phone number, email address.
Biometric data: facial and/or voice recognition.
Asset data: financial, related to your asset balance, income, and bank accounts.
For biometric and/or sensitive data that requires special protection, it will be taken into account that their express written consent or consent by any technological means made available will be collected.
IV. SAFEGAURDING OF PERSONAL DATA
Personal data will be safeguarded based on principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility, which are enshrined in the Law.
V. DATA TRANSFER
Ecart Pay may share your personal data with third parties with whom it has previously entered into contracts with clauses of confidentiality and protection of personal data.
The third parties to whom Ecart Pay may transfer personal data are:
Affiliates, subsidiaries, parent companies, subsidiaries, associated companies, brokers, managers, companies, and/or shareholders that are part of the commercial group related to Ecart Pay, professional advisors and/or insurers.
Suppliers that provide services to Ecart Pay for the maintenance or fulfillment of the legal relationship with Clients.
The National Electoral Institute for the purpose of validating your identity to combat identity theft.
Competent authorities, as provided for in applicable legislation.
Requested by banking or credit institutions, for the execution of payments and transfers.
When Ecart Pay shares your personal data, it will ensure that such third parties take the necessary measures to protect the confidentiality and security of the personal data; however, the third parties receiving such personal data will assume the same obligations of Ecart Pay as indicated in this Notice.
We will understand that you have given your consent for the processing and transfer of your personal data in accordance with this Privacy Notice if you do not express your opposition through the means made known to you in the Privacy Notice.
VI. MEANS AND PROCEDURE TO EXERCISE ARCO RIGHTS AND/OR REVOCATION OF CONSENT FOR THE PROCESSING OF PERSONAL DATA
You can access, rectify, and cancel your personal data, as well as oppose their disclosure through the procedures Ecart Pay has implemented through its support area. You may request the form to access, rectify, cancel, and oppose the disclosure of the same. Also, you will have a period of 5 (five) business days to express your refusal to the processing of your personal data for secondary activities. For more information on how to exercise your Rights of Access, Rectification, Cancellation, and Opposition (ARCO Rights), oppose the disclosure of your data, revoke your consent, or express refusal for their processing, you should contact us by sending an email to info@envia.com.
The exercise of any of the ARCO Rights is not a prerequisite nor does it impede the exercise of another.
The following requirements are essential to attend to your request:
The name of the holder and address or another means to communicate the response to your request;
The documents proving the identity or, where appropriate, the legal representation of the holder.
A clear and precise description of the personal data regarding which you seek to exercise any of the aforementioned rights and,
Any other element or document that facilitates the location of the personal data.
Provide contact data to communicate the response to your request.
If the information provided in the form is incorrect or insufficient, or if the required accreditation documents are not attached, Ecart Pay, within 5 (five) business days following receipt of the request, may require you to provide the necessary elements or documents to process it. You will have 10 (ten) business days to respond to the request, counted from the day after it was received. If you do not respond within this period, your request will be deemed as not submitted.
Ecart Pay will communicate the determination made within a maximum of 20 (twenty) business days counted from the date the request was received, so that if it is appropriate, you may execute it within 15 (fifteen) business days following the communication of the response. The response will be given electronically to the email address specified in the form.
VII. OPTIONS AND MEANS TO LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA
You can limit the use or disclosure of your personal data by sending your request to the email info@envia.com.
The requirements to prove your identity, as well as the procedure to attend to the request, will be governed by the same criteria indicated in the previous section.
If your request is granted, Ecart Pay will register it in its own exclusion list so that you stop receiving our promotions.
VIII. USE OF COOKIES
Ecart Pay uses various technologies to improve the efficiency of its websites, including your experience when browsing these sites. Among these technologies is the use of cookies. Cookies are small amounts of information stored in the browser used by each user so that the server remembers certain information that can later be used. This information allows us to identify you and save your personal preferences to provide you with a better browsing experience. We remind you that you can disable or adjust the use of cookies by following the procedures of the internet browser you use.
IX. MEANS TO COMMUNICATE CHANGES TO THE PRIVACY NOTICE
Ecart Pay reserves the right, at its sole discretion, to change, modify, add, or delete parts of this Privacy Notice at any time. In such case, Ecart Pay will publish such modifications on the website www.ecartpay.com where the date of the last version of the notice will be indicated. We recommend periodically visiting this page to be informed if any changes occur.
If you believe that your right to the protection of your personal data has been violated by any conduct or omission on the part of Ecart Pay, or if a violation of legal provisions is presumed, you may contact the National Institute of Access to Information and Data Protection (INAI), for more information visit www.inai.org.mx
Last update: August, 2024.



