Privacy Statement for International Payments

Updated on 01/02/2025

At Mercado Pago, we understand the importance of protecting our users' data so they can use our services in a secure and reliable manner.

We will process your personal data to enable you to register as a Mercado Pago User and manage all payments and transactions made across the different sites where you operate from a single platform. Therefore, we inform you in this Privacy Statement (“Statement”) how Mercado Pago handles your personal data and the rights you have to control it.

This Privacy Statement applies to all personal data you provide or that we collect from you through our Platform. Please note that unless explicitly stated otherwise, this Privacy Statement will prevail in the event of any inconsistency between it and any other Mercado Pago privacy statement concerning the personal data mentioned herein and for the purposes described here.

Please read this Privacy Statement carefully before using the Platform or submitting any personal data to Mercado Pago.

1. Who is responsible for processing personal data?

Mercado Pago is responsible for processing your personal data. You can find information related to the Mercado Pago entity in your country of residence and how to contact them in ANNEX II.

2. What personal data do we collect and process?

To manage International Payments through our platform, the Seller must create a Mercado Pago account (“Mercado Pago Account”). To do this, we request the following information:

Contact Information

(i) Email address;
(ii) Address;
(iii) Country of origin.

Account Registration

To register as a User and use our Platform, you must provide the following personal information related to your status as a Representative:

(i) Full name;
(ii) Date of birth;
(iii) Type of Identification Document;
(iv) Identification document number;
(v) Expiration date of the identification document;
(vi) Nationality;
(vii) Address.

Identity Validation and Know Your Customer (KYC) Process

For these purposes, as a Representative, you must provide:

(i) Name;
(ii) Last name;
(iii) Photo of your identification document;
(iv) Tax identification;
(v) Real-time photo;
(vi) Email address;
(vii) Address;
(viii) Proof of your business relationship with the seller
(ix) General Power of attorney.

For individual shareholders of the company, a “Company Shareholder Certificate” will be required, stating:

(i) Full name of the shareholder;
(ii) Tax identification number;
(iii) Number of shares;
(iv) Percentage of ownership;
(v) Nationality;
(vi) Date of birth;
(vii) Address;
(viii) Type and number of identification document;
(ix) Signature;
(x) Position within the company.

When you access and/or use our Platform, Mercado Pago automatically collects the following Personal Information:

Registration Information

(i) IP address,
(ii) Traffic data related to the connection,
(iii) URL type,
(iv) Language used,
(v) Date, time, and duration of your access,
(vi) Media Access Control (MAC) address,
(vii) Screen resolution,
(viii) Name and version of your operating system,
(ix) Device manufacturer and model,
(x) Type and version of the Internet browser,
(xi) Service provider and the name and version of the Platform you are using.

Cookies, web beacons, pixels, and similar technologies

These technologies are used to automatically collect information about you. See Section 10 for more details about these technologies.

We want you to know that you are not obligated to provide us with the personal data mentioned above. However, refusing to provide it or providing inaccurate data may prevent the creation of your account, your registration as a User, and consequently, your ability to operate on our Platform.

 

---

3. What do we do with personal data?

Within the framework of this Privacy Statement, we process your personal data for the following purposes:

• To allow you to register your Seller User account on Mercado Pago and link the accounts associated with the sites where you operate.

• To allow you to access your account and carry out transactions.

• To carry out the “Know Your Customer” (“KYC”) process regarding your company and its Representatives.

• To send communications related to the payment processing of sales made by the Seller User.

• To validate the Representation of the User invoked.

• To manage online payments across the various sites where the Seller User operates.

• To enable you to withdraw funds automatically.

• To communicate with you or your Representative and send promotional communications about products and services that may interest you.

Additionally, we may process your personal information, either as agreed or permitted by applicable laws, for the following purposes:

• Statistical purposes: Calculating usage levels and helping diagnose server issues with the Platform, as well as ensuring its proper functioning.

