Privacy Policy

Data controller

The controller of personal data processed in connection with our services is PRESTIGE CREDIT., registered in Ireland under company number , with its registered office at Suite 4, Plaza 256, Blanchardstown Corporate Park 2, Ballycollin, Dublin 15, Ireland.

What we collect

To process your application and service your loan, we collect:

• Identification data: name, date of birth, photo ID details.
• Contact data: postal address, email address, telephone number.
• Financial data: income, employment status, debt service ratio, credit-file information.
• Loan data: requested amount, term, purpose, repayment history.
• Technical data: IP address, browser type, device identifier, session timestamps.

Legal basis

We process your personal data on one or more of the following legal bases under Article 6 of the GDPR:

• Contractual necessity: processing required to assess your application and to perform the credit agreement.
• Legal obligation: processing required by anti-money-laundering, sanctions screening, and supervisory regulations.
• Legitimate interests: processing required to prevent fraud and to defend legal claims.
• Consent: for marketing communications, where given.

Purposes of processing

We process your personal data exclusively for the purposes set out below: assessing your application, executing your credit agreement, complying with regulatory obligations, preventing fraud and money laundering, defending legal claims, and (with your consent) sending marketing communications.

Retention periods

We retain your personal data only for as long as necessary for the relevant purpose:

• Application data for declined applications: two years.
• Loan and customer-relationship data: ten years after final repayment, as required by Irish anti-money-laundering law.
• Marketing-consent records: three years from the last interaction.
• Anonymised analytics: indefinitely.

Sharing & recipients

Your personal data is never sold. It is shared, where necessary, with: regulated credit-reference agencies, our external auditors, our regulators, and qualified legal counsel. All recipients are bound by appropriate confidentiality obligations.

Security measures

We protect your personal data with bank-grade controls: 256-bit SSL encryption in transit, AES-256 encryption at rest, ISO 27001-aligned access controls, multi-factor authentication for all internal staff, and annual penetration testing by an external party.

Your rights

Under the GDPR, you have the right to: access your data, rectify inaccurate data, request erasure under specific conditions, restrict processing, port your data to another controller, object to processing on legitimate-interests grounds, and withdraw consent where consent is the basis.

To exercise any of these rights, contact our Data Protection Officer (see Section 10).

Cookies & analytics

Our website uses strictly necessary cookies to support session security and load balancing. We use anonymised analytics to understand site usage. We do not use third-party advertising cookies. You can manage your cookie preferences via the banner displayed on your first visit.

Contact our DPO

To exercise any of your rights, raise a concern, or request additional information, contact our Data Protection Officer:

• Email: dpo@prestigecredit.eu
• Postal: Data Protection Officer, Prestige Credit, Suite 4, Plaza 256, Blanchardstown Corporate Park 2, Ballycollin, Dublin 15, Ireland

You also have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.