Privacy Policy for Nova Lending Group

This Privacy Policy describes how Nova Lending Group collects, uses, and discloses your personal information when you use our online platform and services. We are committed to protecting your privacy and handling your data transparently and securely. This policy explains our practices in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant legislation.

Information We Collect

We collect information necessary to provide our financial technology services, including Buy Now, Pay Later solutions, payment processing, and related services. The types of information we collect depend on how you interact with our site and services.

Personal Identification Information: This may include your name, date of birth, social security number or other national identification number, driver's license or other government-issued ID details.
Contact Information: Such as your email address, mailing address, and phone number.
Financial and Transaction Information: Details about your bank accounts, payment cards, transaction history, income, expenses, and credit history.
Merchant Information: If you are a merchant using our services, we collect information about your business, including registration details, tax identification number, bank account details, and transaction data.
Usage Data: Information about how you access and use our site and services, including IP address, browser type, operating system, pages viewed, links clicked, and dates and times of access.
Device Information: Information about the device you use to access our services, such as hardware model, operating system and version, unique device identifiers, and mobile network information.
Information from Third Parties: We may receive information about you from third parties, including credit bureaus, identity verification services, financial institutions, payment processors, and publicly available sources, for purposes such as credit assessment, fraud prevention, and legal compliance.

How We Collect Information

We collect information in several ways:

Directly from You: When you apply for our services, create an account, complete forms, communicate with us, or provide information during the course of using our services.
Automatically: As you use our site or services, we automatically collect certain information using cookies, web beacons, and similar technologies.
From Third Parties: We obtain information from external partners and service providers as necessary for the provision and improvement of our services, fraud prevention, and compliance.

Legal Basis for Processing

We process your personal information based on specific legal grounds:

Performance of a Contract: To provide you with the services you requested, such as processing your application for a BNPL plan or facilitating payments.
Legal Obligations: To comply with laws and regulations that apply to us, such as Know Your Customer (KYC), Anti-Money Laundering (AML), and tax requirements.
Legitimate Interests: For our legitimate business interests, provided these are not overridden by your data protection interests. This includes fraud prevention and detection, ensuring network and information security, improving our services, and conducting business analytics.
Consent: Where required by law, we may rely on your explicit consent to process certain types of information, such as for sending you marketing communications. You have the right to withdraw consent at any time.

How We Use Your Information

We use the information we collect for various purposes related to providing and improving our financial technology services:

To provide, operate, and maintain our services.
To process transactions and manage payments.
To assess your eligibility for our services, including creditworthiness.
To verify your identity and prevent fraud and other prohibited activities.
To communicate with you regarding your account, transactions, service updates, and support.
To personalize and improve your experience on our site and services.
To develop new products, services, features, and functionality.
To monitor and analyze usage and trends to improve our services.
To comply with legal obligations and enforce our terms and policies.
For internal business purposes, such as data analysis, audits, and research.

How We Share Your Information

We may share your personal information with third parties in the following circumstances:

With Service Providers: We share information with third-party vendors and service providers who perform services on our behalf, such as payment processing, data analysis, identity verification, credit reporting, IT services, and customer support. These service providers are authorized to use your personal information only as necessary to provide these services to us.
With Financial Partners: We may share information with banks, payment networks, and other financial institutions as required to process transactions and provide financial services.
With Merchants: If you are a consumer using our BNPL service, we share information with the merchant from whom you are making a purchase to facilitate the transaction and manage repayments.
With Credit Bureaus and Fraud Prevention Agencies: To assess credit risk, report repayment history, and prevent fraud.
For Legal Reasons: We may disclose your information if required to do so by law, in response to a legal process, to protect our rights or property, or to protect the safety of our users or the public.
In Connection with Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
With Your Consent: We may share your information with third parties when we have your explicit consent to do so.

We do not sell your personal information to third parties.

Data Retention

We retain your personal information for as long as necessary to provide the services you have requested, to comply with our legal obligations, resolve disputes, and enforce our agreements. The duration for which we retain your data depends on the type of data and the purpose for which it was collected.

Your Data Protection Rights

Under applicable data protection laws, you have certain rights regarding your personal information. These rights may include:

Right to Access: You have the right to request access to the personal information we hold about you.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
Right to Erasure: You have the right to request the deletion of your personal information in certain circumstances.
Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information in certain circumstances.
Right to Object to Processing: You have the right to object to our processing of your personal information in certain circumstances, particularly when processing is based on legitimate interests or for direct marketing.
Right to Data Portability: You have the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller, where technically feasible.
Right to Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the address provided below. We will respond to your request in accordance with applicable law.

Data Security

We implement technical and organizational measures designed to protect your personal information from unauthorized access, use, alteration, and disclosure. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Third-Party Links and Services

Our site may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

International Data Transfers

As a global FinTech company, your information may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. When we transfer your information internationally, we take steps to ensure that your data is protected in accordance with this Privacy Policy and applicable laws, such as using standard contractual clauses or relying on other approved transfer mechanisms.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, and other factors. The updated policy will be posted on our site. We encourage you to review this policy periodically.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, you can contact us by postal mail at:

Nova Lending Group
100 Congress Ave, Suite 1800
Austin, TX 78701
USA