• Compliance with regulatory requirements: Mercado Pago may need to use your personal data to meet regulatory requirements related to industry, commerce, taxes, finance, auditing, industrial oversight, and other related laws and regulations.

• Dispute resolution: Mercado Pago may need to use your Personal Information to handle and resolve legal disputes with you, a Seller, or a third party.

• Cooperation with public security authorities: Mercado Pago will cooperate with relevant public security or supervisory authorities and any investigations in accordance with applicable laws and regulations, including jurisdictions where Sellers market their products.

• Fraud detection and prevention: To detect and prevent fraud, abuse, and related crimes, to protect the security of Users and the sustainability of the Platform, including KYC purposes.

• Legal obligations: When necessary to fulfill legal obligations or to exercise your rights.

Within the framework of this Privacy Statement, we process your data for the purposes and with the legal bases detailed below:

 

The use of your data for any purpose other than those described in this Statement will be communicated to you promptly, and, if necessary, your consent will be sought in accordance with Applicable Data Protection Laws.

 

---

4. How do we share personal data?

For the purposes described in the previous section (“What do we do with your personal data?”), your personal data may be accessed or shared with the following categories of recipients:

• Mercado Pago employees assigned to roles related to User management or connected purposes.

• Affiliates of Mercado Pago, operating under our same processes and internal policies, to comply with our internal regulations, prevent fraud, manage risks, and facilitate the management of Mercado Pago’s services and products.

• Business partners with whom Mercado Pago has a collaboration or alliance relationship to advertise, provide, or offer you goods and/or services.

• Financial institutions specializing in foreign exchange markets and/or for the purpose of making disbursements.

• Service providers processing data on behalf of Mercado Pago under our instructions.

• Competent authorities performing their functions.

• Third parties involved in mergers, acquisitions, or similar business operations with Mercado Pago.

 

All these employees and third parties have signed a contract with us, committing to use personal data exclusively for the agreed purposes, that is, under our explicit instructions and implementing technical and organizational measures to ensure the security and confidentiality of personal data.

Additionally, third parties are obligated not to sell or disclose your personal data to other third parties unless required by applicable law or as stated in this Privacy Statement.

---

5. International transfers of personal data

Mercado Pago is a global company with subsidiaries in many countries performing different functions and headquartered in Argentina.

For the purpose of providing you with International Payment processing services through the Platform, some of your personal data will be transferred to Brazil, Argentina, Mexico, Chile, Colombia, and the United States of America. You can contact the international recipients via email at privacy@mercadolibre.com to exercise your relevant personal data rights.

Mercado Pago will take all necessary measures to protect the security and confidentiality of your personal data during such transfers, in accordance with Applicable Data Protection Laws. Transfers will only be conducted in the manner permitted by the applicable Data Protection Law.

The recipient countries of the personal data may not offer adequate levels of protection under the Applicable Data Protection Laws. In such cases, Mercado Pago implements measures to protect your personal data through standard contractual clauses or binding corporate rules that establish appropriate protection measures.

 

---

6. How long do we store personal data?

We will only store your personal data for as long as necessary to fulfill the purpose for which it was collected or to comply with regulatory or legal requirements, as well as for the period necessary to safeguard Mercado Pago's rights and interests, always in accordance with applicable personal data protection laws.

Once this period has ended, the data will be deleted or anonymized so that you cannot be identified.

We will take the necessary steps to ensure that personal data is adequately and appropriately protected against disclosure, misuse, alteration, damage, or unauthorized access.

 

---

7. How do we protect and secure your personal data?

Mercado Pago complies with the requirements of applicable regulations and has adopted technical, organizational, and administrative security measures following industry standards to protect your personal data.

 

---

8. How can you exercise your rights over your personal data?

As a Representative of the Seller User, you have the following rights:

• Right of Access: To know whether or not we are processing your personal data. If we are processing it, we will provide all the information we have about you.

• Right of Rectification: You can request the correction of your personal data if it is inaccurate or outdated.

