Personal dataprocessing policy

100%

TLS/HTTPS encryption

Bank-grade security in transit and at rest

0

Data sales

We never commercialise your financial information

24/7

Privacy support

Direct channel soporte@dis-global.com

Disglobal C.A.

Data controller

Distribuidora Global de Insumos XXI, C.A. ("DisGlobal", "we") is the controller of the data described in this policy. We operate the Disglobal POS mobile app and the middleware platform that connects POS devices to the Tranred payment processor. You can reach us with any privacy question at soporte@dis-global.com.

Apps and gateways

Scope

This policy applies to the applications developed by Disglobal. It does not cover third-party sites or services you may reach from our app, such as the different processors and banks, which have their own policies.

Regulated categories

What data do we collect?

Segmented handling under the strict data minimisation principle, in line with payment system regulation.

Merchant registration

Identification and contact

When registering a customer or merchant: first and last names, national ID or tax ID, date of birth, sex, marital status, address (state, municipality, parish), phone and email.

Fund settlement

Financial data

The merchant's bank account number, used to settle the payments it processes.

POS gateway flow

Transaction and card data

When processing a payment, the POS device transmits to our servers the card data needed to authorise the operation (number, expiry date, EMV chip data, PIN encrypted by the reader itself), which we forward to the payment processor.

Hardware & local

Device permissions

Bluetooth and approximate location, to connect external EMV card readers (Android requires the location permission for Bluetooth scanning; we do not use it to track you). Camera and gallery, to attach receipts. Biometric authentication, to unlock the app on your own device — it is never sent to our servers.

Purpose of processing

What we use this data for

  • Create and manage customer and merchant accounts.
  • Process payment transactions, voids and closeouts.
  • Prevent fraud and meet the payment processor requirements.
  • Provide technical support and send operational messages, such as SMS verification codes.
  • Generate reports and till closeouts for the merchant.

Who we share your data with

CredicardBNCUbiipagos

Tranred, C.A. (payment processors): receives the transaction and card data needed to authorise each operation, under their own security policies.

SMS messaging provider

Receives your phone number and the message content when we send you a verification code.

Absolute commitment

We do not sell your personal data to third parties, nor do we use it for advertising.

Security architecture

How do we protect your data?

Continuous cryptographic protocols applied across every transactional life cycle.

End-to-end encryption

We apply technical and organisational measures to protect your information: part of your personal profile is stored encrypted in our database, access to our systems is restricted to authorised staff, and communications with our servers travel encrypted (HTTPS/TLS).

HTTPS/TLS channel

Cryptographic evolution

We are continuously strengthening the encryption of the most sensitive information we handle — including identity documents, bank accounts and the data of every transaction — as part of the permanent evolution of our platform.

Continuous hardening

Incident management

No system is completely infallible. If we identify an incident affecting your data, we will notify you in accordance with applicable regulation.

Immediate legal alert

Tranred and regulator banking standards: Processing operations comply with strict operational safeguard policies and continuous audit authorised by the Superintendency of Banking Sector Institutions.

Data subject rights

Your rights

1
Access

To the personal data we hold about you.

2
Rectification

Of inaccurate or outdated data.

3
Erasure

Of your account and personal data, where no legal obligation prevents us from doing so.

Write to us at soporte@dis-global.com stating your request; we will reply within a reasonable time.

Exercise a right

How long do we keep your data?

We keep your account data while it stays active, and transaction records for as long as our legal, accounting and payment processor obligations require. You can request the deletion of your account at any time — see Section 8.

Minors

Disglobal POS is not directed at minors and we do not knowingly collect personal data from minors.

Changes to this policy

We may update this policy when our practices or the applicable regulation change. We will always publish the current version on this same page, together with its update date.

Revisions published with an immutable public timestamp.
Accountability channel

Contact

For institutional enquiries, habeas data requests or technical clarifications about our gateway:

Distribuidora Global de Insumos XXI, C.A.
Disglobal POS operator
Email: soporte@dis-global.com
Send a privacy requestOfficial support on banking business days