Privacy Policy

This Privacy Policy describes how OnCredit (Pvt) Ltd (the "Service Provider") collects and uses the personal information you provide to the Service Provider through this website accessible at: oncredit.lk (the "Website") or by other means. It also describes the choices available to you regarding our use of your personal information and how you can access and update this information. By accessing or using the Website, you signify that you have read this Privacy Policy, and you expressly consent to our collection, use, disclosure, storage and protection of your personal information as described in this Privacy Policy.

1. No sale of personal information

Service Provider will not rent or sell your personal information to third parties.

2. Information you provide when applying for loans

When you apply for a loan through the Website, we collect basic information about you through the registration process to uniquely identify you, perform credit verification and to confirm with statutory requirements.

When you apply for a loan through the Mobile Application, we collect basic information about you through the registration process to uniquely identify you, perform credit verification and to confirm with statutory requirements. The Service Provider may conduct a credit risk assessment of the Customer by itself, at its cost but without any obligation to do so, through a third party. On risk analysis we may consider following facts Contacts phone numbers, Battery Present, System Locale Language, Android Accounts, Android Model, Android Brand, Android VersionApp. 

Except as noted in Section 6 below, the Service Provider will not disclose your personally identifiable Loan Transaction information to any third party without your consent.

3. Authorization for Usage of Third Party Data

Notwithstanding anything to the contrary in this Privacy Policy or the Terms and Conditions of website, you acknowledge, consent and agree that:

  • Where you use this Website or services for and on behalf on any other person, whether being a member of your family, your friend or employee, you have their full and informed consent and authorization for such use; and

  • Where you provide any information on any other person, such as your family, friends or employees, you have their full and informed consent and you are authorized by such person to provide such personal information when using the Website or services.

  • We assume with your permission that you have obtained proper authorization from the owner/s of such personal information and have informed the said person/s of the terms and conditions of this Privacy Policy or the Terms of Use. You hereby represent and warrant that such person, whether being a member of your family, your friend or employee, has also read and understands this Privacy Policy or the Terms and Conditions of the website.

Customer specifically and explicitly authorize the Lender to verify his personal data by sharing that personal data with any telecommunications service provider the OnCredit (Private) Limited deems fit to carry out Verification.

You further acknowledge, confirm, represent, and warrant that such person (1) on whose behalf you are using this Website or services or (2) whose personal information you have provided to us have agreed to the use, processing, storage and/or disclosure of their personal information in accordance with this Privacy Policy or the Terms and Conditions of the website, and all applicable laws.

You acknowledge, consent and agree that Service Provider, its employees, or agents shall not be held liable for the collection, use, storage, processing, and disclosure of all such personal information provided by you under this paragraph.

4. Information from cookies and web beacons

Cookies are small text files created by a website that store information on your computer, such as your preferences when visiting that website. Similar to many websites, if you have enabled cookies in your browser, Service Provider, independently and through enabled third party tools and programs, collects certain technical information using cookies, such as the path of users to the Website, pages visited, originating IP address, browser type, browser language and the date and time of the user's visit. This information helps Service Provider track trends and improve areas of the Website and Program, and are common analytics used by most websites. If you have disabled cookies, the Website may not work as it is intended because the Service Provider uses cookies when you sign in to keep track of your personal session.

Web beacons are tiny graphics with a unique identifier that are similar in function to cookies but, instead of being stored on your computer, are embedded invisibly on web pages and are about the size of the period at the end of this sentence. Web beacons are used to track the online movements of internet users. Service Provider uses them to better understand User interaction and engagement with the Website (including without limitation, in electronic Communications), such as by learning whether certain users have accessed the Website via links from other websites. Service Provider can use this information to tailor its audience for advertisements promoting Service Provider. You may set your browser preferences to opt out of the collection and use of this tracking information for ad targeting purposes.