• Right to Erasure (Right to Be Forgotten): You can request the deletion of your personal data when:
  
  (i) The personal data is no longer necessary for the purposes it was collected or processed for;
  (ii) The processing is based on consent, and you withdraw that consent, provided there is no other legitimate basis for the processing;
  (iii) There is an objection to the processing;
  (iv) The personal data has been unlawfully processed;
  (v) The personal data must be deleted to comply with a legal obligation.

• Right to Data Portability: You can request that we provide your personal data to transmit it to another data controller, provided the processing is based on consent or the execution of a contract. Your data will be provided in a structured, commonly used, machine-readable, and interoperable format.

• Right to Object: You can request that we stop processing your personal data for profiling or direct marketing purposes.

• Right not to be subject to automated decision-making: You can request that your personal data not be subject to decisions based solely on automated processing when this significantly affects you.

 

---

How can you exercise your rights with Mercado Pago?

You can submit requests regarding your personal data by writing to the following email address: privacy@mercadolibre.com. Please include details about which right(s) you wish to exercise, the reason for your request, and specify, where applicable, the relevant personal information.

If we cannot verify your identity, we will ask you to provide reliable documentation to confirm it.

Finally, you have the right to withdraw your consent for us to process your data or send you advertisements at any time by emailing us at privacy@mercadolibre.com.

Please note that withdrawing consent for the processing of your personal data may affect our ability to provide you with our services.

Regarding the right to erasure, note that in certain cases, we will retain your personal data, even if you have requested its deletion, to comply with the purposes described in this Privacy Statement or when there is a contractual or legal obligation to maintain your personal data. Once such purposes or obligations are fulfilled, we will proceed to delete your personal data.

Reporting violations of data protection rights

At any time, you may contact us to report a violation of your rights concerning the processing of your personal data, and we will address the issue as promptly as possible.

However, we want to inform you that if you believe any of your rights are being affected due to non-compliance with data protection laws, you can also exercise your rights by filing a report or complaint with the relevant Data Protection Authority.

 

---

9. Cookies and similar technologies

9.1. Cookies:

Cookies are small data files stored on your device that act as a unique label to identify your browser. For more information on how to manage cookies, refer to Section 9.4 of this clause.

Pixels:

(Also known as web beacons) are codes embedded in a service that send information about its use to a server. When you access a service containing a pixel, it can allow us or a third party to place or read cookies in your browser.

Device Fingerprinting:

This is the process of analyzing and combining sets of data elements from your device's browser, such as JavaScript objects and installed fonts, to create a “fingerprint” of your device and uniquely identify your browser and device.

9.2. Purposes for using these technologies:

The personal data collected through these technologies is used for:

• Understanding the interests and behavior of Seller Users to provide better service or related information.

• Enforcing Platform rules and ensuring security.

• Reducing the need for Users to re-enter their password during browsing sessions and for counting and verifying registrations, user activity, and other metrics.

• Offering a more interactive or personalized experience based on the User's actions.

9.3. Third-party cookies and technologies:

Cookies and other technologies on the Platform may be provided by third parties or used by advertisers unrelated to Mercado Pago. This Privacy Statement only covers Mercado Pago’s data practices and not those of third parties.

9.4. Managing cookie preferences:

Most browsers accept cookies by default. You can configure your browser to delete stored cookies, request approval before storing cookies, or block cookies from being stored. This process varies across browsers and needs to be done for each one you use.

 

---

10. What laws and jurisdictions apply?

This Privacy Statement will be interpreted in accordance with the laws provided in the additional provisions or disclosures for your country of residence, or if not specified, the terms and conditions applicable to the Platform.

 

---

11. Changes to the Privacy Statement

If Mercado Pago makes changes to this Statement, you will be notified individually through our usual communication channels (e.g., email), as well as through our websites or applications (via banners, pop-ups, or other notification mechanisms). When your consent is required, we will inform you so you can decide whether to agree.

 

---

12. Contact Us

If you have any questions about this Privacy Statement or our practices regarding your Personal Data, or if you experience difficulty accessing the information contained in this Privacy Statement, please contact us at the email address or physical address listed in the additional provisions for your country of residence.

