Privacy policy.

Introduction

Kredit Canada is committed to protecting the confidentiality of the personal information you entrust to us. Applying for a loan means sharing sensitive details about your identity, your income and your finances, and we treat that information accordingly.

This policy explains what we collect, why we collect it, who we share it with, how long we keep it and how you can exercise your rights. It applies to this website and to the loan application you submit through it.

Privacy Officer

Kredit Canada has designated a Privacy Officer who is responsible for the protection of personal information and for handling requests and complaints about this policy.

You can reach the Privacy Officer by email at the address listed in the Contact us section below.

Personal information we collect

We collect only the information we need to assess your loan application, to serve you and to meet our legal obligations. Depending on how you use the site, this includes:

What we do not collect on this site

This website never asks for, receives or stores your online banking username or password. Bank verification is performed on the secure platform of the lender that processes your application, through a read-only connection.

We also do not collect your social insurance number through this website.

How we collect your information

Your personal information is collected directly from you through the loan application form and the contact form on this website.

We also collect technical information automatically through server logs and cookies, as described in the Cookies section below.

Why we use your information

We use the information we collect for the following purposes:

• Receiving, assessing and processing your loan application
• Verifying your identity and your ability to repay
• Communicating with you about your application and your account
• Providing customer support
• Sending you promotional offers, only if you have opted in
• Producing anonymous statistics and improving the website
• Preventing fraud and meeting our legal and regulatory obligations

Consent and withdrawal of consent

We collect and use your personal information with your consent, which you give when you submit the application form and check the consent boxes, or where the law otherwise allows or requires it.

You may withdraw your consent at any time. Withdrawing consent to marketing communications does not affect your application. Withdrawing consent to the processing of your application may mean that we can no longer offer you a loan.

To withdraw your consent, contact us using the details in the Contact us section below.

Automated processing of your application

Decisions about your loan application may be supported, in whole or in part, by automated processing of your personal information, including automated verification of your income and your ability to repay.

If a decision concerning you is made exclusively by automated processing, you have the right to be informed of the personal information used, the reasons and the principal factors that led to the decision, and to have the personal information corrected. You may also submit your observations to a member of our staff who is able to review the decision.

Who we share your information with

We do not sell your personal information, and we do not share it for the marketing purposes of other companies.

We share your information only with the parties who need it to deliver the service you asked for:

• The lending platform that receives your application, creates your loan file and communicates the decision to you
• The bank verification provider that confirms your income through a secure, read-only connection
• Our service providers for hosting, security and communications, who are bound by confidentiality agreements and may use the information only to perform the services we request
• Any authority, regulator or court where disclosure is required by law

Communication outside Québec

Some of our service providers may store or process personal information outside Québec. Before communicating personal information outside Québec, we conduct the privacy impact assessment required by law and, where necessary, put a written agreement in place so that your information receives adequate protection.

How long we keep your information

We keep your personal information only for as long as it is needed for the purposes described in this policy, and for any period required by applicable law and by our regulatory obligations.

When that period ends, we destroy the information or anonymize it so it can no longer be linked to you.

Security

Your personal information is kept in a secure environment. Everyone who works for us is required to respect its confidentiality.

The measures we use include encryption of your information while it travels between your browser and our servers, restricted access on a need-to-know basis, authentication controls, monitoring and logging, and regular backups.

No system can guarantee absolute security. Transmitting information over the internet always carries an element of risk, and we encourage you to protect your own devices and accounts.

Cookies and similar technologies

Cookies are small files stored on your device. We use essential cookies that are necessary for the site to work, and, only with your consent, cookies that help us measure how the site is used or that support advertising.

Non-essential cookies are never loaded before you give your consent. You can accept them, refuse them, or choose them by category when the cookie banner appears, and you can change your mind at any time using the cookie button at the bottom left of any page.

Your rights

To exercise any of these rights, contact our Privacy Officer using the details below. We respond within the timeframe set by law. If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec.

Under Québec and Canadian privacy law, you have the right to:

• Access the personal information we hold about you
• Have inaccurate, incomplete or outdated information corrected
• Withdraw your consent to the use or communication of your information
• Ask that your information no longer be disseminated, and that a link to it be de-indexed, in the cases provided by law
• Receive the computerized personal information you gave us in a structured, commonly used technological format
• Be informed about, and submit observations regarding, a decision made exclusively by automated processing

Privacy incidents

If a confidentiality incident involving your personal information occurs and presents a risk of serious injury, we will notify you and the Commission d'accès à l'information du Québec promptly, and take reasonable measures to reduce the risk and prevent similar incidents. We keep a register of confidentiality incidents.

Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The date at the top of this page shows when it was last updated. We encourage you to review it when you use the site.

Contact us

For any question about this policy, to exercise your rights, or to reach our Privacy Officer, write to us at the email address shown in the site footer, or use the contact page on this website.

Applicable legislation

We comply with the legislative provisions set out in:

• The Act respecting the protection of personal information in the private sector (Québec)
• The Personal Information Protection and Electronic Documents Act (Canada)