Data we collect
When you create a Creditly account we collect identification data (full name, date of birth, national ID or passport number), contact data (email address, mobile number, postal address), and financial data (declared income, employment type, existing credit obligations).
When you use our matching service we collect device and usage data automatically: IP address, browser type, operating system, pages visited, and the date and time of each request. We use this data solely to operate, secure, and improve the platform. We do not sell device or behavioural data to third parties.
How we use your data
We use your data to match your profile against our lender network (lawful basis: performance of a contract), to comply with anti-money-laundering and know-your-customer obligations (legal obligation), to prevent fraud and maintain platform security (legitimate interest), and — with your separate consent — to send you product updates and personalised financial tips by email.
We perform a soft credit search to retrieve a summary of your credit history. This search is visible only to you and does not affect your credit score or appear on searches made by lenders.
Data retention
We retain your account data for the duration of your relationship with Creditly and for seven years thereafter to meet statutory recordkeeping obligations. Application-level data shared with lenders is subject to each lender's own retention schedule, as notified in their privacy notice.
You may request deletion of your Creditly account at any time. Where a legal obligation prevents immediate deletion, we will inform you of the applicable retention period and restrict processing to compliance purposes only.
Your rights
Depending on your jurisdiction you have the right to: access a copy of your personal data; correct inaccurate data; erase data where no legal obligation requires its retention; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact our Data Protection Officer at the address below. We will respond within 30 calendar days. If you are unsatisfied with our response, you have the right to lodge a complaint with your national data-protection supervisory authority.
Contact our Data Protection Officer
Data Protection Officer, Creditly Technologies S.L., Calle de Serrano 00, 28001 Madrid, Spain. Email: dpo@creditly.io. For users in Latin America, correspondence may also be directed to our regional privacy team at: privacy-latam@creditly.io.
This policy is governed by Regulation (EU) 2016/679 (GDPR) in European markets and by applicable national data-protection legislation in Latin American markets. Any conflict between this policy and mandatory local law will be resolved in favour of the stricter standard.