Privacy Policy

1. Who is responsible

LoanShark is responsible for the personal information described here and follows the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

LoanShark. Email noreply@firstwish.ca.

2. What we collect

• Account details: name, email address, phone number and a password (stored only as a one-way hash).
• Application details: date of birth, address, employment and income details, the loan you want, and descriptions and photos of the items you offer as security.
• Identity and ownership documents you upload: government-issued photo ID, proof of address, proof of ownership or purchase receipts.
• Loan records: agreements, payment history, notices and our notes about your file.
• Technical data: IP address and basic request logs, used to secure the website and limit abuse. We use only the cookies needed to keep you signed in.

3. Why we collect it

• To decide whether to lend, set the terms, and confirm who you are and that the items are yours.
• To prepare, sign and administer your loan, collect payments and give notices.
• To meet legal duties, including record keeping, anti-fraud and anti-money-laundering requirements and the rules for secured lenders.
• To contact you about your application or loan.

We do not sell your information and we do not use it for advertising.

4. Consent

We ask for your consent when you submit an application. You may withdraw consent at any time, but then we may be unable to continue the application or service the loan, and we must still keep records the law requires.

5. Who we share it with

• Our hosting and email providers, who process data for us under their own security commitments.
• Professional advisers such as lawyers and accountants.
• Courts, regulators or police when the law requires it, and the personal property registry when we register our security interest.
• Buyers of pledged items after a lawful default sale (item details only).

6. How long we keep it

Application records and identity documents are kept for the life of the loan and for 7 years after it closes, then securely deleted.

7. How we protect it

Uploaded documents are stored outside the public part of the website and are only visible to you and our staff. Access is limited to people who need it to do their work, sessions expire, passwords are hashed, and the connection to this website is encrypted. No system is perfectly secure. If a breach creates a real risk of significant harm to you we will tell you and the Privacy Commissioner of Canada as the law requires.

8. Your rights: access and correction

You can ask to see the personal information we hold about you, ask for a correction if it is wrong, or ask questions about how we handle it. Email us at noreply@firstwish.ca. We will verify your identity and respond within 30 days. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

9. Changes

If we change this policy, the date above changes. For significant changes we will tell account holders by email.

10. Contact

LoanShark. Email noreply@firstwish.ca.