Privacy Policy

1. Personal information protection officer

In compliance with Law 25, Crédit Instant has appointed a personal information protection officer. You may contact them with any question regarding this policy or to exercise your rights:

• OfficerBrandon Gaudreault
• Emailinfo@créditinstant.com
• Phone450 776-4892

2. Personal information we collect

Depending on your interaction with us, we may collect the following categories of information:

2.1 Identification and contact details

• First name, last name, date of birth
• Residential address, email, phone number
• Social insurance number (if required for identity verification)
• Government-issued ID

2.2 Financial information

• Banking data obtained via Instant Bank Verification (IBV): transaction history, balances, direct deposits
• Stated income, employer, pay frequency
• Co-borrower information (with their explicit consent)
• Loan request details (amount, repayment frequency)

2.3 Browsing data

• IP address, browser type, operating system
• Pages visited, visit duration, referral source
• Cookies (see section 9)

We do not consult your credit file. Our assessment relies on IBV. No inquiry to Equifax or TransUnion, and no reporting to those agencies.

3. Purposes of collection

Your personal information is used strictly for the following purposes:

• Loan application assessmentverify your identity, eligibility and repayment capacity
• Contract executioncontract preparation, Interac disbursement, pre-authorized debits
• Customer serviceanswer your questions, manage renewals, support during difficulty
• Legal complianceQuebec Consumer Protection Act, Criminal Code (interest rates), tax obligations and anti-money-laundering
• Service improvementanonymous statistical analysis of site usage
• Marketing (with your consent)promotional communications you can unsubscribe from at any time

No information is used for undisclosed purposes without obtaining your prior explicit consent.

4. Retention period

We retain your information only for as long as necessary to fulfill the stated purposes, in accordance with applicable legal obligations:

• Refused or abandoned applications24 months following the application
• Approved loan files7 years after file closure (tax and accounting compliance)
• Browsing dataup to 26 months (depending on cookie category)
• Marketing communicationsuntil consent withdrawal, then 12 months for unsubscribe processing

At the end of these periods, the information is destroyed or irreversibly anonymized.

5. Third parties we share information with

We share certain information with carefully selected service providers, only to the extent necessary for them to deliver their services:

• Finx (loan application management)processing your application, contracts, pre-authorized payments. Platform located in Canada.
• Plaid / Inverite or other IBV providerInstant Bank Verification. The provider only transmits data relevant to assessing your application.
• Interacdisbursement and bank withdrawals.
• Site host (Hostinger)technical hosting of public pages.
• Google (Google Ads)advertising conversion measurement, only with your consent.
• TikTokadvertising campaign measurement, only with your consent.
• Government authoritiesonly when required by law (court order, tax obligations, anti-money-laundering).

We have never sold and do not sell your personal information.

6. Transfer outside Quebec

Some of our service providers operate outside Quebec, primarily in the United States (Google, TikTok, Hostinger). When a transfer outside Quebec takes place, we conduct a privacy impact assessment in accordance with article 17 of Law 25 and ensure that the recipient provides equivalent protection.

You can contact us for the details of this assessment for a specific provider.

7. Automated decisions (IBV)

To assess your file quickly, we use a partially automated process based on Instant Bank Verification (IBV):

• IBV analyzes your banking activity over the past 90 days to assess your financial stability
• An internal score is automatically calculated based on criteria such as deposit regularity, recent NSF level, and apparent debt ratio
• A human review systematically validates every final approval or denial decision

You have the right:

• To be informed that your application was processed using automated treatment
• To know the main factors that led to the decision
• To have the personal information used corrected
• To submit observations to a member of our team

8. Your rights under Law 25

You have the following rights regarding your personal information:

• Right of accessobtain a copy of the information we hold about you
• Right of rectificationhave inaccurate, incomplete or ambiguous information corrected
• Right to deletionrequest the destruction of information whose retention is no longer necessary
• Right to withdraw consentwithdraw your consent to the use of your information at any time (except where law requires retention)
• Right to portabilityreceive your information in a structured, commonly used technological format, or have it transmitted to a third party
• Right to de-indexationrequest that your information no longer be accessible via search engines

To exercise one of these rights, write to the privacy officer (see section 1). We will process your request within 30 days. In case of refusal, we will inform you of the available remedies.

9. Cookies

Our site uses cookies to function correctly and (with your consent) to measure the effectiveness of our communications. You can manage your preferences at any time by clicking the cookie icon at the bottom-left of every page.

9.1 Essential cookies (always active)

Required for the site to function. No consent required.

• cc_consent: stores your consent choices (Crédit Instant, 13 months)
• Session and cache cookies for site performance (Crédit Instant / host, session duration or up to 24 h)

9.2 Analytics cookies (consent required)

Audience measurement to understand how the site is used and improve it. Aggregated and pseudonymized data.

• No analytics provider is currently active. This section will be updated if Google Analytics or an equivalent is deployed.

9.3 Marketing cookies (consent required)

Measuring the effectiveness of our advertising campaigns.

• Google Ads(AW-17951944900): advertising conversion tracking. Cookies: _gcl_au, NID. Maximum duration: 90 days. Provider: Google LLC, United States.
• TikTok Pixel(D306R4RC77U89D72NKO0): TikTok campaign measurement. Cookies: _ttp. Duration: 13 months. Provider: TikTok Pte. Ltd., Singapore.

9.4 How to withdraw or change your consent

• Click the cookie icon (blue circle) at the bottom-left of any page
• Clear cookies in your browser. The banner will appear again on your next visit
• Configure your browser to block cookies (may affect site functionality)

10. Security measures

• Encrypted connections (TLS 1.2+) for all transmissions
• File access restricted to authorized personnel on a need-to-know basis
• Access monitoring and logging of sensitive actions
• Ongoing personnel training on personal information protection
• Regular risk assessment and security testing

11. Privacy incidents

If a privacy incident (loss, unauthorized access, unauthorized disclosure, unauthorized use) presented a risk of serious harm, we would:

• Notify the Commission d'accès à l'information du Québec (CAI) without delay
• Notify affected individuals
• Maintain an incident register
• Take corrective measures to limit harm

12. Policy changes

This policy may be updated to reflect legal or operational changes. The last update date appears at the top of the page. Material changes will be communicated to you via banner or email for active clients.

13. Contact us · CAI complaint

To exercise your rights or ask a question:

• Email: info@créditinstant.com
• Phone: 514-448-6421
• Form: Contact page

If you disagree with our handling: you may file a complaint with the Commission d'accès à l'information du Québec (CAI):

• Website: www.cai.gouv.qc.ca
• Phone: 1-888-528-7741 (toll-free)