Privacy Policy
Last updated: July 15, 2025
Introduction
At Back to homepageGwad Invests, We place great importance on the protection of your personal data and the respect of your privacy. This policy aims to clearly and transparently inform you about how we collect, use, share, and protect your data when using our financial loan services.
We are committed to complying with the French Data Protection Act (January 6, 1978) and the General Data Protection Regulation (GDPR) No. 2016/679 of April 27, 2016. This policy applies to all our services available on our website and in our agencies.
Data Controller
The data controller of your personal data is:
Gwad Invests SAS
Boulevard Arnaud Nicolas 97119 Vieux Habitants
SIREN : 514 914 332
SIRET : 514 914 332 000 10
Email : contact@gwadinvests.com
We have appointed a Data Protection Officer (DPO) whom you can contact at: dpo@gwadinvests.com
How your data flows within our company
Collection
Form, interview, cookies
Security
Encryption, controlled access
Processing
File analysis, scoring
Sharing
Banking partners, regulators
Archiving
Regulatory retention
Data we collect
We collect different types of data to provide you with our services:
Identity and contact information
Name, surname, address, email, phone, date and place of birth, ID, family status, etc.
Financial and professional data
Income, assets, job situation, bank statements, current loans, credit history, etc.
Technical and browsing data
IP address, connection logs, browser type, visited pages, preferences, cookies data, etc.
Purpose of data processing
We use your personal data for the following purposes:
Primary purposes
- Review and process your loan request
- Customer relationship management
- Fulfill our contractual obligations
- Fraud prevention and anti-money laundering
- Compliance with legal and regulatory obligations
Secondary purposes
- Sending personalized marketing offers (with your consent)
- Improving our services and developing new products
- Statistics and market research
- Website security and improvement
- Complaint and dispute handling
For secondary purposes, we obtain your prior consent. You may withdraw it at any time.
Legal basis for processing
Processing your data relies on different legal bases depending on the purpose:
| Purpose | Legal basis |
|---|---|
| Contract execution | Necessary for concluding or executing the loan agreement |
| Legal obligation | Compliance with our regulatory obligations (Pacte Law, Sapin 2, etc.) |
| Legitimate interest | Improving our services, fraud prevention, system security |
| Consent | For direct marketing and non-essential cookies |
Data recipients
Your personal data is strictly confidential. However, it may be shared with:
Internal recipients
- Our sales and advisor teams
- Our administrative and finance departments
- Our IT department (limited access)
- Our compliance department
External recipients
- Partner banks
- Technical providers (host, software)
- Regulatory authorities (ACPR, Banque de France)
- Bailiffs and lawyers (in case of disputes)
- Credit insurance providers
All partners and subcontractors are bound by strict confidentiality and may only use your data to perform the services entrusted to them.
Your rights
According to the GDPR, you have the following rights regarding your personal data:
Right of access
Request a copy of your data
Right to rectification
Correct inaccurate data
Right to erasure
Request deletion of your data
Right to object
Object to processing for legitimate reasons
Right to data portability
Retrieve your data in a structured format
Right to restriction
Request processing suspension
To exercise your rights:
Send your request by email to: contact@gwadinvests.com
Or by post to: Gwad Invests SAS - Personal Data Service - Boulevard Arnaud Nicolas 97119 Vieux Habitants
We will respond within 1 month. ID may be required to verify your identity.
Data security
We implement all appropriate technical and organizational measures to ensure the security and confidentiality of your personal data:
Data encryption (SSL/TLS)
Restricted access and strong authentication
Regular and secure backups
If a data breach poses a risk to your rights and freedoms, we will notify you promptly and report it to the CNIL as required.
Data retention period
We retain your personal data only as long as needed for the purposes it was collected, in compliance with applicable laws:
| Type of data | Retention period |
|---|---|
| Prospect data (no contract) | 3 years from last contact |
| Customer data (with contract) | Contract duration + 5 years for commercial purposes |
| Banking and financial data | 5 years after contract ends |
| Credit-related data | 2 years after final repayment |
| Accounting data | 10 years from fiscal year closure |
After these periods, data is either deleted or anonymized for statistical use.
Cookies and similar technologies
Our site uses cookies to enhance your browsing experience:
Essential cookies
Necessary for site functionality (e.g., authentication)
Analytics cookies
Audience measurement and navigation analysis (e.g., Google Analytics)
Advertising cookies
Personalized ads (with your consent)
You can configure your cookie preferences at any time via our cookie banneror your browser settings.
Policy changes
We reserve the right to update this privacy policy at any time. Updates will be posted on this page with the latest date. We encourage you to check regularly.
Have questions about your data protection?
Contact our Data Protection Officer:
You may also file a complaint with the CNIL: 3 Place de Fontenoy, 75007 Paris or at www.cnil.fr