Unlimint MX S.A.P.I de C.V (“Company” or “we” or “us”) provides payment services, for customers and merchants or clients through our platforms and applications (“services”). If you want to know more about our services then please visit our website.
The Company and its affiliates or businesses are part of a global payments and technology organization holding various licenses and authorizations as each business is obliged to under the laws and regulations it operates in.
The Company is a registered legal entity with the address Av. Paseo de la Reforma 296, Col. Juárez, Del. Cuauhtémoc, C.P. 06600, CDMX, Mexico is constituted under the Laws of the United Mexican States.
The Company is dedicated to protecting the privacy and confidentiality of information in its possession and is committed to the appropriate use and protection of personal data, with transparency and respect for rights in line with Federal Law on Protection of Personal Data Held by Private Parties (the “Law”) The Company is responsible for the use and protection of your personal data that you (“ Data Owner” or “you”) have provided to us directly or indirectly as permitted by the Law.
In this Privacy Notice, we aim to provide information about how our Company collects and processes your personal data when you correspond with us, apply for our services, establish relations with us as a customer or merchant or client, submit a request for our services, or use our website.
The Company makes this Privacy Notice available digitally and if the Data Owner does not express any opposition, it will be understood that the Data Owner grants the Company his consent to carry out the processing of the personal data that has been provided and/ or that with reason for any of the purposes established in the present provide in the future by way of agreeing to this Privacy Notice. If you do not wish to provide your consent, please refer to Section 7 of this Notice.
When our services are used, we act as a provider of payment services and payment methods to merchants or clients of services and goods. For example, the Company performs card or online payment processing on behalf of the client or merchant and therefore we process personal data from merchant or clients, and we can complete payments from payers to merchants or clients. We require to process your personal data to provide our services to you. In case you are a website visitor, we collect your data directly from you as the Data Owner.
If you are a potential employee or job applicant, please refer to our Global Talent Acquisition Notice.
1. You should read this Privacy Notice together with the relevant terms and conditions of the service/product (as applicable) provided by the Company and also applies to the use of our website and online systems under the relevant Terms.
2. Some links on our website may contain links or lead to or originate from third party websites with their own privacy notices. The Company does not accept any responsibility or liability for third-party websites. Please refer to the privacy policy of your personal data’s relevant data controller (entity) to learn more about how the entity processes it.
We collect your personal data through the following modes of collection:
data (for example, data collected using cookies as per our Cookie Notice), information about promotions, surveys, promotional campaigns and records of your decision(s) to subscribe or to withdraw from receiving marketing materials, if any.
We do not collect or process sensitive personal data. In accordance with the Law for the processing of your personal financial or patrimonial data we require your express written consent, so by accepting this privacy notice by electronic means, you also accept the processing of your financial or patrimonial data.
1. Primary Purposes:
2. Secondary Purposes:
If you do not want your personal data to be processed for the primary and secondary purposes mentioned under this Section, then you can express your refusal by contacting us through the details provided under Section 7 of this Notice.
For the purposes of the provisions of the Law and other applicable legislation, the Data Owner agrees:
1. You have read and are aware of this Privacy Notice made available to you by the Company. 2. You understand and agree to the terms of this Privacy Notice. 3. You provide your consent to the processing of your personal data. 4. You provide your consent to the Company so that it can collect your personal data by any means (including digitally or physically). 5. You provide your consent to the Company so that your personal data is processed in accordance with what is indicated in this Privacy Notice.
You can revoke or limit your consent at any time. Your right to revoke your consent must meet the minimum requirements set out in the Law and its Regulations. This means that you need to provide us with your name and address, copy of a document that proves your identity, clear and precise description of the personal data on which you seek to exercise this right and description of your request) and that it be sent to the email address [email protected].
The processing of your personal data is essential to be able to provide you with our services; Revoking your consent could mean that you cannot use our services. We would provide you with further instructions if this is the case.
We have taken adequate safeguards to ensure the confidentiality and security of your personal data. We have implemented appropriate technical, physical, and organisational measures to protect personal data against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorised disclosure or access, as well as all other forms of unlawful processing (including, but not limited to, unnecessary collection) or further processing.
Where the Company processes card data, we adhere to the highest level of protection available by the Payment Card Industry Data Security Standard (PCI DSS). PCI DSS is a global standard for securely accepting and processing credit card payments. Launched in 2006 by an alliance of major credit card companies, PCI DSS encompasses 12 key requirements as well as more than 400 sub-requirements and test procedures which are audited for compliance annually by an external auditor. Being PCI-compliant requires not just meeting these requirements but continually identifying, documenting, and (if necessary) remediating business-level systems and processes that involve the handing of user credit card data.
Where you have access to our resources via user authentication means (e.g., user credentials), you are responsible for keeping your user credentials secure and confidential and not disclosing them to anyone.
Under the Law you or your accredited legal representative have the right to:
If you want to exercise your ARCO rights, you or legal representative must submit a written request to us with the following information and documentation so that we may process your request efficiently and quickly:
If the Owner does not personally submit the request, whoever does so must prove their representation. He may do so by means of a public deed or power of attorney signed before two witnesses, along with official identification of the Owner and representative.
If a data rectification is requested, the modifications to be made must be indicated and documentation must be provided that proves the reason for the requested changes.
We will require maximum period of 20 business days from the request, to inform about its origin. We may require longer (up to 15 business days) as permitted under the Law if we do not receive the sufficient information from you.
If you believe we have not resolved your complaint, you have the right to submit a complaint to the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (“INAI”).
You can address questions and concerns to the Data Protection Function as follows: Unlimint MX SAPI de CV
Av. Paseo de la
Reforma 296, Col. Juárez, Del. Cuauhtémoc,
C.P. 06600, CDMX,
Mexico Email: [email protected]
The Company may transfer the personal data internally within its Group (i.e. holding companies, subsidiaries and/or affiliates) to facilitate our operations. The Company’s functions or departments receive only specific categories and types of personal data depending on their organizational roles and responsibilities.
If there is a transfer to third parties (national or foreign), then the Company transfers the personal data in accordance with your consent or in terms of the provisions of the Law.
The following types of external parties may receive your personal data:
The Company’s website contains forms that website visitors may use. When website visitors send us information online via forms on the website, in the context of the provision of services, we will use the information as set out in this Privacy Notice.
In some instances, the Company and other entities (such as service providers) may use cookies and other technologies to automatically collect certain types of data when you visit our websites and online platforms. The collection of this data enables us to improve the security and usability of our websites and online resources and to measure the effectiveness of marketing activities.
For detailed information on cookies and their purposes, please refer to our Cookie Notice on our website.
We may revise or update our Privacy Notice from time to time. In such a case, we make the most recent version of the Privacy Notice available on our website, informing you accordingly by displaying in the updated version and relevant date of update.
One of our sales team will bein touch ASAP.