Privacy Policy

This Privacy Policy explains how [LEGAL BUSINESS NAME] (“SunLoans,” “we,” “us,” or “our”) collects, uses, and protects information you provide when you use our website and loan application service (the “Service”). By using the Service, you agree to this Policy.

1. Information we collect

When you submit a loan application, we collect the information you provide directly, which may include:

• Full name
• Email address
• Phone number
• Postal address
• Date of birth (used to confirm you are at least 18)
• Requested loan amount and loan purpose
• Any additional details you choose to include

We also automatically collect limited technical data such as your IP address, which we use for security and rate-limiting. We do not use third-party advertising or analytics tracking cookies. We use a single secure session cookie solely to keep authorized administrators signed in.

2. How we use your information

• To receive, review, and process your loan application
• To contact you about your application and its status
• To send transactional emails (application confirmation and status updates)
• To verify eligibility, prevent fraud, and maintain security
• To comply with legal and regulatory obligations

We do not sell your personal information.

3. Service providers

We share information only with vendors that help us operate the Service, each of which processes data on our behalf:

• Hosting & database — our application is hosted on Vercel and stored in a managed PostgreSQL database (Neon).
• Email delivery — transactional emails are sent through Resend.
• Live chat — if you start a chat, your messages are processed by our chat provider (Tawk.to). Do not share sensitive financial details over chat.

We may also disclose information when required by law, to enforce our agreements, or to protect the rights, safety, and property of SunLoans or others.

4. Data retention

We retain application data for as long as necessary to fulfill the purposes described in this Policy and to meet legal, accounting, or reporting requirements. When data is no longer needed, we delete or anonymize it.

5. Security

Information is transmitted over encrypted connections (HTTPS) and stored with access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable measures to protect your information.

6. Your rights

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, or to object to or restrict certain processing. To make a request, contact us at [CONTACT EMAIL]. We will respond as required by applicable law.

7. Children

The Service is intended only for individuals who are at least 18 years old. We do not knowingly collect information from anyone under 18.

8. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

9. Contact us

Questions about this Policy or your information? Contact [LEGAL BUSINESS NAME] at [CONTACT EMAIL] or [BUSINESS MAILING ADDRESS].

This document is a template and not legal advice. Have it reviewed by a qualified attorney before relying on it.