1. Information we collect

To provide you with tailored loan and finance products, we collect the following categories of data:

• Personal identifiers – full name, SSN (last 4), date of birth, government ID.
• Contact details – email, phone number, residential address.
• Financial information – income, employment, credit history, bank account details.
• Technical data – IP address, device type, browser, cookies & usage analytics.
• Loan application data – loan amount, purpose, collateral, repayment preferences.

All data is encrypted in transit & at rest.

2. How we use your data

Your information powers our services. We use it for:

• Loan underwriting & eligibility – risk assessment, credit scoring, and decisioning.
• Servicing & communication – account updates, payment reminders, and support.
• Fraud prevention & security – identity verification, transaction monitoring.
• Product improvement – analytics, customer journey, and performance metrics.
• Legal & regulatory compliance – anti-money laundering (AML), tax reporting, etc.

legitimate interest consent-based

3. Sharing & disclosure

We do not sell your personal data. We may share information with:

• Service providers – credit bureaus, payment processors, IT hosting, legal advisors.
• Financial partners – secondary loan purchasers, insurers, and co-lenders.
• Regulatory authorities – when required by law or to protect our rights.
• Analytics & marketing – anonymized data to improve our offerings.

We require all third parties to respect your privacy.

4. Your rights & choices

As a NexusFin customer, you have control over your data. You can:

• Access & review – request a copy of your personal data.
• Rectification – correct inaccurate or incomplete information.
• Deletion – ask for data erasure (subject to legal retention).
• Opt-out – withdraw consent for marketing and non-essential processing.
• Data portability – receive your data in a structured format.

To exercise your rights, contact privacy@nexusfin.com or call +1 (800) 555‑0199

5. Retention & security

We retain your data only as long as necessary for the purposes outlined and to comply with legal obligations.

• Retention periods: 7 years for financial records, 3 years for marketing data, 1 year for analytics.
• Security measures: AES-256 encryption, multi-factor authentication, regular penetration testing.
• Incident response: dedicated team to handle data breaches and notifications.

ISO 27001 certified & SOC2 compliant.

6. Cookies & tracking

We use cookies and similar technologies to enhance your experience and analyze usage.

• Essential cookies – required for login, security, and core functionality.
• Performance cookies – gather anonymous analytics to improve our platform.
• Advertising cookies – limited to retargeting (with your consent).

You can manage your cookie preferences in your browser settings or via our consent tool.

Cookie preferences

7. International transfers

NexusFin operates globally. Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) and Data Privacy Framework compliance.

• Data centers: USA, EU, and Singapore.
• Third-party processors: located in the UK, Canada, and Australia.

SCCs EU-US DPF

8. Children’s privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware of such data, we will take steps to delete it promptly.

If you are a parent or guardian and believe your child has provided us with data, please contact us.

9. Updates to this policy

We may update this Privacy Policy periodically to reflect changes in legal, operational, or regulatory requirements. The most current version will always be available on our website.

• Material changes – we will notify you via email or through your account dashboard.
• Effective date – always shown at the top of this page.

Version history available upon request.