Privacy Policy

1. Scope and Application

This Privacy Policy applies to LendX Financial Inc. ("LendX," "we," "us," or "our"), a federally incorporated Canadian company operating at lendxfinancial.com. It governs all personal information collected through our website, mobile interfaces, loan application forms, credit report requests, and investor marketplace.

This policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA), S.C. 2000, c. 5, and applicable provincial privacy legislation. By using LendX's services, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Identity information: Full legal name, date of birth, government ID type and number.
• Contact information: Email address, phone number, mailing address, province of residence.
• Financial information: Employment status, income, bank account details (for EFT disbursement and repayment), loan purpose.
• Investor information: Investment preferences, accredited investor status (if applicable), bank account details for marketplace participation.
• Communications: Any messages, emails, or support requests you send to us.

2.2 Information Collected Automatically

• Device and browser data: IP address, browser type and version, operating system, referring URLs, pages viewed, time on site.
• Usage data: Calculator interactions, form completion rates, session duration, click patterns.
• Cookies and local storage: Session identifiers, preference settings, form progress (see Section 9).

2.3 Information from Third Parties

• Credit bureau data: Soft credit inquiry results from TransUnion or Equifax Canada (see Section 5).
• Verification services: Identity verification data from KYC/AML service providers.
• Banking verification: Bank account verification data (read-only access for Interac confirmation).

3. How We Use Your Information

We use personal information only for the purposes for which it was collected or to which you have consented:

• Evaluating loan applications and determining creditworthiness.
• Disbursing loan funds via Interac e-Transfer® to your bank account.
• Processing repayments via Electronic Funds Transfer (EFT).
• Providing free credit report access and monitoring alerts.
• Managing investor marketplace accounts and P2P loan participation.
• Sending transactional communications: application status, payment reminders, account notices.
• Complying with legal and regulatory obligations including identity verification, anti-money laundering (AML), and know-your-customer (KYC) requirements.
• Fraud detection and prevention.
• Improving our platform through aggregated, anonymized analytics.
• Responding to your inquiries and providing customer support.

We do not use your information for:

• Selling or renting personal information to data brokers or marketers.
• Targeted advertising beyond our own platform communications.
• Profiling for purposes unrelated to your direct use of LendX services.

4. Disclosure to Third Parties

LendX does not sell personal information. We may share information with the following categories of trusted service providers solely to operate our platform:

• Payment processors: For Interac e-Transfer® disbursement and EFT repayment processing.
• Credit bureaus: TransUnion and/or Equifax Canada for soft and (with your consent) hard credit inquiries.
• Identity verification: KYC/AML compliance service providers.
• Legal counsel: NEO Legal Services Professional Corporation, for collections, contract enforcement, and regulatory compliance. NEO operates under strict confidentiality obligations.
• Email delivery: Transactional email service providers (e.g. Resend) for application and account notifications.
• Cloud infrastructure: Vercel Inc. for hosting and serverless function execution. Data is processed in accordance with their privacy terms.

All third-party service providers are required by contract to protect personal information at a standard at least equivalent to LendX's obligations under PIPEDA.

We may also disclose personal information when legally required: in response to a valid court order, government investigation, regulatory request, or to prevent fraud or imminent harm.

5. Credit Inquiries

Soft credit inquiry (rate check / application): When you check your rate or submit a loan application, LendX performs a soft credit inquiry with TransUnion and/or Equifax Canada. A soft inquiry does not appear on your credit report and has no effect on your credit score.

Hard credit inquiry (loan agreement signing): A hard credit inquiry — which does appear on your credit report — is only performed with your explicit written consent, and only at the stage when you are presented with a loan agreement for signing. You will be clearly notified before any hard inquiry is initiated.

Free credit report: When you request your free credit report through LendX, we access your credit data solely for the purpose of displaying it to you. This data is not stored beyond the session or used for LendX's own credit decisioning without separate consent.

6. Data Security

LendX implements industry-standard technical and organizational security measures to protect personal information from unauthorized access, use, disclosure, alteration, or destruction:

• TLS 1.2+ encryption for all data transmitted between your browser and our servers.
• Encryption at rest for sensitive personal and financial data.
• Role-based access controls limiting internal data access to staff with a legitimate need.
• Secure, SOC 2-compliant cloud infrastructure (Vercel).
• Regular security assessments and penetration testing of the loan platform.
• Incident response plan to detect, contain, and report data breaches within 72 hours where required by law.

No system is completely secure. If you believe your account has been compromised, contact us immediately at hello@lendxfinancial.com.

7. Retention and Deletion

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

• Active borrower accounts: For the duration of the loan agreement plus 7 years (to comply with provincial financial record-keeping requirements).
• Declined applications: Up to 2 years for fraud prevention and regulatory compliance.
• Credit report requests: Session-only; not retained after session ends unless you create an account.
• Investor accounts: For the duration of marketplace participation plus 7 years.
• Marketing communications: Until you withdraw consent.

You may request deletion of your personal information at any time (see Section 8). Certain information may be retained beyond your request where required by law or to protect LendX's legal interests (e.g. outstanding loan obligations, fraud investigations).

8. Your Rights Under PIPEDA

Under PIPEDA and applicable provincial privacy laws, you have the following rights with respect to your personal information held by LendX:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request correction of inaccurate personal information.
• Right to Withdraw Consent: You may withdraw consent to our use of your information for non-essential purposes (e.g. marketing) at any time. Note: withdrawal of consent for core purposes (e.g. repayment processing) may require closure of your account.
• Right to Deletion: You may request deletion of your personal information, subject to legal retention requirements.
• Right to Complain: If you believe LendX has handled your personal information improperly, you may file a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, contact our Privacy Officer at the address in Section 12.

9. Cookies and Tracking

LendX uses the following types of cookies and client-side storage:

• Essential cookies: Session management, form progress saving (localStorage), CSRF protection. Required for platform functionality — cannot be disabled.
• Analytics cookies: Aggregated, anonymized usage analytics to improve calculator and form flows. IP addresses are anonymized.

LendX does not use third-party advertising cookies, cross-site tracking pixels, or behavioural advertising technology. You may disable non-essential cookies through your browser settings without affecting core platform functionality.

10. Minors

LendX's products and services are available only to individuals 18 years of age or older (or the age of majority in their province of residence, whichever is higher). We do not knowingly collect personal information from individuals under the age of majority. If you believe a minor has submitted personal information to LendX, contact us immediately and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Send an email notification to registered account holders.
• Display a notice on the LendX platform for 30 days following the change.

Continued use of LendX's services after a policy update constitutes acceptance of the revised policy.

12. Contact Our Privacy Officer