Table of Contents
1. Data Controller
The data controller for your personal data is:
- Company: PrêtGo Services Financiers Inc.
- Head Office: 12 Rue de la Finance, 75001 Paris, France
- SIREN: 123 456 789
- Email: dpo@capretgo.com
- Phone: +1 514 900 1938
- Supervisory Authority: CNIL – www.cnil.fr
2. Data Collected
We collect the following categories of data depending on your interactions with our services:
| Category | Data Concerned | Source |
|---|---|---|
| Identity | Name, first name, date of birth, nationality | Application form |
| Contact | Email address, phone number, postal address | Contact/Application form |
| Financial Situation | Income, expenses, professional situation, financing project | Loan application form |
| Navigation | IP address, pages visited, session duration, browser | Cookies and trackers |
| Communications | Email, chat and phone history | Interactions with our advisors |
We do not collect sensitive data within the meaning of Article 9 of the PIPEDA (racial origin, political opinions, health data, etc.) without your explicit consent.
3. Purposes and Legal Bases
| Purpose | Legal Basis |
|---|---|
| Processing your loan application | Contract performance (Art. 6.1.b PIPEDA) |
| Evaluating your creditworthiness | Legal obligation (Art. 6.1.c PIPEDA) |
| Sending business communications | Consent (Art. 6.1.a PIPEDA) |
| Improving our services | Legitimate interest (Art. 6.1.f PIPEDA) |
| Fraud prevention and regulatory compliance | Legal obligation (Art. 6.1.c PIPEDA) |
| Statistics and analytics | Consent or legitimate interest (Art. 6.1.f PIPEDA) |
4. Retention Period
- Loan application data: 5 years from the end of the contractual relationship
- Contact data: 3 years from last contact
- Navigation data: Maximum 13 months
- Identity documents: Duration of contract + 5 years
- Anti-money laundering data: 5 years after the end of the business relationship
After these periods expire, your data is permanently deleted or anonymized.
5. Data Recipients
Your personal data may be disclosed to the following categories of recipients:
- Our Financial Partners: banks and credit institutions for processing your application
- Technical Providers: hosting, CRM, email tools (bound by PIPEDA data processing agreements)
- Competent Authorities: AMF, Bank of Canada, courts on request
- Credit Bureaus: consultation of dossiers de crédit canadiens files from Banque du Canada
We never sell your data to third parties for commercial purposes.
6. Your Rights
In accordance with the PIPEDA, you have the following rights regarding your personal data:
Obtain a copy of all data we hold about you.
Correct any inaccurate or incomplete data about you.
Request deletion of your data under PIPEDA conditions.
Receive your data in a structured, machine-readable format.
Object to processing of your data, particularly for marketing purposes.
Request temporary suspension of processing your data.
To exercise these rights, submit your request by email to dpo@capretgo.com or by mail to our head office with a copy of your ID. We respond within a maximum of 30 days.
If you are dissatisfied, you have the right to file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr/fr/plaintes.
7. Data Security
PrêtGo implements appropriate technical and organizational measures to protect your data against unauthorized access, loss or destruction:
- TLS 1.3 encryption of all communications
- Encryption of data at rest (AES-256)
- Two-factor authentication for internal access
- Logging and monitoring of data access
- Regular security audits and penetration testing
- Mandatory data protection training for employees
8. Cookies and Trackers
Our website uses cookies and trackers. For detailed information about their use and managing your preferences, consult our Cookie Policy.
9. Transfers Outside the EU
Some of our technical providers may process your data outside the Canada (EEA). In such cases, we ensure that appropriate safeguards are in place, in particular:
- Contractual clauses compliant with PIPEDA requirements
- Adequacy decisions for countries recognized as offering sufficient protection
10. Contact & Data Protection Officer
Our Data Protection Officer is available to answer any questions about the processing of your personal data:
- Email: dpo@capretgo.com
- Mail: PrêtGo Financial Services – DPO, 12 Rue de la Finance, 75001 Paris
This privacy policy may be modified at any time. In case of substantial changes, we will inform you by email or through a prominent notice on our website.