Privacy Policy
Last updated: August 19th, 2026
GoodLoan.ca (“GoodLoan,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information we collect, use, disclose, and retain in connection with our website, borrower portal, loan applications, identity verification, customer support, and lending services.
This Privacy Policy explains what information we may collect, why we collect it, how we use and disclose it, how we protect it, and the choices and rights that may be available to you.
1. Information We Collect
When you visit GoodLoan.ca, create an account, apply for a loan, communicate with us, upload documents, or use our borrower portal, we may collect personal information including your name, date of birth, email address, telephone number, residential and mailing address, province or territory, citizenship or immigration/residency status, permit type and expiry date where applicable, employment information, employer name, job title, income information, requested loan amount, requested loan term, repayment frequency, and other information you provide in an application.
We may also collect documents that you provide to support an application, including government-issued identification, proof of address, paystubs, bank statements, and other documents we specifically request.
Where applicable and with the appropriate authorization or consent, we may obtain information from third parties used to verify your identity, income, employment, financial information, or credit information.
2. Identity and Fraud Verification
GoodLoan uses identity and fraud-verification services as part of its application and security processes.
We currently use Didit for verification checks that may include:
- government-issued ID verification;
- proof-of-address verification;
- device analysis;
- liveness verification;
- face matching; and
- anti-money-laundering screening.
These checks may involve biometric or identity-related information. GoodLoan is designed to retain only information reasonably necessary for its business, security, compliance, and verification purposes and to avoid unnecessarily storing biometric media such as liveness video or facial images where they are not required.
Verification results are separate from the information you originally provide in your application. GoodLoan does not automatically overwrite the information you submitted simply because a third-party verification provider reports a different value.
Passing identity verification does not guarantee approval for a loan.
3. Device and Technical Information
When you use GoodLoan.ca or the borrower portal, we may automatically receive certain technical information, such as browser type, device information, operating system, approximate location based on network information, access times, pages visited, IP-related security signals, and information used to prevent fraud, abuse, or unauthorized account access.
We seek to minimize the amount of technical information retained where detailed information is not necessary for the applicable security or compliance purpose.
4. Financial, Income and Employment Information
We may collect financial information that you voluntarily provide in connection with a loan application, including income, employment information, bank statements, and other supporting documentation.
GoodLoan may use third-party services to help verify income, employment, or financial information. If we introduce a bank-connection or financial-verification provider, such as Plaid or another provider, additional notices and consent may be presented to you before your financial information is accessed.
Borrower-declared information and third-party verified or observed information may be stored separately so that we can maintain an accurate record of what you submitted and what was independently verified.
5. Credit Information
Where applicable, GoodLoan may request your consent to obtain credit information, including a soft credit inquiry, from an authorized credit-reporting service or other provider.
We will not represent a credit inquiry as “soft” unless the specific product and provider being used supports that treatment.
Additional consent or disclosures may be provided before a credit inquiry is performed.
6. How We Use Personal Information
We may use personal information to operate and secure GoodLoan.ca and the borrower portal; create and manage your account; receive and process loan applications; communicate with you about your application or account; verify your identity, address, income, employment, or other application information; detect and prevent fraud, identity theft, abuse, money laundering, or other prohibited activity; review application completeness and eligibility; conduct underwriting and servicing activities; generate and administer agreements; process or administer payments where applicable; collect amounts owing; maintain business, accounting, compliance, security, and audit records; respond to complaints and support requests; comply with legal, regulatory, court, governmental, or contractual requirements; enforce agreements and protect GoodLoan, our customers, and others; and improve our services and technology.
GoodLoan will not use personal information for purposes that are materially different from those disclosed without providing additional notice or obtaining consent where required.
7. How We Share Personal Information
We may disclose personal information to service providers that assist us with identity verification, fraud prevention, technology hosting, database services, communications, document storage, payment processing, credit information, financial verification, professional services, and other services necessary to operate GoodLoan.
Service providers may include companies such as Didit, Supabase, communications providers such as Zoom Phone, and other vendors we engage from time to time.
