Privacy Policy
This Privacy Policy describes how OnCredit (Pvt) Ltd (the "Service Provider") collects and
uses the personal information you provide to the Service Provider through this website
accessible at: oncredit.lk (the "Website") or by other means. It also describes the choices
available to you regarding our use of your personal information and how you can access
and update this information. By accessing or using the Website, you signify that you have
read this Privacy Policy and expressly consent to our collection, use, disclosure, storage
and protection of your personal information as described in this Privacy Policy.
1. No sale of personal information
Service Provider will not rent or sell your personal information to third parties.
2. Information you provide when applying for loans
When you apply for a loan through the Website, we collect basic information about you
through the registration process to uniquely identify you, perform credit verification and to
confirm with statutory requirements.
When you apply for a loan through the Mobile Application, we collect basic information
about you through the registration process to uniquely identify you, perform credit
verification and confirm with statutory requirements. The Service Provider may conduct a
credit assessment of the Customer
Consists of:
Device information - Service Provider collects information about electronic devices that
Customers use to access and use services on electronic applications , including (but not
limited to), hardware model, operating system and version, software , file name and
version, preferred language, unique device identifier, advertising identifier, serial number
and mobile network information
Location Information - Service Provider collects information about Customer's location
when Customer accesses Service Provider's electronic application or through other means
Customer allows to determine Customer's location.
Contact information - The customer authorizes Service Provider to access the contacts in
the device in order to collect names and contact information from the Customer's contacts
in support of the services Service Provider provides. When using these services,
customers can choose the contact phone numbers of friends and relatives from the
contacts right in the application instead of having to enter them manually.
Diary information - When Customer interacts with Service Provider services, Service
Provider collects server logs, which may include information such as device IP address,
date and time of access, application features or pages viewed , other system performance
and usage errors, the type of browser and third-party website or service Customer was
using before interacting with Service Provider service.
Application Information - The information Service Provider collects includes (but is not
limited to) device type and settings, operating system, mobile network information,
including carrier name and phone number. Service Provider also collects information about
the interaction of Customer applications, browsers and devices with Service Provider
services, including IP addresses, crash reports, system activity, and date and time as well
as the reference URL of the Client's request.
3. Authorization for Usage of Third-Party Data
Notwithstanding anything to the contrary in this Privacy Policy or the Terms and Conditions
of the website, you acknowledge, consent and agree that:
• Where you use this Website or services for and on behalf of any other person,
whether being a member of your family, your friend or employee, you have their full
and informed consent and authorization for such use; and
• Where you provide any information on any other person, such as your family,
friends or employees, you have their full and informed consent and you are
authorized by such person to provide such personal information when using the
Website or services.
• We assume with your permission that you have obtained proper authorization from
the owner/s of such personal information and have informed the said person/s of
the terms and conditions of this Privacy Policy or the Terms of Use. You hereby
represent and warrant that such person, whether being a member of your family,
your friend or employee, has also read and understands this Privacy Policy or the
Terms and Conditions of the website.
You further acknowledge, confirm, represent, and warrant that such person (1) on whose
behalf you are using this Website or services or (2) whose personal information you have
provided to us have agreed to the use, processing, storage and/or disclosure of their
personal information in accordance with this Privacy Policy or the Terms and Conditions of
the website, and all applicable laws.
You acknowledge, consent and agree that Service Provider, its employees, or agents shall
not be held liable for the collection, use, storage, processing, and disclosure of all such
personal information provided by you under this paragraph.
4. Information from cookies and web beacons
Cookies are small text files created by a website that store information on your computer,
such as your preferences when visiting that website. Similar to many websites, if you have
enabled cookies in your browser, Service Provider, independently and through enabled
third-party tools and programs, collects certain technical information using cookies, such
as the path of users to the Website, pages visited, originating IP address, browser type,
browser language and the date and time of the user's visit. This information helps the
Service Provider track trends and improve areas of the Website and Program, and are
common analytics used by most websites. If you have disabled cookies, the Website may
not work as it is intended because the Service Provider uses cookies when you sign in to
keep track of your personal session.
Web beacons are tiny graphics with a unique identifier that is similar in function to cookies
but, instead of being stored on your computer, are embedded invisibly on web pages and
are about the size of the period at the end of this sentence. Web beacons are used to
track the online movements of internet users. Service Provider uses them to better
understand User interaction and engagement with the Website (including without
limitation, electronic Communications), such as by learning whether certain users have
accessed the Website via links from other websites. Service Provider can use this
information to tailor its audience for advertisements promoting Service Provider. You may
set your browser preferences to opt out of the collection and use of this tracking
information for ad targeting purposes.
Service Provider also uses cookies for remarketing, by placing a cookie in your browser to
signal that you've visited the Website. This gives us the option to show you ads for Service
Provider when you visit other websites that host advertisements. Service Provider
supports the Do Not Track preference available on most internet browsers. The use of
cookies by third parties on the Website is for the purpose of making the Website easier to
use and to enable certain features of the Website and is not covered by this Privacy Policy.
We do not have control over these cookies.
5. Electronic communications
From time to time you will receive disclosures, notices, documents and information based
on your current loan status ("Communications") from Service Provider (for example,
confirmations of Loans obtained by you, confirmation of email address or password
changes, or customer service inquiries regarding the status of or activity). By creating an
account with Service Provider on the Website, you agree that all Communications from
Service Provider relating to your use of the Website and participation in the Program may
be provided or made available to you electronically by mobile SMS, by e-mail or at the
Website.
By registering on the Website, you acknowledge that you can access the electronic
Communications, and you consent to having all Communications provided or made
available to you in electronic form and to obtain loan utilizing the online service provided
by Service Provider. We may also provide you with Communications through physical mail.
6. Disclosure to affiliates, service providers, agents and representatives
For the purposes of providing full range of the services by the Service Provider, the latter
may disclose your personal information to third parties only in the ways that are described
in this privacy statement. The Service Provider's affiliates and external service providers
(including, but not limited to the credit information bureau Sri Lanka for the purposes of
obtaining your credit history), agents and representatives of the Service Provider and its
affiliates may be provided with access to your personally identifiable information as part of,
or incident to, their provision of services to the Service Provider. All such accesses shall be
under appropriate confidentiality agreements and limited to use to provide services to the
Service Provider.
7. Legal disclosures
Notwithstanding anything to the contrary in this Privacy Policy or the Terms and Conditions
of website, you acknowledge, consent and agree that Service Provider may disclose
information in order to: (a) comply with applicable law, regulation, legal process, or
governmental request; (b) protect the rights, property and safety of Service Provider, Users
and others, including intellectual property rights; and (c) enforce or apply our agreements
and policies.
8. Use of your information
In addition to the uses (including display and disclosure) of your information that we have
described above in this Privacy Policy, Service Provider uses your information that Service
Provider has collected as described above in this Privacy Policy in order to facilitate
activities and transactions for the operation of the Website and Program, improve User
experiences on the Website.
9. Links to other websites
If you follow any links which remove you from the Website (for example, the independently
operated PayPal, Facebook, Twitter, Blogger, Wordpress, Salesforce and any other
websites), this Privacy Policy no longer applies – i.e., the privacy policies and practices of
other websites and other parties are governed by their respective terms of use and privacy
policies.
10. Security
Service Provider takes reasonable steps to maintain appropriate physical, technical such
as encrypting transmission of information using SSL and administrative security to help
prevent loss, misuse and unauthorized access, disclosure and modification of personal
information. While we take these reasonable efforts to safeguard your personal
information, no system or transmission of data over the Internet or any other public
network can be guaranteed to be 100% secure.
11. Retention period
Service Provider reserves the right to retain your personal information for a period of 3
years or more to satisfy legal requirements such as recordkeeping and tax and credit
reporting requirements, as well as for purposes of fraud prevention, audit and data
integrity. In addition, Service Provider reserves the right to retain, as well as to use and
disclose as permitted pursuant to this Privacy Policy, your personal information for such
period of time as reasonably needed by Service Provider to facilitate activities and
transactions for the operation of the Website, improve User experiences on the Website.
Service Provider reserves the right to retain information that does not directly identify you,
for example, aggregated or anonymized data.
12. Modifications; Interpretation
Service Provider may update or modify this Privacy Policy from time to time. If any
changes are made, the Service Provider will reflect the date on which any such changes
are made and posted by updating the "last updated" date at the top of the page. Please be
sure to check this page periodically for changes.
13. Requests & Complaints
If you believe that any of your personal data may have been misused or abused or
otherwise compromised, or if you wish to withdraw your consent for processing of your
personal data, you may lodge your inquiries and complaints to the Service Provider in
accordance with the contact details as outlined below and discuss such matter, together
with your contact details for reference. All such complaints will be resolved within 30
(Thirty) calendar days.
Filing such complaints shall not affect the lawfulness of any processing carried out before
you withdraw your consent.
For Complaints please contact us on +94117811555 or e-mail - [email protected]
