> DRAFT TEMPLATE - not reviewed by an attorney. Replace this text with counsel-approved wording before launch.
Privacy Notice
_Last updated: [date]_
This notice explains how Kreditex collects, uses, shares and protects personal information. It is intended to follow the structure of the Gramm-Leach-Bliley Act (GLBA) privacy notice and applicable state privacy laws, and must be confirmed by counsel.
What we collect
- Identifiers and contact details (name, address, email, phone, date of birth)
- Financial information (income, employment, bank statements, debts)
- Government identifiers such as a Social Security Number or EIN, only when needed and stored encrypted
- Documents you upload, and records of your communications with us
- Technical data such as IP address and device information for security
How we use it
To evaluate and service your application, verify identity, prevent fraud, comply with law (including anti-money-laundering and sanctions laws) and operate our business.
Sharing
We do not sell your personal information. We share it with service providers that help us operate (for example identity verification and credit reporting agencies, payment and hosting providers), with regulators and as required by law. [Counsel: complete the GLBA sharing table and opt-out rights.]
Your choices and rights
You can download your data and request deletion in your profile. Depending on your state (for example California, Colorado, Connecticut, Virginia and others) you may have additional rights to know, delete, correct and opt out. [Counsel: complete per state.]
Security
We use encryption, access controls and logging, and require staff to authenticate with strong credentials. No system is perfectly secure.
Contact
Privacy questions: see the contact details in the footer.