1. Purpose and Scope
Sigma Global Payments Inc. (hereinafter, “Sigma Global Payments” or “the Company”) values the privacy of the people who use its website https://sigmaglobalpayments.net and its payment processing platform. This Privacy Policy describes how we collect, use, protect and share the personal data of our users, Payers and affiliated merchants, in accordance with Law 81 of March 26, 2019 on Personal Data Protection of the Republic of Panama and its regulatory Executive Decree.
This Policy applies to any natural person who visits the site, makes a payment through the platform, or whose data is processed by Sigma Global Payments in the course of providing its Payment Facilitator (PayFac) services.
2. Data Controller
The controller of the personal data collected through https://sigmaglobalpayments.net is Sigma Global Payments Inc., a Panamanian company domiciled at Boulevard Costa del Este, PH Financial Park, Floor E1, Panama.
3. Personal Data We Collect
Depending on how you interact with our site and services, we may collect the following categories of personal data:
- Identification data: full name, personal identification or passport number, and contact details (email, phone number, address).
- Transaction data: amount, date, affiliated merchant involved, and payment status.
- Payment card data: processed in accordance with Section 6 of this Policy, under the PCI DSS standard.
- Technical data: IP address, browser type, operating system, and browsing data collected through cookies in accordance with Section 11.
- Affiliated merchant data: corporate information and identification of legal representatives and ultimate beneficial owners, collected as part of the merchant due diligence process.
4. Purposes of Processing
The personal data collected is used for the following purposes:
- Processing payments made by Payers to affiliated merchants.
- Verifying the identity of users and affiliated merchants, in accordance with our policies on fraud prevention and on Anti-Money Laundering, Counter-Terrorist Financing and Counter-Proliferation Financing of Weapons of Mass Destruction (AML/CFT/CPF).
- Responding to inquiries, complaints and support requests.
- Meeting contractual obligations to the corresponding acquiring bank and complying with applicable regulations.
- Improving the security and operation of the site and the payment platform.
5. Legal Basis and Consent
Your personal data is processed on the basis of your prior, informed and unequivocal consent, given when you use the site or accept the Terms and Conditions of the service, in accordance with the principle of lawfulness established in Law 81 of 2019. In certain cases, processing is also based on the need to perform the contractual relationship between Sigma Global Payments, the Payer and the affiliated merchant, or on compliance with applicable legal obligations.
6. Payment Card Data Security (PCI DSS)
Sigma Global Payments complies with the Payment Card Industry Data Security Standard (PCI DSS) when handling credit and debit card data processed through its platform. In compliance with that standard:
- Payment card data is transmitted and stored in encrypted form, using encryption levels that meet PCI DSS requirements.
- Access to card data is restricted to the personnel and systems strictly necessary to process the transaction.
- Sigma Global Payments does not store the card security code (CVV/CVC) after the transaction has been authorized, as required by PCI DSS.
- The processing and fraud control systems used (including the technology provided by our gateway and its fraud control providers) operate under the security controls required by the enabled card brands.
PCI DSS compliance is a payment industry security requirement and complements, without replacing, the personal data protection rights and principles established in Law 81 of 2019.
7. Data Retention
Sigma Global Payments will retain personal data for as long as necessary to fulfill the purposes described in Section 4, and thereafter for any additional period required to meet legal, contractual or AML/CFT/CPF requirements applicable to its operation as a Payment Facilitator.
8. Sharing Data with Third Parties
Sigma Global Payments may share personal data with the following third parties, only to the extent necessary for the purposes described in this Policy:
- The corresponding affiliated merchant, with respect to the data of the transaction made by the Payer.
- The acquiring bank and the payment processing and fraud control providers involved in the transaction processing chain.
- Competent authorities, when there is a valid legal request.
Sigma Global Payments does not sell or trade personal data to third parties for marketing purposes unrelated to the provision of its services.
9. Data Subject’s ARCO+P Rights
Under Law 81 of 2019, as the owner of your personal data you have the right to:
| Right | Description |
|---|---|
| Access | Know which of your personal data is processed by Sigma Global Payments and for what purpose. |
| Rectification | Request the correction of inaccurate, incomplete or outdated personal data. |
| Cancellation | Request the deletion of your personal data when it is no longer necessary for the purposes for which it was processed. |
| Objection | Object to the processing of your personal data in certain circumstances provided for by law. |
| Portability | Request a copy of your personal data in a structured, commonly used format. |
10. How to Exercise Your Rights
You may exercise any of the rights described in Section 9 by sending a request to [email protected], stating your full name, the right you wish to exercise, and documentation that allows your identity to be verified. Sigma Global Payments will respond to your request within the time limits established by Law 81 of 2019 and its implementing regulations.
11. Cookies and Similar Technologies
The site https://sigmaglobalpayments.net may use cookies and similar technologies to improve the browsing experience, remember preferences and analyze use of the site. You can set your browser to reject cookies; however, this may affect how certain sections of the site work.
12. Minors
Sigma Global Payments’ services are intended for people with the legal capacity to enter into contracts. We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data, please contact us at the email address given in Section 10.
13. Changes to this Privacy Policy
Sigma Global Payments may update this Privacy Policy at any time. Updates will be published at https://sigmaglobalpayments.net, indicating the date of the latest update. We recommend that you review this Policy periodically.
14. Contact
For questions about this Privacy Policy or the processing of your personal data, you can contact us through:
- Email: [email protected]
- Phone: (+507) 830-5381
- Address: Boulevard Costa del Este, PH Financial Park, Floor E1, Panama