Privacy policy

1. Data controller

The controller of the data collected through this website is Express Finance, 724 Chaussée de Wavre, 1040 Bruxelles, Belgique — support@expresssfinance.com.

2. Data collected

As part of a financing application, we collect:

• Identity and contact details: first name, last name, postal address, e-mail address, phone number;
• Employment details: occupation, employment status, declared monthly income;
• Project: type of financing, amount, term, project description;
• Documents: identity document and, where applicable, proof of address and proof of income;
• Technical data: hashed fingerprint of the IP address and browser used (security and fraud prevention), and timestamps of consents.

No sensitive data within the meaning of the GDPR (health, opinions, affiliations) is requested.

3. Purposes and legal bases

• Assessment and processing of your financing application (pre-contractual steps taken at your request);
• Contact and follow-up of your application by e-mail, phone or WhatsApp;
• Website security and the prevention of abuse and fraud (legitimate interest);
• Compliance with our legal and regulatory obligations.

4. Recipients

Your data is accessible only to authorised staff of Express Finance and to our technical processors (hosting, database and secure storage). Where structuring a financing arrangement requires it, strictly necessary information may be passed to a partner institution, after you have been informed. No data is sold or passed on for commercial purposes.

5. Retention period

Application data is kept for the duration of the assessment and then, if no contract is entered into, for a maximum of 12 months before being deleted or anonymised. If financing is granted, it is kept for the duration of the contract and for the applicable statutory retention period (10 years for accounting records).

6. Security

Data is encrypted in transit (HTTPS) and stored in a database protected by strict access rules; documents are held in a private storage space accessible only via temporary links generated for authorised staff.

7. Your rights

Under the GDPR, you have the right to access, rectify, erase and port your data, to restrict or object to its processing, and to withdraw your consent at any time. To exercise these rights, contact support@expresssfinance.com. You may also lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be) or the competent authority in your country of residence.

8. Transfers outside the European Union

Data is hosted in the European Union. Should a transfer outside the EU become necessary (for example, to a technical processor), it would be covered by appropriate safeguards (European Commission standard contractual clauses).

9. Cookies

The use of cookies is described in our cookie policy.