Privacy Policy
Last Updated: September 2026
OneLend (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website and use our business loan marketplace platform.
Information We Collect
We collect information that you provide directly to us, including:
- Personal Information: Name, email address, phone number, and business address when you create an account or submit a loan application.
- Business Information: Business name, industry, time in business, annual revenue, and other details relevant to your loan application.
- Financial Information: Credit score range, existing debts, and financial documents you choose to upload.
- Usage Data: Information about how you interact with our platform, including pages visited, features used, and time spent on the site.
- Device Information: IP address, browser type, operating system, and device identifiers collected automatically through cookies and similar technologies.
How We Use Your Information
We use the information we collect to:
- Match you with appropriate lenders based on your business profile and funding needs.
- Process and manage your loan applications.
- Communicate with you about your application status and matched lender offers.
- Improve our matching algorithms and platform functionality.
- Share your application with matched lenders and lending partners — only with your express consent, given when you submit your application.
- Send you relevant updates, newsletters, and marketing communications (only with your consent, and you can unsubscribe at any time).
- Comply with legal obligations and enforce our terms of service.
- Detect and prevent fraud, unauthorized access, and other illegal activities.
How We’re Paid
OneLend is free for applicants. Lenders and lending partners pay us for introductions — for example a fee per application we share with them, or a fee when a loan is funded. With your consent, we share your application with matched lenders and lending partners, who pay us for introductions. We don’t share it with anyone else without your permission, except service providers acting on our behalf or where the law requires it. See How We Make Money.
Withdrawing Your Consent
You can withdraw your consent at any time on our withdraw consent page, through the link in any email we send you, or by emailing our Privacy Officer. When you withdraw, we stop sharing your application, cancel any introductions that haven’t happened yet, and stop emailing you. We can then no longer match you with lenders. Partners who already received your application hold their own copy under their own privacy policies; we notify them that you’ve withdrawn, and you can also contact them directly.
To stop marketing emails only, use the unsubscribe link in any email. We act on unsubscribe requests immediately.
How Long We Keep Your Information
We keep application information for up to 7 years after your last activity with us, to meet financial record-keeping, audit and legal obligations, and then securely delete or anonymize it. We keep records of your consent choices for as long as we keep the related application, plus one year, so we can show what you agreed to. Applications you started but never submitted are deleted sooner.
Where Your Information Is Stored
Our primary application database is hosted in Canada. Some of our service providers (for example cloud file storage, website analytics and error monitoring) store or process information in the United States, and some partners may do so as well. Information stored outside Canada is subject to the laws of that country and may be accessible to its courts, law enforcement and national security authorities.
Data Security
We take the security of your data seriously and implement industry-standard measures to protect your information, including:
- AES-256 encryption for sensitive data at rest and in transit.
- TLS/SSL encryption for all data transmitted between your browser and our servers.
- Regular security audits and vulnerability assessments.
- Strict access controls limiting employee access to personal data on a need-to-know basis.
- Secure data storage with reputable cloud providers, with our primary database in Canada.
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest practical standards.
Your Rights
Under applicable Canadian privacy legislation, including PIPEDA (Personal Information Protection and Electronic Documents Act), you have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Withdraw consent for the collection, use, or disclosure of your information (see Withdrawing Your Consent).
- Request deletion of your personal information, subject to legal retention requirements.
- Opt out of marketing communications at any time.
To exercise any of these rights, please contact us using the information below. We will respond to your request within 30 days.
Cookies
We use cookies and similar tracking technologies to enhance your experience on our platform. These include:
- Essential Cookies: Required for the platform to function properly, including session management and security features.
- Analytics Cookies: Help us understand how visitors interact with our platform so we can improve functionality and user experience.
- Marketing Cookies: Used to deliver relevant advertisements and track campaign performance.
You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our platform.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
OneLend Privacy Officer
[Privacy Officer name — to be confirmed]
Email: [email protected]
Toronto, Ontario, Canada
See also: Terms of Service · Accessibility Statement