Introduction and Regulatory Compliance
NEXUS FINANCE is dedicated to maintaining the privacy and security of your data. This policy outlines our stringent data processing activities and reflects our commitment to compliance with global privacy standards, including the General Data Protection Regulation (GDPR) (for EEA residents) and the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) (for California residents). By using our Services, you consent to the data practices described herein.
1. Categories of Personal Data Collected
We collect and have collected the following categories of personal data in the last twelve (12) months:
- Identifiers and Contact Information: This includes your full name, postal address, telephone number, email address, Internet Protocol (IP) address, Social Security Number (SSN), driver’s license number, passport details, and unique personal identifiers. This data is mandatory for compliance with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
- Financial and Account Information: This category covers bank account numbers, credit card details, income statements, pay stubs, employment status, detailed credit reports, transaction history with us and other institutions, and investment history.
- Commercial Information: Records of products or services purchased, obtained, or considered, including specific loan types, credit card tiers, and historical spending patterns.
- Internet Activity and Device Information: Includes browsing history, search history, information regarding a consumer’s interaction with our website, application (mobile), operating system, browser type, and device identifiers.
- Geolocation Data: Precise location data (when using our mobile app with permissions enabled) and generalized location (based on IP address) to prevent fraud and ensure regional service availability.
2. Purposes and Legal Basis for Data Processing
We process your data based on the following legal grounds (per GDPR) and business purposes (per CCPA):
- Contractual Necessity: To execute and fulfill the services requested by you, such as processing a loan application, managing your credit account, and facilitating payment transactions.
- Legal Obligation: To comply with mandatory legal requirements, including financial regulatory reporting, tax obligations, KYC/AML checks, and responding to judicial processes.
- Legitimate Interests: For core operational functions, such as security and fraud detection, improving our Services, internal reporting, marketing our services to you, and enhancing the customer experience, provided your rights and freedoms are not overridden.
- Consent: We rely on your explicit consent for specific activities, primarily non-essential data collection via marketing cookies and sending non-essential promotional communications.
3. Data Sharing and Disclosure (Categories of Recipients)
We may disclose your personal data to the following third parties for a business purpose:
- Regulatory Bodies & Legal Authorities: To governmental entities, law enforcement, and courts as required by law or to protect our legal rights.
- Credit Bureaus and Reporting Agencies: To process applications and report account status, a fundamental activity for responsible lending.
- Service Providers & Vendors: To technology partners, cloud hosting providers, payment processors, and marketing agencies who assist in operating our business under strict confidentiality agreements.
- Financial Partners: To affiliated banks, underwriters, or financial institutions involved in securing or funding the product you have applied for.
- Business Transferees: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
Please Note: NEXUS FINANCE does not sell your personal data in exchange for monetary compensation. However, we may «share» certain data (as defined by CCPA/CPRA) for the purpose of cross-context behavioral advertising. You have the right to opt-out of this sharing.
4. Your Global Privacy Rights (GDPR & CCPA/CPRA)
You have the following comprehensive rights regarding your personal data:
- Right to Access and Know (GDPR/CCPA): The right to request confirmation of whether we process your data, and to obtain a copy of the specific pieces of personal data we have collected about you over the past 12 months.
- Right to Rectification and Correction (GDPR/CCPA): The right to demand correction of inaccurate, incomplete, or outdated personal data we hold about you.
- Right to Erasure and Deletion (GDPR/CCPA): The right to request the permanent deletion of your personal data, subject to certain exceptions (e.g., maintaining records required by financial regulations, fraud prevention).
- Right to Object and Restrict Processing (GDPR): The right to object to processing based on legitimate interests and the right to request restriction of processing in certain circumstances.
- Right to Opt-Out of Sale/Sharing (CCPA/CPRA): The right to direct us not to sell or share your personal information for the purpose of targeted advertising.
- Right to Non-Discrimination (CCPA): The right not to be penalized for exercising any of your privacy rights.
Exercising Your Rights: To submit a request to exercise any of the rights listed above, please use the dedicated Legal & Compliance contact information provided in the «Contact Us» section. We will acknowledge receipt of your request and provide a substantive response within the legally required timeframe.