Where we later implement services such as Plaid, a credit bureau, payment processor, electronic-signature provider, or banking provider, information may also be shared with those providers as necessary for the service and subject to applicable consent and contractual requirements.
We may also disclose information when required or permitted by law, to investigate fraud or security incidents, to establish or defend legal claims, or in connection with a corporate restructuring, financing, merger, acquisition, or sale of all or part of our business, subject to applicable requirements.
We do not sell personal information merely for advertising purposes.
8. Service Providers and International Processing
Some of our service providers may process or store information outside your province or outside Canada.
When information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, governments, regulators, or law-enforcement authorities in accordance with applicable law.
We seek to use reasonable contractual, organizational, and technical safeguards when engaging service providers.
9. Borrower Documents
Documents uploaded through GoodLoan may contain sensitive information.
GoodLoan uses restricted storage and access controls designed to prevent documents from being publicly accessible. Access is limited based on account ownership, employee responsibilities, and authorized business purposes.
We recommend that you upload requested documents only through the secure methods provided by GoodLoan and not send passwords, authentication codes, or unnecessary sensitive information by ordinary email.
10. Communications
We may contact you by email, telephone, SMS, or other methods you provide or authorize for purposes related to your account, application, verification, loan servicing, payment arrangements, document requests, security, customer support, or legally required notices.
GoodLoan currently uses Zoom Phone for certain telephone communications.
Where marketing communications are sent, we will provide applicable unsubscribe or preference-management options where required.
Transactional, servicing, security, or legally required communications may continue even if you opt out of marketing communications.
11. Cookies and Similar Technologies
GoodLoan.ca may use cookies and similar technologies for authentication, security, user preferences, website functionality, analytics, performance, fraud prevention, and other legitimate operational purposes.
Some cookies may be necessary for the website or borrower portal to function correctly.
Where legally required, additional consent or preference controls may be provided for non-essential cookies.
12. Information Security
GoodLoan uses administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse.
These safeguards may include authentication controls, multi-factor authentication for authorized staff, restricted database access, row-level security, encrypted communications, private document storage, audit logging, role-based access controls, access monitoring, and separation of borrower-facing and staff-facing permissions.
No electronic system can be guaranteed to be completely secure. You are responsible for protecting your password, email account, devices, and authentication credentials.
13. Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, regulatory, contractual, accounting, fraud-prevention, dispute-resolution, security, and recordkeeping requirements.
Different categories of information may have different retention periods.
Information subject to a legal hold, investigation, dispute, regulatory requirement, or other preservation obligation may be retained longer.
GoodLoan is continuing to formalize category-specific retention periods. Those periods should be reviewed and approved before production use where required.
14. Access, Correction and Privacy Requests
Subject to applicable law, you may have the right to request access to personal information GoodLoan holds about you and to request correction of inaccurate or incomplete information.
Certain information may not be changed after an application is submitted because GoodLoan may need to preserve an accurate record of what was originally submitted.
If a submitted application contains incorrect information, contact us so that we can determine the appropriate correction or amendment process.
You may also contact us regarding questions about consent, retention, complaints, or other privacy matters.
15. Automated and Third-Party Verification
GoodLoan may use automated systems and third-party verification tools to assist with fraud prevention, identity verification, application review, and related processes.
A third-party verification result does not by itself constitute loan approval.
Where manual review is required, GoodLoan may review verification discrepancies, potential screening matches, or other exceptions before determining the appropriate next step.
16. Children and Ineligible Users
GoodLoan lending services are intended only for persons who meet the eligibility and legal-capacity requirements applicable to the relevant product and jurisdiction.
We do not knowingly offer loans to persons who are legally unable to enter into the applicable agreement.
Your legal counsel should confirm the final age-of-majority wording for each province or territory in which GoodLoan operates.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When material changes are made, we may update the “Last updated” date and provide additional notice where appropriate or required.
18. Contact Us
For questions or requests relating to privacy, contact:
GoodLoan
Website: https://goodloan.ca
Email: [email protected]
Telephone: (437) 524-6683
Privacy Officer: Diwash Karki