Privacy policy

1. The information we collect

We collect only the information we genuinely need to provide and improve our services. This falls into a few broad groups:

• Information you give us. When you apply, contact us or use your portal, you may provide your name, email address, phone number, and the details you enter in an application such as a requested loan amount, term and currency. You may also provide supporting documents to help verify your details.
• Account information. When you create a client account we hold your login details securely (in a hashed form) together with your basic contact information.
• Information collected automatically. To keep the site secure and working well, we may collect technical details such as your IP address, browser type, device type, pages visited and timings. This is used for security, diagnostics, and to understand how the site is used.
• Correspondence. If you contact us, we retain the details of the conversation so we can help you and keep an accurate record.

2. How we use your information

We use your information for clearly defined purposes:

• To process your application and, if approved, to create and manage your loan and repayment schedule.
• To operate your client account, allowing you to view applications, schedules, payments, documents and notifications.
• To verify accuracy, reviewing the details and documents you provide as part of a fair, manual assessment.
• To communicate with you about your application, your loan and important service updates, and to answer your questions.
• To keep things secure, detecting and preventing fraud and misuse, and protecting your data and our systems.
• To meet legal and regulatory obligations that apply to us, including record-keeping requirements.
• To improve our services, understanding how people use the site so we can make it better and more reliable.

We do not use your information for purposes that are incompatible with those described here without informing you where appropriate.

3. Legal bases for processing

Where applicable law requires a lawful basis for processing, we rely on one or more of the following:

• processing necessary to perform a contract with you or to take steps you request before entering into one (for example, processing your application);
• processing necessary to comply with our legal and regulatory obligations;
• processing carried out in our legitimate interests and compatible with your rights, such as keeping the service secure and improving quality; and
• your consent, where we specifically ask for it, which you may withdraw at any time.

4. Sharing and disclosure

We do not sell your personal information. We share it only in limited, carefully controlled circumstances:

• Service providers who help us run the service (for example hosting, security and communication tools), acting on our instructions and only to the extent necessary to provide those services.
• Professional advisers and authorities where we are required by law, in response to a lawful request, or where necessary to protect our rights, the rights of our clients, or the safety and security of the service.
• Business transitions in connection with a merger, sale or reorganisation, provided the recipient is bound to protect your information to at least the same standard described here.

5. Data retention

We keep personal information only for as long as necessary for the purposes described in this policy. Financial and loan records are kept for the periods required by applicable legal and regulatory obligations, even after an account is otherwise closed. Where personal information is no longer needed, we delete, aggregate or anonymise it so it can no longer be associated with you.

6. Security

We take reasonable and appropriate technical and organisational measures to protect your information. These include encrypted communication, securely hashed passwords, access controls that limit who can view data, and storing sensitive files in a protected area away from the public part of the site. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work continuously to keep your data safe.

7. Your rights and choices

Depending on where you live, you may have rights to request access to, correction of, or deletion of your personal information, to object to or restrict certain processing, and to request a copy of information you provided. To protect your privacy and the security of records, we may need to verify your identity and may decline certain requests where permitted by law.

• Access and correction. You may update much of your contact profile directly from your portal, and you can ask us for a summary of the personal information we hold.
• Deletion. Where we are able to delete your personal information and continue to meet our legal obligations, we will do so. Because financial and loan records must be retained, deletion of an account is handled by our team so we can also comply with those obligations.
• Marketing and communication preferences. We will only send you service-related communications we need to, and you can let us know your preferences for any other messages at any time.

To exercise any of these rights, please contact us. If you are not satisfied with how we handle a request, you may also have the right to complain to your local data protection authority.

8. Cookies and similar technologies

We use functional storage that is essential to run the service, for example to keep you signed in and to protect forms from abuse. Any analytics we use are configured to protect your privacy. You can control cookies in your browser, but please note that disabling essential cookies may stop parts of the site from working correctly.

9. International processing

Your information may be processed in the region or regions where we and our service providers operate. Where information is transferred across borders, we take steps to ensure it is protected to a consistent standard, such as relying on recognised safeguards or standard contractual protections.

10. Children & eligibility

Our services are intended for people who are of legal age to enter into a binding agreement where they live. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our services, technology or legal requirements. When we make significant changes, we will update the date at the top of this page and, where appropriate, notify you through your portal or by the contact details you have provided.

12. Contact

If you have any questions, concerns or requests regarding this policy or how we handle your information, please reach out:

• Email: support@nalbra.com
• Contact page: Contact

Back to top