Privacy Policy

1. Introduction

3B LOAN SL ("we," "us," or "our") operates the PhiCo mobile application (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data. We are committed to protecting your privacy and ensuring the security of your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and Spanish data protection legislation.

2. Information We Collect

We collect several types of information to provide and improve our Service:

2.1 Personal Information

When you register for or use PhiCo, we may collect:

• Name and contact information (email address, phone number)
• Date of birth and identification documents
• Financial information (income, employment status, credit history)
• Address and location information
• Account credentials and authentication information

2.2 Usage Data

We automatically collect information about how you interact with PhiCo, including:

• Device information (device type, operating system, unique device identifiers)
• Log data (IP address, browser type, access times, pages viewed)
• Usage patterns and preferences
• Search queries and application interactions

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

3. How We Use Your Information

We use the collected information for various purposes:

• Service Provision: To provide, maintain, and improve PhiCo, including matching you with relevant financial offers
• Communication: To send you updates, notifications, and respond to your inquiries
• Personalization: To customize your experience and provide personalized recommendations
• Analytics: To analyze usage patterns and improve our Service
• Legal Compliance: To comply with legal obligations and prevent fraud
• Partner Sharing: To share relevant information with partner financial institutions when you apply for products

4. Legal Basis for Processing

Under GDPR and Spanish data protection law, we process your personal data based on:

• Consent: When you have given clear consent for us to process your personal data
• Contract Performance: To fulfill our contractual obligations to you
• Legal Obligation: To comply with applicable laws and regulations
• Legitimate Interests: For our legitimate business interests, such as improving our Service and preventing fraud

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

5.1 Partner Financial Institutions

When you apply for a financial product through PhiCo, we share relevant information with the partner financial institution to process your application. Each partner has their own privacy policy governing how they use your data.

5.2 Service Providers

We may share data with third-party service providers who perform services on our behalf, such as cloud hosting, analytics, and customer support. These providers are contractually obligated to protect your data.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of our users or others.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection
• Secure data storage and backup procedures

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your data, we will securely delete or anonymize it.

8. Your Rights

Under GDPR and Spanish data protection law, you have the following rights regarding your personal data:

• Right of Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing of your data for certain purposes
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided in Section 12.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

10. Children's Privacy

PhiCo is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

3B LOAN SL
Calle Castello 59
28001 Madrid, Spain
Email: contact@3bloan.com

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) if you believe your data protection rights have been violated.