Privacy Policy

1. Data controller

• Data controller under the GDPR: Nova Finance Corp S.L.
• Registered address: Paseo de la Castellana 64, 4th floor, 28046 Madrid, Spain
• Companies Registry: Registro Mercantil de Madrid, Volume 45,123, Folio 87, Sheet M-812345 (placeholder)
• Contact email: contact@novafincorp.com

2. What data we collect

Through the application form, we collect: full name, ID number, email address, phone number, desired loan type, amount and term, as well as details about your employment status and monthly income. Through the contact form, we also collect the subject and content of your message. We may also collect usage data through cookies (see our Cookie Policy).

3. Purpose of processing

• Processing and responding to your loan application or contact request.
• Contacting you to complete the creditworthiness assessment.
• Complying with legal obligations and preventing fraud.
• Improving the Website (analytics, subject to your consent).

4. Legal basis

Processing is based on: (i) taking pre-contractual steps at your request (Article 6(1)(b) GDPR — processing your loan application), (ii) your explicit consent, given by ticking the box on the form (Article 6(1)(a) GDPR), and (iii) compliance with legal obligations related to loan brokerage (Article 6(1)(c) GDPR).

5. Recipients of the data

Your data is stored securely in our database and sent by email, via an external delivery provider (Resend), to the Nova Finance Corp team for internal processing. We do not sell or transfer data to third parties for commercial purposes. Data may be shared with partner financial institutions only where necessary to process your application, and with your knowledge.

6. Retention period

Data is retained for as long as necessary to process your application, and afterwards for the statutory retention periods required to preserve any potential legal claims.

7. Your rights

You may exercise your rights of access, rectification, erasure or objection (as well as, where applicable, data portability and restriction of processing) under Articles 15-21 GDPR at any time, by sending an email to contact@novafincorp.com, specifying the right you wish to exercise and attaching a copy of an identity document.

If you believe that the processing does not comply with applicable regulations, you have the right to file a complaint with the competent data protection supervisory authority (in Spain: the Spanish Data Protection Agency, AEPD).

8. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or alteration.

9. Changes to this policy

This policy may be updated to reflect changes in the law or in our services. The version published on this page always applies.