Privacy Policy
Last updated: April 29, 2026
At Credit2Go Inc. (“Credit2Go”, “we”, “our”, or “us”), we are committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and protect your information when you visit credit2go.ca or use our personal loan services.
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, the Personal Information Protection Act (PIPA) of Alberta, the Personal Information Protection Act (PIPA) of British Columbia, as well as all applicable provincial privacy laws.
📍 Service area: Credit2Go offers its personal loan services only to residents of Ontario, Alberta, British Columbia, Saskatchewan, New Brunswick, Nova Scotia, Prince Edward Island, and Newfoundland and Labrador. Our services are not available to residents of Quebec or Manitoba.
1. Information We Collect
1.1 Identification information
- First and last name, date of birth, gender
- Social Insurance Number (SIN)
- Photo identification (driver’s licence, passport)
- Mailing address, city, province, postal code
- Phone numbers (home and mobile)
- Email address
1.2 Financial and employment information
- Source and amount of income
- Employer name, position, hire date
- Pay frequency, net salary, gross income
- Banking information (via Inverité — secure verification service)
- Monthly expenses (rent, utilities, car lease)
- Calculated debt-to-income ratio
1.3 Browsing information
- IP address, browser type, operating system
- Pages visited, visit duration, links clicked
- Cookies — see our Cookie Policy
2. How We Use Your Information
- Loan application assessment: identity verification, creditworthiness analysis, debt-to-income ratio calculation
- Contract management: drafting the loan agreement, disbursing funds, collecting payments
- Communication: responding to you by email, confirming your application, keeping you informed of your file status
- Legal compliance: meeting regulatory obligations (Financial Consumer Agency of Canada, provincial credit laws, federal 35% APR cap)
- Fraud prevention: cross-checks with credit bureaus and anti-fraud services
- Service improvement: anonymized statistical analyses
3. Automated Decisions
The assessment of your loan application relies in part on automated algorithmic processing that analyzes your creditworthiness, debt-to-income ratio, and banking history. These automated decisions may influence the approval, refusal, or terms of your loan.
You have the right to:
- Be informed of any automated decision concerning you
- Know the information used and the main factors that led to the decision
- Submit your observations to a member of our staff for human review
4. Consent
By submitting a loan application, you expressly consent to the collection, use, and disclosure of your personal information for the purposes described. Your consent is freely given, informed, and specific.
You may withdraw your consent at any time, subject to legal or contractual obligations — however, withdrawal may make it impossible to provide our services.
5. Disclosure to Third Parties
We do not sell, rent, or trade your personal information. However, we may share it with:
- Credit bureaus (Equifax, TransUnion) for assessment and credit history reporting
- Inverité for secure verification of your bank account
- Financial institutions for processing payments and pre-authorized debits (PADs)
- Public authorities when required by law (Canada Revenue Agency, courts, regulators)
- Service providers bound by contract to confidentiality (web hosting, email, technical support)
6. Transfers Outside Canada
Some of our service providers (hosting, cloud, security) may process your information outside Canada. Before any transfer, we contractually ensure that the protection offered is equivalent to that required by applicable Canadian laws. For the list of jurisdictions involved, contact us (section 11).
7. Information Retention
- Active loan files: loan term + 7 years after repayment
- Refused applications: 3 years
- Accounting and tax documents: 7 years (legal obligation)
- Browsing data: 2 years maximum
Upon expiration of these periods, your information is securely destroyed or irreversibly anonymized.
8. Security and Incidents
- SSL/TLS 256-bit encryption for all data transmissions
- Secure storage on Canadian servers
- Strict access control limited to authorized personnel
- Banking verification via Inverité (read-only — no debit possible)
- Continuous monitoring and Wordfence firewall
In the event of a privacy breach likely to cause significant harm, we will notify you without delay and notify the relevant authorities (Office of the Privacy Commissioner of Canada and, where applicable, the provincial commissioner).
9. Your Rights
- Access the personal information we hold about you
- Correct any inaccurate or incomplete information
- Withdraw your consent (subject to legal or contractual obligations)
- Obtain human review of a decision made exclusively by automated processing (see section 3)
- File a complaint with:
To exercise these rights, contact us (section 11). We will respond within 30 days.
10. Changes
We may modify this policy to reflect legal, operational, or technological changes. The current version is always the one published on this page, with the date of the last update indicated at the top.
11. Contact Us
