Data Privacy Framework Policy

Framework status

MatosPay will describe any active privacy-framework certification or participation accurately and only for the legal entity, service, and data covered by that status. A reference to a framework on this page does not create certification if MatosPay has not completed the applicable registration.

Principles

Where a framework applies, MatosPay aims to follow notice, choice, accountability for onward transfers, security, data integrity, access, and recourse principles required by that framework. The controlling privacy policy and applicable agreement explain how those principles operate for the service.

Notice and choice

MatosPay will explain the purposes for which Personal Data is collected and used. Where a framework or law requires choice before disclosure or a new use, MatosPay will provide the required option. Service providers receive information only for the contracted purpose unless another lawful basis applies.

Access and correction

Individuals may request access to or correction of Personal Data held by MatosPay, subject to verification, role, security, and lawful exceptions. If a merchant controls the information, MatosPay may direct the individual to the merchant and provide reasonable assistance.

Onward transfers

MatosPay remains responsible for Personal Data transferred to a third party when the framework requires accountability, unless an exception applies. Contracts, due diligence, transfer safeguards, and the Sub-processors List support that oversight.

Recourse and complaints

Privacy concerns may be sent to Sales@Matospay.com. MatosPay will investigate and respond within a reasonable or legally required period. Where a framework provides an independent dispute-resolution or enforcement path, the applicable privacy notice will identify it.

Changes

MatosPay may update this policy when framework rules, certifications, services, or legal requirements change. The effective date and scope should be checked before relying on a framework statement.