Annex I - Special Conditions for Each Jurisdiction

CHINA

The following additional provisions apply in accordance with the Personal Information Protection Law and other relevant laws applicable to residents of China.

---

1. Consent:

The processing of your Personal Information is necessary for the operation of the Platform. When applicable, providing your express, voluntary, and informed consent to this Privacy Statement is an essential requirement for you and/or the Sellers to use the Platform.

---

2. Data Protection Authorities:

• The Data Protection Authority for mainland China is the Cyberspace Administration of China and other competent authorities as provided by applicable law.

• The Data Protection Authority for Hong Kong is the Office of the Privacy Commissioner for Personal Data (PCPD).

---

3. Personal Data Protection Laws:

This refers to the Personal Information Protection Law (PIPL) for mainland China and the Personal Data (Privacy) Ordinance (PDPO) for Hong Kong.

---

4. Sensitive Data:

Sensitive Personal Information refers to data that, when disclosed or illegally used, could harm the dignity of any natural person or compromise their personal or financial security. This includes information such as biometric identification, religious beliefs, specific identities, medical health, financial accounts, location and movements, as well as personal data of minors under 14 years old.

All categories of Sensitive Data in this Privacy Statement are marked in bold and underlined. Please note that we will only collect sensitive data to the extent strictly necessary and legally permitted.

The processing of your Sensitive Data (including cross-border transfers, as explained above) is necessary for the operation of the Platform. Providing your express, voluntary, and informed consent to this Privacy Statement is an essential requirement for you and/or the Sellers to use the Platform.

---

5. International Data Transfers:

Due to the locations of some of the systems used by Mercado Pago, the personal data we collect may be shared with third parties within your country of residence and/or abroad, in compliance with the requirements and restrictions on international data transfers established by applicable Personal Data Protection Laws.

By accepting and consenting to this Privacy Statement, you agree to both national and international transfers of your data, in accordance with the applicable Personal Data Protection Laws and as stated in this Declaration.

For more information about international data transfers, see Clause 6.

In case of doubt, you may request Mercado Pago to provide information about the third parties entrusted with your personal data, without prejudice to the protection of Mercado Pago’s trade and business secrets and in compliance with applicable regulations. 

---

6. Control Rights over Personal Data:

In addition to Section 9 of the Privacy Statement, Mercado Pago will retain your Personal Data in accordance with the time limits set by law and/or market practices, or for an extended period where communicated.

6.1 Processing requests to access, update, or delete Personal Data:

6.1.1. If any of your Personal Data is incorrect, incomplete, or misleading, Mercado Pago will attempt to update or modify it reasonably.

6.1.2. You may request the deletion of your Personal Data in the following cases:

• When the purpose of processing the Personal Data has been fulfilled, becomes impossible to achieve, or is no longer necessary.

• When Mercado Pago ceases to offer its products or services, or when the retention period has expired.

• When you withdraw your consent for the processing of Personal Data.

• When Mercado Pago processes Personal Data in violation of laws, regulations, or agreements.

• Other circumstances stipulated by laws and regulations.

6.1.3. Mercado Pago may not immediately delete your Personal Data from its servers or backup systems if the retention period stipulated by laws or administrative regulations has not expired (including statutes of limitations), or if deleting Personal Data is technically difficult. In such cases, Mercado Pago will cease processing the Personal Data except for storage while taking necessary security protection measures.

6.1.4. You may also withdraw your consent for Mercado Pago to process your Personal Data. Withdrawing consent does not affect the validity of any processing carried out based on your consent before withdrawal. Note that if you withdraw consent for the processing of Personal Data required for Mercado Pago’s services, Mercado Pago may not be able to continue providing such services fully or partially.

6.1.5. To protect your Personal Information, we may ask you to validate your identity before processing your request.

6.1.6. We may deny requests that exceed reasonable limits, including but not limited to:

• Requests to access, update, modify, or delete Personal Data unrelated to your identity.

