top of page

​

Privacy Policy

Last Updated: September 20, 2025

At Grassroots Cash, we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at grassrootslending.ca (the “Site”) or use our lending services. By using our Site or services, you consent to the practices described in this Privacy Policy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. Information We Collect

We collect personal information you provide directly and information generated through your use of our Site and services. This includes:

1.1 Personal Information Provided by You

  • Identity and Contact Information: Name, address, email address, phone number, date of birth, and government-issued identification (e.g., driver’s license or Social Insurance Number, if required for credit checks).

  • Financial Information: Bank account details, income, employment details, credit history, and other financial data provided during loan applications.

  • Account Information: Username, password, and security question answers for your Grassroots Cash account.

  • Communications: Information you provide when contacting us, such as through support@grassrootslending.ca or customer service forms.

1.2 Information Collected Automatically

  • Usage Data: IP address, browser type, device information, operating system, pages visited, and time spent on our Site.

  • Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience, analyze Site usage, and personalize content. You can manage cookie preferences through your browser settings.

  • Transaction Data: Details about loan applications, approvals, repayments, and related activities on our platform.

1.3 Information from Third Parties​

  • Third-Party Verification Services: Information to verify your identity or financial detals.

  • Public Sources: Information from publicly available records, if permitted by law.

2. How We Use Your Information

We use your personal information for the following purposes, consistent with PIPEDA’s principles of lawful use and consent:

  • To Provide Services: Process loan applications, facilitate lending agreements, and manage borrower-lender transactions.

  • To Verify Identity: Confirm your identity and prevent fraud or unauthorized access.

  • To Assess Eligibility: Evaluate creditworthiness and financial suitability for loans.

  • To Communicate: Respond to inquiries, send transactional emails (e.g., loan approvals or payment reminders), and provide customer support.

  • To Improve Our Services: Analyze usage data to enhance Site functionality and user experience.

  • To Comply with Legal Obligations: Meet requirements under Canadian laws, such as anti-money laundering regulations or tax reporting.

  • For Marketing (With Consent): Send promotional materials or offers about Grassroots Cash services, where you have provided explicit consent. You may opt out at any time (see Section 8).

3. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

  • With Lenders: To facilitate loan agreements, we share relevant borrower information (e.g., application details) with lenders on our platform.

  • With Service Providers: We engage third-party providers (e.g., payment processors, credit bureaus, or IT services) who process your information under strict confidentiality agreements and in compliance with PIPEDA.

  • For Legal Purposes: We may disclose information to comply with legal obligations, such as responding to court orders, regulatory requirements, or law enforcement requests.

  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to a successor entity, subject to equivalent privacy protections.

  • With Your Consent: We may share your information for other purposes if you provide explicit consent.

4. Data Security

We implement reasonable technical, administrative, and physical safeguards to protect your personal information from unauthorized access, use, or disclosure. These include:

  • Encryption of sensitive data (e.g., financial information) during transmission and storage.

  • Secure servers and access controls to limit data access to authorized personnel.

  • Regular security audits and updates to our systems.

However, no online platform is completely secure. We cannot guarantee the absolute security of your information, and you share information at your own risk.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. For example:

  • Loan-related data may be retained for the duration of the loan agreement and up to 7 years thereafter to comply with tax or anti-money laundering laws.

  • Account information is retained until you request deletion or your account becomes inactive, subject to legal requirements. When no longer needed, we securely delete or anonymize your information.

6. Your Privacy Rights

Under PIPEDA and applicable provincial laws, you have the following rights regarding your personal information:

  • Access: Request access to the personal information we hold about you.

  • Correction: Request corrections to inaccurate or incomplete information.

  • Withdrawal of Consent: Withdraw consent for certain uses of your information (e.g., marketing), where applicable, though this may limit access to some services.

  • Complaint: File a complaint with us or the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

To exercise these rights, contact us at support@grassrootslending.ca. We will respond within 30 days, as required by PIPEDA.

7. Cookies and Tracking

We use cookies to:

  • Ensure Site functionality (e.g., maintaining login sessions).

  • Analyze Site performance and user behavior.

  • Deliver personalized content or advertisements (with your consent).

You can disable cookies through your browser settings, but this may affect Site functionality. For more details, contact us at support@grassrootslending.ca.

8. Marketing and Opt-Out

If you consent to receive marketing communications, we may send you emails or notifications about Grassroots Cash services or promotions. You can opt out at any time by:

  • Clicking the “unsubscribe” link in our emails.

  • Contacting us at support@grassrootslending.ca. Opting out of marketing does not affect transactional communications (e.g., loan updates).

9. Third-Party Links

Our Site may contain links to third-party websites (e.g., lenders or payment processors). We are not responsible for the privacy practices of these sites. Review their privacy policies before providing personal information.

10. International Data Transfers

Your information is primarily stored and processed in Canada. If we transfer your data to service providers outside Canada, we ensure they comply with PIPEDA-equivalent protections through contractual agreements.

11. Children’s Privacy

Our Site and services are not intended for individuals under 19. We do not knowingly collect personal information from minors. If we learn such information has been collected, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised “Last Updated” date. Your continued use of the Site or services after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions, concerns, or to exercise your privacy rights, contact our Privacy Officer at:

Notes for Customization

  1. Legal Review: Have this policy reviewed by a lawyer to ensure compliance with PIPEDA, provincial privacy laws, and financial regulations (e.g., anti-money laundering rules under Proceeds of Crime (Money Laundering) and Terrorist Financing Act).

  2. Business Model: Specify whether Grassroots Cash is a direct lender, peer-to-peer platform, or other model to clarify data-sharing practices in Section 3.

  3. Province-Specific Rules: If operating in multiple provinces, address variations (e.g., Québec’s Act Respecting the Protection of Personal Information in the Private Sector requires additional consent protocols).

  4. Data Storage: Confirm where data is stored (e.g., Canadian servers or cloud providers) and update Section 10 if international transfers occur.

  5. Contact Information: Replace placeholders with your actual business address and phone number.

  6. Cookies: If you use specific analytics tools (e.g., Google Analytics), disclose them in Section 7 and ensure compliance with Canada’s anti-spam legislation (CASL) for electronic communications.

  7. Retention Periods: Adjust Section 5 to reflect your specific retention policies, ensuring compliance with tax or financial regulations (e.g., Canada Revenue Agency requirements).

If you provide more details about your operations (e.g., specific data collected, provinces of operation, or third-party integrations), I can refine this further. Would you like me to adjust anything specific or assist with another task?

bottom of page