Who we are
Localpayment is a payments infrastructure company for Latin America and part of Aleph Group. The Localpayment entity responsible for your personal data depends on the country and on the service involved; it is identified in your agreement or in the country notice that applies to you.
Questions about this policy: cybersecurity@localpayment.com (Security and Data Protection Office).
Whose data this policy covers
- Website visitors — people who browse localpayment.com or submit one of its forms.
- Business customers and their representatives — contacts, signatories, beneficial owners and users of the Business Portal.
- Payers and beneficiaries — people who pay or are paid through our services on behalf of our business customers. For these transactions we generally act on our customers’ instructions and, where the law requires it, also under our own legal obligations, such as anti-money laundering rules.
Data we collect
| Source | Data | When |
|---|---|---|
| Contact and newsletter forms | Name, work email, company, website, role, country, volume band, interest, message | When you ask us to contact you or subscribe |
| Onboarding (KYB) | Company documents, beneficial owners, identification of representatives | During the compliance review |
| Business Portal | User accounts, roles, sign-in and activity logs | When your team uses the portal |
| Transactions | Payer or beneficiary name, document number, bank or wallet details, amount | When you collect or pay out through us |
| Security | IP address, browser information and a security token | When our firewall protects this site |
Why we use it
- To answer your inquiries and provide our services.
- To verify businesses and comply with AML/CFT, sanctions and tax obligations.
- To process, reconcile and report transactions.
- To secure our platform and prevent fraud.
- To send our newsletter, only if you subscribe. You can unsubscribe at any time.
We do not sell personal data. Our cookie policy explains which cookies this website uses.
Legal bases
Depending on the country, we rely on the performance of a contract, compliance with legal obligations, our legitimate interests (for example, securing our platform) and, where required, your consent.
Sharing
We share personal data only when needed: with banks, card networks and local payment rails that execute transactions; with service providers that host or support our platform, such as Amazon Web Services; with professional advisers and auditors; and with authorities when the law requires it.
International transfers
We operate across the Americas and use cloud infrastructure, so your data may be processed outside your country. When that happens, we apply the safeguards required by the applicable law, such as contractual clauses.
Retention
We keep personal data only as long as needed for the purposes above, or as long as the law requires. AML/CFT and financial records are kept for the periods set by local regulation. Website inquiries are kept only as long as needed to respond and follow up, and are then deleted.
Security
We protect personal data with encryption in transit (TLS 1.2+) and at rest (AES-256), key rotation in AWS KMS, multi-factor authentication and role-based access. Learn more on our security page.
Your rights
Depending on where you live, you may have the right to access, correct, delete or port your data, to object to or restrict certain processing, and to withdraw your consent. To exercise these rights, write to cybersecurity@localpayment.com. You can also contact your data protection authority.
Country frameworks
We process personal data under the laws that apply to each operation, including, where applicable:
- Brazil — General Data Protection Law (LGPD, Law No. 13,709/2018).
- Argentina — Personal Data Protection Law No. 25,326.
- Mexico — Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP, 2025).
- Colombia — Statutory Law 1581 of 2012.
- Peru — Personal Data Protection Law No. 29733.
- Canada — Personal Information Protection and Electronic Documents Act (PIPEDA).
- European Union — General Data Protection Regulation (EU) 2016/679 (GDPR), where it applies to our processing.
Country notices in local languages will be published on this page.
Cookies
See our cookie policy.
Changes to this policy
We will update this policy when our practices change and show the date of the latest version on this page.