• Requests submitted repeatedly without reasonable justification.

• Requests requiring excessive technological effort (e.g., developing new systems or making fundamental changes to current practices).

• Requests that may risk the legitimate interests of third parties.

• Impractical requests.

---

7. Security Measures:

Mercado Pago has implemented security measures based on the type of information. These may include access controls, encrypted transmission and/or storage, obfuscated information display, firewall systems, and intrusion detection systems.

The communication systems and networks you use to access the Platform may experience technical issues or breaches due to factors beyond our control. Despite the mentioned security measures, please understand that no "perfect security measure" exists for networks, and Internet transmission is not completely secure.

---

8. Applicable Law and Jurisdiction:

This Privacy Policy will be interpreted according to the laws and regulations of China. Any dispute arising from this Privacy Statement will first be resolved through good faith negotiations. If no agreement is reached, either party may submit the dispute(s) to arbitration by the Shanghai International Economic and Trade Arbitration Commission, in accordance with its current rules. Arbitration will be conducted by a single arbitrator in Shanghai. The arbitration award will be final and binding on both parties.

 

---

9. Contact Information:

Email Address: privacy@mercadolibre.com

Physical Address:

• MAIJIADUO Business Consulting (Shenzhen) Co., Ltd.: Room 515, 91 Kefa Road CR Land Tower D, Dachong Community, Yuehai Street, Nanshan District, Shenzhen, China.

• Shanghai Branch of MAIJIADUO Business Consulting (Shenzhen) Co., Ltd.: Room 138, 18th Floor, Building 3, No. 2 Lane 838, Huangpi South Road, Shanghai, China.

• Representative Office of Global Selling LLC: Room 603-122, 91 Kefa Road CR Land Tower D, Dachong Community, Yuehai Street, Nanshan District, Shenzhen, China.

Annex II - Mercado Libre Entities

---

Argentina:

Mercado Libre S.R.L., CUIT 30-70308853-4, located at Avenida Caseros 3039, Floor 2, Ciudad Autónoma de Buenos Aires, C1264AAK, República Argentina.

 

---

Brazil:

MercadoPago.com Ltda., CNPJ/MF 10.573.521/0001-91, located at Avenida das Nações Unidas, 3.003, Bonfim, Osasco/SP, Brazil.

 

---

Chile:

Mercado Pago S.A., RUT: 76516950-K, located at Av. Apoquindo 4800, Tower 2, Floor 21, Las Condes, Santiago, Chile.

 

---

Colombia:

Mercadopago Colombia Ltda, NIT 9001163198, located at Carrera 17 No. 93-09, Floor 3, Bogotá D.C., Colombia.

 

---

 México:

MP Agregador S. de R.L. de C.V., located at Av. Insurgentes Sur 1602, Floor 9, Col. Crédito Constructor Alcaldía Benito Juárez, C.P. 03940, CDMX, Mexico.

 

---

Perú:

Mercado Libre Perú S.R.L., RUC No. 20462540745, located at Calle German Schreiber Gulsmanco Nº276, San Isidro, Lima, Peru.

 

---

Uruguay:

Deremate.com de Uruguay S.R.L., R.U.T: 21411170001, located at Calle Dr. Luis Bonavita 1266, Floor 39, Ciudad de Montevideo, Uruguay.

 

---

China:

• MAIJIADUO Business Consulting (Shenzhen) Co., Ltd., located at Room 515, 91 Kefa Road CR Land Tower D, Dachong Community, Yuehai Street, Nanshan District, Shenzhen, China.

• Shanghai Branch of MAIJIADUO Business Consulting (Shenzhen) Co., Ltd., located at Room 138, 18th Floor, Building 3, No. 2 Lane 838, Huangpi South Road, Shanghai, China.

• Representative Office of Global Selling LLC, located at Room 603-122, 91 Kefa Road CR Land Tower D, Dachong Community, Yuehai Street, Nanshan District, Shenzhen, China.