Privacy Policy

We collect personal information you provide directly to us, information collected automatically when you use our website, and information from third parties where permitted by law.

• Information you provide — your full legal name, date of birth, residential address, Social Security number or ITIN, government-issued ID details, email address, phone number, employment and income details, and bank account and routing numbers.
• Information collected automatically — your IP address, browser type and version, operating system, referring URLs, pages visited on our site, time spent on pages, and device identifiers. We use cookies and similar technologies to collect this data.
• Information from third parties — credit information from credit reporting agencies, identity verification data, and fraud prevention data from third-party services used to assess loan applications.

We use the information we collect for the following purposes:

• Process and assess your loan application — including verifying your identity, reviewing your creditworthiness and making a lending decision.
• Administer and service your loan — including sending payment reminders, processing repayments and managing your account.
• Communicate with you — including responding to enquiries, sending updates about your application or loan, and providing customer support.
• Comply with legal obligations — including anti-money laundering requirements, fraud prevention obligations and regulatory reporting.
• Improve our website and services — including analysing how visitors use our site and identifying areas for improvement.
• Protect the security and integrity of our services — including detecting and preventing fraud, unauthorised access and other harmful activity.

We process your personal information on the following legal grounds:

• Contract — processing is necessary to enter into or perform a loan agreement with you.
• Legal obligation — processing is necessary for us to comply with applicable laws and regulations.
• Legitimate interests — processing is necessary for our legitimate business interests, such as fraud prevention, security and service improvement, where those interests are not overridden by your rights.
• Consent — where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before that point.

We do not sell your personal information to third parties. We may share your information with:

• Credit reporting agencies — to assess your application and, where a loan is approved, to report loan performance as required by law.
• Identity and fraud prevention services — to verify your identity and detect fraudulent applications.
• Payment processors and banking partners — to transfer approved loan funds and collect repayments.
• Service providers — technology, hosting, analytics and communications providers who process data on our behalf under data processing agreements.
• Regulatory authorities and law enforcement — where required or permitted by applicable law, court order or regulatory direction.
• Successor entities — if Micropath Finance is involved in a merger, acquisition or sale of assets, your information may be transferred. We will notify you before it becomes subject to a different privacy policy.

Our website uses cookies and similar tracking technologies — small text files stored on your device when you visit our site.

• Strictly necessary cookies — enable core website functions such as maintaining session state during your application.
• Analytics cookies — help us understand how visitors interact with our site. Data is aggregated and not linked to individual identities.
• Cookie controls — you can manage cookies through your browser settings. Disabling certain cookies may limit website functionality.

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, accounting and reporting requirements.

• Loan application data — retained for a minimum of seven years after the application is closed, in line with applicable financial recordkeeping requirements.
• Website usage data — retained for up to 26 months in analytics systems.
• Contact and support records — retained for three years after the last interaction, unless a longer period is required by law.
• When your information is no longer needed, we securely delete or anonymise it.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, destruction or disclosure.

• Encrypted data transmission — all data is transferred over TLS/HTTPS.
• Access controls — only authorised Micropath Finance personnel can access your data.
• Regular review — our security practices are reviewed on an ongoing basis.
• No absolute guarantee — no internet transmission is completely secure. While we take reasonable steps, we cannot guarantee absolute security. If you suspect unauthorised access, contact us immediately.

Depending on your state of residence, you may have the following rights regarding your personal information:

• Right to know — request details of the personal information we hold about you and how we use it.
• Right to access — request a copy of the personal information we hold.
• Right to correction — request that we correct inaccurate or incomplete information.
• Right to deletion — request that we delete your personal information, subject to our legal obligations.
• Right to opt out of sale — we do not sell personal information, so no opt-out is required.
• Right to non-discrimination — we will not discriminate against you for exercising any of your privacy rights.
• To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by applicable law and may need to verify your identity before processing your request.

Residents of certain U.S. states have additional rights under state privacy law.

• California (CCPA/CPRA) — you have the right to know, delete, correct, opt out of sale or sharing, and limit use of sensitive personal information.
• Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA) — similar rights apply under each state's enacted consumer privacy legislation.
• Other states — if you are a resident of any other state with applicable privacy legislation, contact us and we will respond in accordance with the law of your state.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, contact us immediately and we will take steps to delete it.

Our website may contain links to third-party websites. This Privacy Policy applies only to Micropath Finance. We are not responsible for the privacy practices of linked sites. We encourage you to read the privacy policies of any third-party site before providing personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or applicable law.

• Material changes — we will update the effective date at the top of this page and, where required by law, notify you directly.
• Continued use — your continued use of our website and services after any update constitutes your acknowledgement of the revised policy.
• We encourage you to review this page periodically.

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how we handle your personal information, please contact us.

Micropath Finance — Privacy Enquiries. You may use the contact form on our Contact page or write to us at the address provided in your loan agreement. We will respond within the timeframe required by applicable law.

Effective date: June 2025.