CODE OF ETHICS OF ECART PAY S.A.P.I DE C.V.
This Code of Ethics establishes the principles, values, and guidelines that ECART PAY S.A.P.I. de C.V. (hereinafter, "ECART PAY"), as a provider of payment processing services in digital media, must observe in its electronic operations, in order to guarantee respect for users' rights, promote responsible practices in the processing of digital payments, and foster a culture of ethical compliance, self-regulation, inclusion, responsible advertising, and protection of personal data.
This Code sets the minimum standards, in a non-exhaustive manner, applicable to processing and facilitation activities of payments made through electronic means, as well as the corresponding verification and compliance mechanisms.
SCOPE OF APPLICATION
This Code of Ethics is voluntarily adopted and will apply to all individuals or entities, national or foreign, that use the ECART PAY platform to make electronic payments as part of the purchase and sale of goods or services, subscriptions, rentals, or other forms of transactions conducted through digital channels in the national territory.
Once adopted, compliance will be mandatory and binding for ECART PAY, which commits to ensuring that all its payment processes comply with the principles established herein.
This Code does not apply to incidents or technical failures arising from fortuitous events or force majeure. Furthermore, its provisions do not replace, limit, or exempt compliance with applicable regulations for service providers regulated by specialized supervising entities.
DEFINITIONS
For the purposes of this Code, the following terms shall have the meanings set forth below:
Payment Aggregator: A legal entity that mediates between buyers and sellers for the receipt, processing, and settlement of digital payments within a single concentrating account.
Code: This Code of Ethics of ECART PAY.
Electronic Commerce: Any transaction involving the offer, payment, commercialization, or contracting of goods and services through electronic, digital, optical, or any other technology.
Cardholder: The holder of the Card.
Personal Data: Any information concerning an identified or identifiable individual.
User: All individuals or legal entities that purchase ECART PAY Services and have a User registration on the Website.
Electronic Payment Platform: A technological system operated by ECART PAY that allows the management, authorization, processing, settlement, and reconciliation of online payments.
Advertising: Any commercial communication related to goods or services offered through digital media.
Website and/or Platform: Any of the contents available on or through this Website.
NORMATIVE FRAMEWORK
ECART PAY and its Users shall act in accordance with the Political Constitution of the United Mexican States, the Federal Law on the Protection of Personal Data Held by Private Parties, the Federal Civil Code, and the international treaties ratified by Mexico concerning human rights and consumer protection as well as other applicable legislation.
RESPONSIBILITY AND COLLABORATION WITH AUTHORITIES
The ECART PAY platform located at the website https://ecartpay.com/ will be available to collaborate with authorities when the situation warrants, particularly in cases where cardholders or users of the payment system are affected. ECART PAY will only be responsible for the services they offer, as specified in their terms and conditions.
INFORMATION REQUIREMENTS AND FUNCTIONALITY OF THE PLATFORM
ECART PAY must ensure that its platform provides, at a minimum, the following information:
Name or corporate name, brands, and address of ECART PAY, as well as accessible contact means.
Clear description of service operation.
Cancellation policy and chargeback handling.
Customer complaint procedures and support, including days and available hours.
Age restrictions or special usage conditions.
Treatment of personal data.
Accepted payment methods, billing processes, and security measures.
Information on commissions, additional charges, and taxes.
Electronic payment receipts documenting each transaction.
Procedures for issuing and correcting tax receipts.
TERMS AND CONDITIONS
The Terms and Conditions for using the ECART PAY digital platform must be drafted and published in Spanish, clearly, visibly, accurately, and accessibly, available at all times to the User before and during the contracting or use of services. These terms will be legally binding for each transaction carried out through the platform, and must always comply with the provisions established by the Federal Consumer Protection Law, the Law on the Protection of Personal Data Held by Private Parties, and other current legislation.
These Terms and Conditions shall contain, at a minimum, the following elements:
General contracting conditions, including the rights and obligations of both parties, forms of payment, confirmation processes, service delivery, cancellations, returns, and liabilities;
Promotions, discounts, or benefits, specifying applicable dates, conditions, and limitations;
Applicable restrictions or penalties, including clauses for non-compliance, late cancellations, misuse of services, as well as economic or administrative sanctions;
Contact methods for support and customer assistance, as well as official communication channels.
The applicable Terms and Conditions are available for consultation on the ECART PAY digital platform, accessible through the official website.
LEGALITY AND ADVERTISING TRUTHFULNESS
Any form of advertising or commercial communication related to the services offered must comply with the principles of truthfulness, objectivity, and verifiability, avoiding misleading, inaccurate statements or those that may induce error, in accordance with the provisions of the regulating body of ECART PAY.
Any message that conceals relevant information, omits applicable conditions, or uses practices of manipulation, undue pressure, or exploitation of consumer inexperience is prohibited.
DIRECT ADVERTISING AND OPT-OUT MECHANISMS
ECART PAY will incorporate clear and effective mechanisms for users to exercise their right to opt out of receiving promotional communications or direct advertising in accordance with the Privacy Notice available on the ECART PAY website. Additionally:
All advertising must be fully identifiable as such;
It must include the name or corporate name of the responsible issuer, as well as contact channels to exercise opt-out rights;
Access to services may not be conditioned on the acceptance of receiving advertising, unless this forms an integral part of a clearly informed business model.
PRINCIPLES OF DATA PROCESSING
ECART PAY will adopt ethical and legal principles of personal data processing, ensuring the security, confidentiality, and responsible use of the information provided by users.
A Privacy Notice will be made available to the public in accessible and simple language, in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties;
The ARCO rights (Access, Rectification, Cancellation, and Opposition) will be guaranteed at all times;
Specific protection measures for sensitive data will be established;
The processing, transfer, or use of personal data of minors will not be allowed without explicit consent from parents or guardians.
SELF-REGULATION
ECART PAY and its Users will implement an internal self-regulation system to ensure compliance with legal and ethical provisions in the digital environment. This system will include: Mechanisms for receiving, tracking, and resolving complaints related to non-compliance with legal or contractual obligations; Ongoing training for staff on commercial ethics, consumer protection, and data protection standards; Designation of an internal compliance officer in matters of electronic commerce.
ALTERNATIVE MECHANISMS
In the event of disputes or claims, ECART PAY will promote the use of alternative mechanisms for dispute resolution, such as conciliation or mediation, prioritizing a quick, fair, and accessible solution.
SUPERVISION AND COMPLIANCE
ECART PAY will adopt internal and continuous supervision and improvement mechanisms, in order to evaluate compliance with this Code and applicable laws. These will include: Periodic internal audits; Biannual compliance reports; Implementation of corrective measures in response to findings.
INTER-INSTITUTIONAL COMMITMENT
ECART PAY expresses its full and voluntary adherence to the principles, obligations, and good practices established in this Code, reaffirming its commitment to: Commercial ethics; Advertising transparency; Effective protection of personal data; Respecting and promoting human rights in the digital environment.
SUPPLEMENTARY LEGAL DOCUMENTATION
For purposes of interpretation, compliance, and transparency, users, clients, and business partners of ECART PAY must consult, in addition to this Code, the legal information published on the official website of the platform, available at https://ecartpay.com/es-MX, which is an integral part of the conditions governing the use of the service.
This information includes, in a non-exhaustive manner: General Terms and Conditions of Use; Comprehensive Privacy Notice; Cookie Policy and other corresponding documents.
These policies are permanently available for online consultation and may be updated by ECART PAY in accordance with applicable legal provisions. It is the user's responsibility to stay informed about their content and modifications.
Last updated: July, 2025.
