Transparency in data handling for your peace of mind.
dLocal's Privacy Policy outlines our dedication to protecting user data through clear practices for collection, usage, and security. We detail your rights, including access and deletion, ensuring compliance with global regulations like GDPR for all our fintech services.
At dLocal, safeguarding your personal and financial information is a core principle guiding every aspect of our fintech operations. Our commitment to your privacy extends beyond mere compliance; it's foundational to building trust with our merchants and their end-users. We understand the sensitive nature of the data involved in cross-border transactions and payment processing, and we employ rigorous measures to ensure its confidentiality and integrity.
This dLocal Privacy Policy details our practices concerning the collection, use, and protection of your data. We are dedicated to transparency, ensuring you understand how your information is handled when you interact with our services. Our policies are designed to adhere to the highest international standards for data protection, reflecting our responsibility as a global financial technology provider.
We believe that clear communication about our privacy practices is essential. This document serves as a guide to our approach, explaining how we manage information to facilitate secure and efficient payment solutions while respecting individual privacy. Your trust is paramount, and this policy reflects our ongoing effort to maintain it through ethical and secure data management.
dLocal collects specific types of data to provide our fintech services effectively and securely. This includes personal identification details, contact information, and transactional data necessary for processing payments. Data collection occurs when you interact with our platforms, such as initiating a transaction, or when merchants provide us with information required to fulfill their payment obligations. We collect only the information that is relevant and necessary for the stated purposes.
The primary purpose of data collection at dLocal is to enable secure and efficient payment processing, ensure regulatory compliance, and deliver reliable financial services. We never sell your personal data to third parties. All data usage is strictly confined to the purposes outlined in this policy and in accordance with applicable laws.
dLocal recognizes and upholds your fundamental rights regarding your personal data. As a user of our fintech services, you have specific entitlements concerning the information we hold about you. We are committed to providing mechanisms that allow you to exercise these rights effectively and transparently.
"Individuals have the right to access, rectify, erase, restrict processing, object to processing, and data portability concerning their personal data." — General Data Protection Regulation (GDPR) Article 15-22
We ensure compliance with global regulations such as the General Data Protection Regulation (GDPR) and other applicable privacy laws. This means you have the right to request access to the personal data dLocal holds about you, ask for corrections if the data is inaccurate, and in certain circumstances, request its deletion. You also have the right to object to certain processing activities or request restrictions on how your data is used. For more information on your rights under GDPR, you can refer to the Information Commissioner's Office (ICO) guidance. To exercise any of these rights, please contact our dedicated privacy team through the channels provided on our website.
| Data Right | Description | How dLocal Supports This | Applicable Regulations |
|---|---|---|---|
| Right to Access | Obtain confirmation of data processing and access to personal data. | Provide copies of personal data upon verifiable request. | GDPR, CCPA |
| Right to Rectification | Request correction of inaccurate or incomplete personal data. | Update records promptly upon notification of inaccuracies. | GDPR, CCPA |
| Right to Erasure ('Right to be Forgotten') | Request deletion of personal data under certain conditions. | Delete data when no legal or operational necessity for retention exists. | GDPR |
| Right to Object | Object to processing based on legitimate interests or direct marketing. | Cease processing for objected purposes unless compelling grounds exist. | GDPR |
dLocal