Service Provider also uses cookies for remarketing, by placing a cookie in your browser to signal that you've visited the Website. This gives us the option to show you ads for Service Provider when you visit other websites that host advertisements. Service Provider supports the Do Not Track preference available on most internet browsers. The use of cookies by third parties on the Website is for the purpose of making the Website easier to use and to enable certain features of the Website and is not covered by this Privacy Policy. We do not have control over these cookies.

5. Electronic communications

From time to time you will receive disclosures, notices, documents and information based on your current loan status ("Communications") from Service Provider (for example, confirmations of Loans obtained by you, confirmation of email address or password changes, or customer service inquiries regarding the status of or activity). By creating an account with Service Provider on the Website, you agree that all Communications from Service Provider relating to your use of the Website and participation in the Program may be provided or made available to you electronically by mobile SMS, by e-mail or at the Website.

By registering on the Website, you acknowledge that you can access the electronic Communications, and you consent to having all Communications provided or made available to you in electronic form and to obtain loan utilizing the online service provided by Service Provider. We may also provide you with Communications through physical mail.

6. Disclosure to affiliates, service providers, agents and representatives

For the purposes of providing full range of the services by the Service Provider, the latter may disclose your personal information to third parties only in the ways that are described in this privacy statement. The Service Provider's affiliates and external service providers (including, but not limited to the credit information bureau Sri Lanka for the purposes of obtaining your credit history), agents and representatives of the Service Provider and its affiliates may be provided with access to your personally identifiable information as part of, or incident to, their provision of services to the Service Provider. All such accesses shall be under appropriate confidentiality agreements and limited to use to provide services to the Service Provider.

7. Legal disclosures

Notwithstanding anything to the contrary in this Privacy Policy or the Terms and Conditions of website, you acknowledge, consent and agree that Service Provider may disclose information in order to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) protect the rights, property and safety of Service Provider, Users and others, including intellectual property rights; and (c) enforce or apply our agreements and policies.

8. Use of your information

In addition to the uses (including display and disclosure) of your information that we have described above in this Privacy Policy, Service Provider uses your information that Service Provider has collected as described above in this Privacy Policy in order to facilitate activities and transactions for the operation of the Website and Program, improve User experiences on the Website.

9. Links to other websites

If you follow any links which remove you from the Website (for example, the independently operated PayPal, Facebook, Twitter, Blogger, Wordpress, Salesforce and any other websites), this Privacy Policy no longer applies – i.e., the privacy policies and practices of other websites and other parties are governed by their respective terms of use and privacy policies.

10. Security

Service Provider takes reasonable steps to maintain appropriate physical, technical such as encrypting transmission of information using SSL and administrative security to help prevent loss, misuse and unauthorized access, disclosure and modification of personal information. While we take these reasonable efforts to safeguard your personal information, no system or transmission of data over the Internet or any other public network can be guaranteed to be 100% secure.

11. Retention period

Service Provider reserves the right to retain your personal information for a period of 3 years or more to satisfy legal requirements such as recordkeeping and tax and credit reporting requirements, as well as for purposes of fraud prevention, audit and data integrity. In addition, Service Provider reserves the right to retain, as well as to use and disclose as permitted pursuant to this Privacy Policy, your personal information for such period of time as reasonably needed by Service Provider to facilitate activities and transactions for the operation of the Website, improve User experiences on the Website. Service Provider reserves the right to retain information that does not directly identify you, for example, aggregated or anonymized data.

12. Modifications; Interpretation

Service Provider may update or modify this Privacy Policy from time to time. If any changes are made, the Service Provider will reflect the date on which any such changes are made and posted by updating the "last updated" date at the top of the page. Please be sure to check this page periodically for changes.

13. Requests & Complaints

If you believe that any of your personal data may have been misused or abused or otherwise compromised, or if you wish to withdraw your consent for processing of your personal data, you may lodge your inquiries and complaints to the Service Provider in accordance with the contact details as outlined below and discuss such matter, together with your contact details for reference. All such complaints will be resolved within 30 (Thirty) calendar days.

Filing such complaints shall not affect the lawfulness of any processing carried out before you withdraw your consent.

For Complaints please contact us on +94117811555 or e-mail - [email protected]