Privacy Policy

Last updated · 2026-06-01

This policy explains what personal data Creditly collects, why we collect it, how we share it with partner lenders, and the rights you hold under applicable data-protection law. Template content — to be reviewed and approved by qualified legal counsel before publication.

Data we collect

When you create a Creditly account we collect identification data (full name, date of birth, national ID or passport number), contact data (email address, mobile number, postal address), and financial data (declared income, employment type, existing credit obligations).

When you use our matching service we collect device and usage data automatically: IP address, browser type, operating system, pages visited, and the date and time of each request. We use this data solely to operate, secure, and improve the platform. We do not sell device or behavioural data to third parties.

How we use your data

We use your data to match your profile against our lender network (lawful basis: performance of a contract), to comply with anti-money-laundering and know-your-customer obligations (legal obligation), to prevent fraud and maintain platform security (legitimate interest), and — with your separate consent — to send you product updates and personalised financial tips by email.

We perform a soft credit search to retrieve a summary of your credit history. This search is visible only to you and does not affect your credit score or appear on searches made by lenders.

Sharing with lenders

We transfer your profile data only to the lenders you explicitly select when you click 'See your offer'. Each transfer is governed by a data-sharing agreement that requires the lender to use your data solely to evaluate and, if applicable, originate a credit product for you.

We do not share your data with advertisers, data brokers, or marketing platforms. We may share anonymised, aggregated data with regulators and research partners to support financial-inclusion initiatives.

Data retention

We retain your account data for the duration of your relationship with Creditly and for seven years thereafter to meet statutory recordkeeping obligations. Application-level data shared with lenders is subject to each lender's own retention schedule, as notified in their privacy notice.

You may request deletion of your Creditly account at any time. Where a legal obligation prevents immediate deletion, we will inform you of the applicable retention period and restrict processing to compliance purposes only.

Your rights

Depending on your jurisdiction you have the right to: access a copy of your personal data; correct inaccurate data; erase data where no legal obligation requires its retention; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our Data Protection Officer at the address below. We will respond within 30 calendar days. If you are unsatisfied with our response, you have the right to lodge a complaint with your national data-protection supervisory authority.

Contact our Data Protection Officer

Data Protection Officer, Creditly Technologies S.L., Calle de Serrano 00, 28001 Madrid, Spain. Email: dpo@creditly.io. For users in Latin America, correspondence may also be directed to our regional privacy team at: privacy-latam@creditly.io.

This policy is governed by Regulation (EU) 2016/679 (GDPR) in European markets and by applicable national data-protection legislation in Latin American markets. Any conflict between this policy and mandatory local law will be resolved in favour of the stricter standard.