Privacy Policy | PandaLoanApp.com

Overview & Scope

PandaLoanApp.com ("the Site," "we," "us," or "our") is owned and operated as an independent consumer finance review and comparison website. This Privacy Policy describes how we handle personal information collected through our website at pandaloansapp.com.

By using our Site, you consent to the data practices described in this Policy. If you do not agree, please discontinue use of the Site.

What this Policy does NOT cover:

Third-party lender websites you may visit after clicking outbound links
The APIdiamond loan form provider — see their privacy policy
Social media platforms where our content may be shared
Any service operated by Panda Loan / PandaLoans.org (we are an independent review site, not affiliated)

Information We Collect

2.1 Information You Provide Directly

If you contact us via email or feedback forms, we may collect:

Your name (if voluntarily provided)
Email address
The content of your message
Any other information you choose to share

2.2 Information Collected Automatically

When you visit our Site, certain technical information is collected automatically:

Data Type	What It Includes	Purpose
Usage Data	Pages visited, time on page, click paths	Improve content
Device Info	Browser type, screen size, OS	Optimize display
IP Address	Approximate location (city/state)	Geo-relevant content
Referrer	Site you came from	Marketing analytics
Cookies	Session identifiers, preferences	Functionality

2.3 Information NOT Collected

We do NOT collect: Social Security numbers, bank account details, credit card information, loan application data, FICO scores, employment income, or any financial details. Loan applications are processed entirely by the third-party APIdiamond form provider and the lenders you may be matched with.

How We Use Your Data

We use collected information for the following purposes only:

Analytics & improvement: Understanding which pages are useful and identifying areas to improve
Content personalization: Showing relevant articles based on what you've previously read
Security: Detecting fraud, bot traffic, and security threats
Communication: Responding to direct inquiries you send us
Legal compliance: Meeting obligations under applicable law
Service optimization: Ensuring the Site works correctly across devices

We do not use your data for: profiling for advertising on third-party platforms, selling to data brokers, automated decision-making that affects you legally, or any purpose not disclosed in this Policy.

Cookies & Tracking Technologies

We use cookies and similar technologies to provide and improve our Site. You can disable cookies through your browser settings, but some features may not work correctly.

Types of Cookies We Use

Essential Cookies (Strictly Necessary): Required for the Site to function. Cannot be disabled. Include: session identifiers, security tokens.
Analytics Cookies (Performance): Help us understand how visitors interact with our content. Google Analytics is our primary tool.
Functionality Cookies (Preference): Remember your preferences such as theme, font size, or recent searches.
Marketing Cookies: Used by advertising partners to show relevant ads. May be set by third-party affiliate networks.

Do Not Track

Some browsers send a "Do Not Track" (DNT) signal. We currently do not respond differently to DNT signals because there is no industry consensus on how to interpret them. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.

Third-Party Services

We use the following third-party services that may collect data subject to their own privacy policies:

Service	Purpose	Privacy Policy
Google Analytics 4	Website analytics	View
APIdiamond	Loan application form	View
Pexels CDN	Stock photo hosting	View
Affiliate Networks	Referral tracking	Varies — see lender sites

Data Sharing

We do not sell your personal information. We may share data in these limited circumstances:

Service providers: Companies that help operate our Site (hosting, analytics)
Legal compliance: When required by law, court order, or government investigation
Business transfer: In connection with merger, acquisition, or asset sale (with notice)
Protection: To prevent fraud, abuse, or illegal activity
Consent: When you've given explicit permission

Data Security

We implement industry-standard security measures to protect your data:

256-bit SSL/TLS encryption for all data in transit
Secure server infrastructure with regular security patching
Access controls limiting employee data access
Regular security audits and vulnerability testing
Incident response procedures for any data breach

Important: No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain data only as long as necessary:

Analytics data: Up to 26 months (Google Analytics default)
Direct emails: Up to 2 years after resolution
Cookies: Vary by type — session to 13 months
Server logs: 90 days for security purposes

You may request deletion of your data at any time by contacting us (see Contact section).

Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the following rights regarding your personal data:

European Union Residents (GDPR)

Right to access: Request a copy of data we hold about you
Right to rectification: Correct inaccurate data
Right to erasure: Request data deletion ("right to be forgotten")
Right to restrict processing: Limit how we use your data
Right to data portability: Receive your data in machine-readable format
Right to object: Object to processing for marketing
Right to withdraw consent: Where processing is based on consent

California Residents (CCPA / CPRA)

Right to know what personal information is collected
Right to delete personal information
Right to opt-out of the sale of personal information (we do not sell data)
Right to non-discrimination for exercising privacy rights
Right to correct inaccurate personal information

To exercise any of these rights, see the Contact section below. We will respond within 30 days (GDPR) or 45 days (CCPA).

Children's Privacy

Our Site is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. Loan products discussed on our Site are only available to adults aged 18 and older.

If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it.

International Users

Our Site is operated from the United States and intended primarily for US-based borrowers. If you access our Site from outside the United States, your data will be transferred to and processed in the US.

By using our Site, you consent to this transfer. We comply with applicable cross-border data transfer regulations including GDPR Standard Contractual Clauses where required.

Policy Changes

We may update this Privacy Policy from time to time. Material changes will be communicated by:

Updating the "Last Updated" date at the top of this page
Posting a notice on the homepage for material changes
Sending an email notification (if you've subscribed to updates)

Your continued use of the Site after changes take effect constitutes acceptance of the revised Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Officer

📧 Email: privacy@pandaloansapp.com

📬 Mail: PandaLoanApp.com Privacy Team, Editorial Office

⏱️ Response time: Within 5 business days for general inquiries; 30 days for GDPR requests; 45 days for CCPA requests.