# BoolPay Privacy Policy

> How BoolPay Servicios Financieros collects, uses, shares and protects personal data under Mexico's LFPDPPP. English summary; the Spanish notice is authoritative.

## Data controller

BoolPay Servicios Financieros, with offices in Mexico City, is responsible for processing the personal data you provide, under the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and the INAI Privacy Notice Guidelines.

Privacy contact: privacidad@boolpay.mx

## Data collected

- **Identification:** name, age, gender, nationality, CURP, date and country of birth, official ID, signature, photograph.
- **Contact:** address, email, phone numbers.
- **Tax:** RFC and tax status certificate.
- **Employment:** occupation, role, profession, workplace.
- **Commercial:** business name, industry, average ticket, transaction volume, trade references.
- **Financial:** banking information, CLABE, proof of income, transaction history.
- **Technical:** IP address, device identifier, geolocation at registration or transaction, logs.
- **Biometric (where applicable):** only for remote identity validation, with express consent.

We do not request sensitive personal data as defined by the LFPDPPP.

## Purposes

**Primary** (necessary for the relationship): identity verification and KYC; AML/CTF compliance (PLD/FT); contract formalization; providing the contracted payment services; receipts, statements and invoices; file retention; regulatory reporting; handling claims and clarifications; fraud and chargeback prevention.

**Secondary** (optional, you may object at any time): product upgrades, promotions and benefits, marketing communications, satisfaction surveys, statistical analysis and market research. Objecting is never grounds to deny service — email privacidad@boolpay.mx.

## Transfers

Group companies; acquirers, clearing houses and card schemes; financial institutions; credit bureaus and identity-validation providers; technology, cloud and professional-services providers acting as processors; competent authorities (Banxico, SAT, UIF, CNBV, CONDUSEF, INAI, tax, judicial and administrative); acquirers or assignees in a corporate transaction. Recipients must observe LFPDPPP principles and equivalent security measures.

## Your rights (ARCO)

Access, Rectification, Cancellation and Objection. Send requests to privacidad@boolpay.mx with your name, a contact channel, proof of identity or legal representation, and a clear description of the data concerned. We respond within 20 business days and act within the following 15 business days where founded.

## Retention

As long as needed for the stated purposes, plus statutory periods — tax, commercial, financial and PLD/FT obligations can reach ten years from the end of the contractual relationship. Data is then blocked and deleted per the law.

## Security

Controls aligned with PCI DSS, encryption in transit and at rest, tokenization, access controls, continuous monitoring, business-continuity and incident-response plans. If a breach materially affects your rights, we notify you through the contact details on file.

## Supervisory authority

Complaints may be filed with INAI: https://www.inai.org.mx

**Authoritative version:** the complete, legally binding notice is the Spanish [Aviso de privacidad integral](https://boolpay.mx/privacidad.html). In case of discrepancy, the Spanish version prevails. Last updated: May 2026.

## Other sections

- [Home](https://boolpay.mx/index.md)
- [Products](https://boolpay.mx/productos.md)
- [About](https://boolpay.mx/about.md) · [Nosotros (ES)](https://boolpay.mx/nosotros.md)
- [Developers](https://boolpay.mx/developers.md)
- [Agent instructions](https://boolpay.mx/agent-instructions.md)
- [Contact](https://boolpay.mx/contacto.md)
- [Privacy](https://boolpay.mx/privacy.md)

## Machine-readable resources

- [llms.txt](https://boolpay.mx/llms.txt)
- [openapi.json](https://boolpay.mx/openapi.json)
- [API index](https://boolpay.mx/api)
- [sitemap.xml](https://boolpay.mx/sitemap.xml)