Crezu.lk is a trading name of Fininity Ltd., which is registered in Estonia (Company no. 14523902), Registered Office; Tartu mnt 52-166, 10115 Tallinn, Estonia.
We at Crezu are aware of how important your privacy is. In order to keep your information confidential, we have implemented measures to ensure that any personal information we obtain from you is processed and maintained in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, other relevant laws and issuances by the National Privacy Commission, any other legislation protecting the fundamental rights and freedoms of individuals, and good data handling practices. In this statement, we detail the type of information that we and Crezu may retain about you, our customer. It will also include details about how we obtain, process, and protect any information we may have
We, along with our panel of lenders and credit brokers, will regularly keep you informed about your loan application process. Unless you explicitly state otherwise, we may contact you via telephone, SMS, post, email, and/or automated message.
Our use of your personal data will always have a lawful basis. We will rely upon various lawful bases to process your personal data.
Once you have submitted your loan application on Crezu.lk, you provide your consent to be contacted by Fininity Ltd along with our panel of Loan Providers, or Credit Brokers in relation to your online loan application. We process your personal data on that basis.
If you wish to withdraw your consent of the processing of your personal data for marketing purposes, you can do so at any time. Simply click the “Unsubscribe” option in any marketing SMS or email we or any associated third party send to you. You can also withdraw your consent by emailing our Data Protection Officer at firstname.lastname@example.org. Withdrawing your previous consent to our processing your personal data will not have any effect on the lawfulness of the processing we carried out before your consent was withdrawn.
When you submit your personal data through a loan application, we will process your data in order to fulfill our obligation to provide a loan quote to you. Fininity Ltd and our panel of loan providers and/or credit brokers will contact you with information regarding your loan application quote.
We maintain a legitimate interest in processing your data, which is to share your application with our panel of loan providers and/or credit brokers in order to obtain the loan quote you applied for.
We will contact the customer by telephone, SMS, post, email and/or automated message in order to provide information, loan application alerts, and notices from our associate companies unless otherwise requested by the customer. Third parties may also give us personal information/date, enabling us to offer products to identified potential customers who have expressed interest. We check any information/data obtained by third parties for accuracy. We will also endeavor to confirm your information with you from time to time.
If you choose to allow it, we may send push notifications to your mobile device or web browser. These push notifications may include marketing messages from us or from third-parties. You can change your push notification settings at any time in your browser’s or mobile device’s notification settings.
You are responsible for ensuring that any personal information/data we retain from you is correct and up-to-date. Contact us as soon as possible if you need to update or correct your information.
If you ask us a question about our services or choose to send an email to email@example.com, we may also collect some of the above personal information from you in order to best respond to your inquiry.
What Information We Collect
When you apply for a loan product online, we collect personal information from you to obtain quotes for the loan. As we provide the services to you, we may also store information about how you use our Website. We may store information about the pages viewed, the website which referred you to our Website, changes you’ve made to personal information provided to us, details of the quotes you request, and the contents of your applications, together with details of your financial information, including bank account or employer details.
We must collect personal information from you in order to provide you with a suitable loan quote. When you request a loan quote, you give your explicit consent to that information being processed by us along with third-party providers, such as Loan Providers and Credit Brokers.
We store the information you provide. We may use that information to pre-populate fields on the Website and make it easier for you to use the Website on future visits.
We will not keep your information for longer than is permitted by law. We will periodically review your information to ensure that.
Keeping your information secure is of utmost importance to us. While no internet data transmission can be perfectly secure, we do our best to protect the information you disclose to us. However, we cannot and will not guarantee or warrant the security of any data you provide to us. You do so at your own risk. By using our Website, you accept the inherent and inevitable risks of providing personal data online. You agree that you will not hold us responsible for any security breach.
We may use your personal information:
By using our Website, you agree that we and (with your consent) other third parties we trust will be permitted to contact you via email, SMS, telephone, post, and/or automated message or by other electronic means in relation to services, products and other promotions that may be of interest to you.
At any time when you provide us with personal data/information, when necessary we will seek your consent and/or we will give you an opportunity to tell us you do not consent to the sharing of your information for marketing purposes and other uses. Unless you indicate otherwise, you consent to such use.
By filling out and submitting a loan application, you hereby consent to the disclosure of your personal information to the following parties:
Where permitted by privacy and data protection law, we may also be compelled to access your account and/or disclose information about you (including electronic identifiers such as IP addresses):
Some of the providers on our panel may use your personal information in order to assess your situation, (including information about third parties named on your application) and verify the accuracy of any information you provide before giving you a quote. Some providers may perform checks with fraud prevention and credit reference agencies. They may check both your private and public data this way. Some providers may carry out checks against data they already retain on you, such as data from existing financial products, account information, or information from previous transactions in order to decide your loan amount. If providers carry out these searches, your credit report will include a record of the search. Some providers may check education sources to gather information about your previous education as well.
This allows providers to verify any information you provide during the quote process. It also aids in detecting fraudulent loans. These routine checks are common in obtaining loan quotes from other sources as well.
You have a number of rights under the DPA including:
Right to be informed − Crezu provides all customers with this privacy statement to provide transparent and clear information as to arrangements for the collection, control and processing of personal data.
Right of Access − Copies of personal data held can be requested under an access request and will be met in the 30 day legislative standard ordinarily free of charge. Any extension to these requirements will be advised on the basis of the nature of the request but will be by exception and subject to senior management scrutiny, please see contact us section for further detail.
Right to Rectification − In the event we hold inaccurate data please advise us of the correct information and records will be updated within 72 hours and confirmation provided accordingly (Subject to satisfactory verification of your identity).
Right to Restriction of Processing − Data processing will be restricted whilst any claim of accuracy is being contested by you, or you have challenged the legal basis or legitimate grounds for processing for a specific purpose and to establish, exercise or defend legal claim at your request.
Right to Object − You can object to Crezu processing on the basis this is contrary to your rights and freedoms, any objection relating to direct marketing will be acted upon within 48 hours, other objections will be treated as a complaint and assessed against our documented legal basis.
Right to Erasure − Commonly known as the right to be forgotten, Crezu will adhere to your request ordinarily within 72 hours where legal basis is solely or partially established as consent, any data required for legal, regulatory or legitimate interests maybe maintained in accordance with documented retention schedules. However our team will confirm and discuss your request to ensure your rights and freedoms are observed at all times.
Right to Data Portability − You have the right to receive the personal data that you provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller in a timely manner, generally 72 hours unless evidenced to be unduly excessive or unreasonable.
Rights in relation to Automated Decision Making and Profiling – You have a right to object to automated decision making, to express your point of view, ask for human intervention, and to be provided with an explanation of the decision with your option to challenge it.
Crezu has established robust policy and procedural requirements to enable your rights as a data subject to be adhered with, however where this is not possible for the reasons outlined we confirm the detail.
In relation to all of these rights, please write to or contact us at the address below. Please note that we will need to verify your identity.
Depending on why you provided us your personal data, the amount of time we retain it for will vary:
You are free to opt-out of future contact from Crezu whenever you wish. All of our marketing messages include an opt-out or unsubscribe link. Please allow up to 48 hours for us to process your request.
If you wish to assert your right to be forgotten and request the removal or deletion of your personal information, please visit https://unsub.crezu.net/gdpr or email firstname.lastname@example.org. We will also ensure that our marketing partners are informed of your request.
We strive to ensure that our service to you is always satisfactory. However, should you wish to submit a formal complaint, please email email@example.com.