Privacy Policy

1. Introduction

Gracia Capital ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By accessing our website or using our services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Identification data: Name, date of birth, national identification number
• Contact information: Email address, phone number, postal address
• Financial information: Income details, employment information, bank account details
• Technical data: IP address, browser type, device information
• Usage data: Website interaction, service usage patterns

2.2 How We Collect Information

We collect information through:

• Direct interactions (loan applications, contact forms)
• Automated technologies (cookies, analytics tools)
• Third-party sources (credit bureaus, business partners)

3. How We Use Your Information

We use your personal information for the following purposes:

• Loan processing: To evaluate and process your loan applications
• Customer service: To respond to your inquiries and provide support
• Legal compliance: To meet regulatory and legal obligations
• Marketing: To send you relevant offers and information (with your consent)
• Website improvement: To enhance our website and services
• Security: To protect against fraud and unauthorized access

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual necessity: To fulfill our contractual obligations to you
• Legal obligation: To comply with financial regulations and laws
• Legitimate interests: For business operations and service improvement
• Consent: For marketing communications and specific data processing

5. Data Sharing and Disclosure

We may share your information with:

• Financial institutions: Banks and payment processors for transaction processing
• Credit bureaus: For credit assessment and verification
• Regulatory authorities: As required by law and financial regulations
• Service providers: IT support, hosting providers, and business partners
• Legal requirements: When required by court order or legal process

We ensure all third parties respect the security of your data and treat it in accordance with the law.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of sensitive data during transmission and storage
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Employee training on data protection
• Secure data backup and recovery procedures

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Active customers: For the duration of our relationship and legal requirements
• Loan applications: Up to 5 years for regulatory compliance
• Marketing data: Until consent is withdrawn or 3 years from last contact
• Legal obligations: As required by applicable laws and regulations

8. Your Rights

Under data protection laws, you have the following rights:

• Right to access: Obtain a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to certain types of processing
• Right to withdraw consent: Withdraw consent at any time

To exercise these rights, please contact us using the details provided below.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Provide personalized content and advertisements
• Enhance website security and functionality

You can control cookie settings through your browser preferences. However, disabling cookies may affect website functionality.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission
• Standard contractual clauses
• Binding corporate rules
• Certification mechanisms like Privacy Shield

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: