Privacy Policy

1. Data controller

De Finanzas Capital, with offices at 15 avenida 5-50 zona 15, Spazio Vista Hermosa 3 building, office 1604 floor 16, Guatemala City, is the controller responsible for the personal data collected through our digital channels. For any questions related to this policy, you can write to us at info@definanzasgt.com.

2. Information we collect

We collect different types of information depending on how you interact with us:

• Identification data: full name, national ID or passport number, tax ID, date of birth, address, and contact details (phone, email).
• Financial and employment data: income, credit history, banking information, business references, employment or business data, and the amount and type of financial service you're requesting.
• Identity verification documents: photographs of your identification document and, in the case of the mobile app, real-time photos or video (selfie) for biometric verification (liveness check), as part of our fraud prevention and regulatory compliance processes.
• Technical and device information: IP address, device type, operating system, unique device identifiers, app usage data, and error logs.
• Location information: with your authorization, the mobile app may access your approximate or precise location for fraud prevention and identity verification purposes.
• Communications: the content of the messages you send us through our contact form, email, or when booking a meeting.

3. How we use your information

We use your information to:

• Evaluate and process your applications for factoring, business loans, microloans, financial leasing, or salary advances.
• Verify your identity and prevent fraud, identity theft, and money laundering.
• Manage the contractual relationship, including collection and follow-up on the obligations you take on.
• Communicate with you about the status of your application, your account, or our services.
• Comply with legal and regulatory obligations applicable to the financial sector in Guatemala.
• Improve our website, mobile app, and services, including usage analysis and bug fixing.
• Send you commercial or promotional communications, only if you have given us your consent to do so; you can withdraw this consent at any time.

4. Legal basis and consent

We process your personal data based on: (i) your express consent, given by accepting this policy and using our services; (ii) the necessity to perform the contract or pre-contractual relationship you request with us; and (iii) compliance with applicable legal obligations, including anti-money laundering and counter-terrorism financing regulations.

5. Who we share your information with

We do not sell your personal information. We may share your data with:

• Credit bureaus and risk information centers, to evaluate your credit history.
• Financial partners, investors, or funders involved in financing the transactions you request.
• Technology service providers who support us with data hosting, sending communications (email, SMS), and payment processing, who are contractually required to protect your information.
• Government or regulatory authorities, when required by law or to address legal proceedings.
• Legal, accounting, or audit advisors, to the extent necessary to comply with our obligations.

6. International data transfers

Some of our technology service providers (for example, cloud hosting services) may be located outside Guatemala. In these cases, we take reasonable steps to ensure your information receives an adequate level of protection, requiring such providers to meet security and confidentiality standards equivalent to those described in this policy.

7. Data retention

We retain your personal information for as long as your relationship with us lasts and, afterward, for the period necessary to comply with legal, accounting, tax, or regulatory obligations, or to address potential claims. Once these periods have elapsed, we securely delete or anonymize the information.

8. Information security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, loss, alteration, or improper disclosure, including encryption of sensitive data, access controls, and system monitoring. However, no system is completely infallible, so we also recommend that you protect your own access credentials.

9. Mobile app permissions

Our mobile app may request the following permissions, always explicitly and with your authorization:

• Camera: to capture photos of identification documents and perform biometric verification (selfie / liveness check).
• Storage / photo library: to attach supporting documents to your application (for example, bank statements or receipts).
• Push notifications: to inform you about the status of your application, payment reminders, and service updates.
• Location: to strengthen fraud prevention and identity verification processes.
• Device biometric data (fingerprint / facial recognition): if you choose to enable biometric login, this information is processed and stored locally on your device according to the operating system's standards, and is not stored by DFC.

You can manage or revoke these permissions at any time from your device settings, although some may be required for certain app features to work.

10. Cookies and similar technologies

Our website uses cookies and similar technologies to improve your browsing experience, remember your preferences, and understand how the site is used. You can configure your browser to reject cookies; please note this may affect some site functionality.

11. Your rights

To the extent permitted by applicable law, you may request that we:

• Give you access to the personal data we hold about you.
• Correct inaccurate or outdated data.
• Delete your data, when it is no longer necessary for the purposes for which it was collected or when there is no legal obligation to retain it.
• Stop using your data for direct marketing purposes.
• Allow you to withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to that withdrawal.

To exercise any of these rights, you can write to us at info@definanzasgt.com. We will respond to your request within a reasonable time.

12. Children's privacy

Our services are directed exclusively at adults with the legal capacity to enter into contracts. We do not knowingly collect information from minors. If we become aware that we have collected data from a minor without appropriate consent, we will delete it.

13. Changes to this policy

We may update this Privacy Policy periodically to reflect changes in our practices, our services, or applicable law. We will post any changes on this same page along with the last updated date. We recommend reviewing it periodically.

14. Contact

If you have questions, comments, or requests related to this Privacy Policy or the processing of your personal data, you can contact us at:

• De Finanzas Capital
• 15 avenida 5-50 zona 15, Spazio Vista Hermosa 3 building, office 1604 floor 16, Guatemala City
• info@definanzasgt.com