Privacy Policy

Iberia Finance
Website: https://iberia-finance.com
Contact: [email protected]
Last Updated: January 1, 2026
Effective Date: January 1, 20261. IntroductionWelcome to Iberia Finance ("we," "us," "our," or "the Company"). This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use our website at https://iberia-finance.com, our mobile applications, and all related services (collectively, the "Services").We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner. This Privacy Policy is designed to comply with:General Data Protection Regulation (GDPR) (EU) 2016/679 and its 2026 amendments and interpretationsePrivacy Directive (2002/58/EC) as amendedCalifornia Consumer Privacy Act (CCPA/CPRA)Payment Services Directive (PSD2/PSD3) where applicableAnti-Money Laundering Directives (AMLD5/AMLD6)Other applicable data protection and financial services regulationsBy using our Services, you acknowledge that you have read and understood this Privacy Policy.2. Data Controller InformationIberia Finance is the Data Controller responsible for your personal data.Data Controller:
Iberia Finance
Data Protection Contact:
Email: [email protected]
Subject Line: "Data Protection Inquiry"EU Representative:
For EU/EEA data subjects, inquiries may be directed to our EU representative. Contact details are available upon request at [email protected]. Personal Data We Collect3.1 Information You Provide Directlya) Account Registration InformationFull name (first and last name)Email addressPhone numberDate of birthResidential addressNationality and country of residencePassword and security credentialsb) Identity Verification Information (KYC)Government-issued identification (passport, national ID, driver's license)Proof of address (utility bills, bank statements)Selfie photographs for biometric verificationTax identification numbersSource of funds documentationc) Financial InformationBank account details (IBAN, account numbers)Payment card informationTransaction historyIncome and employment informationInvestment preferences and goalsd) Communication DataCorrespondence with our support teamChat logs and call recordingsFeedback and survey responsesComplaint detailse) Additional InformationInformation provided during promotional activitiesReferral informationAny other information you choose to provide3.2 Information Collected Automaticallya) Technical DataIP addressDevice type and identifierOperating system and versionBrowser type and versionScreen resolution and settingsLanguage preferencesb) Usage DataPages visited and features usedTime and duration of visitsClick patterns and navigation pathsSearch queries within our ServicesError logs and performance datac) Location DataApproximate location based on IP addressGPS location (with your consent)Transaction location datad) Financial Behavioral DataSpending patterns and categoriesBudget adherenceSavings behaviorInvestment activity patterns3.3 Information from Third Partiesa) Identity Verification ProvidersVerification results and confidence scoresWatchlist and sanctions screening resultsPEP (Politically Exposed Person) statusb) Credit Reference AgenciesCredit scores and reportsCredit historyPublic records informationc) Fraud Prevention ServicesFraud risk scoresDevice reputation dataBehavioral analysis resultsd) Financial InstitutionsAccount verification resultsTransaction confirmationsPayment processing datae) Business PartnersReferral informationJoint marketing partnersAffiliate networksf) Public SourcesPublicly available informationSocial media (where permitted)Company registriesSanctions lists3.4 Cookies and Similar TechnologiesWe use cookies, pixels, web beacons, and similar technologies to collect information. For detailed information, please see our Cookie Policy below (Section 12).4. How We Use Your Personal Data4.1 Purposes and Legal BasesUnder GDPR Article 6, we process your personal data based on the following legal bases:PurposeLegal BasisDetailsAccount creation and managementContract performanceRequired to provide ServicesIdentity verification (KYC/AML)Legal obligationRequired by financial regulationsTransaction processingContract performanceCore banking functionalityFraud prevention and securityLegitimate interest / Legal obligationProtecting users and CompanyCustomer supportContract performance / Legitimate interestResponding to inquiriesService improvementLegitimate interestEnhancing user experienceMarketing communicationsConsentPromotional content (opt-in)Legal complianceLegal obligationRegulatory requirementsDispute resolutionLegitimate interest / Legal obligationHandling complaintsBusiness analyticsLegitimate interestUnderstanding usage patternsPersonalizationConsent / Legitimate interestTailored experienceCredit assessmentContract performance / Legitimate interestFor credit products4.2 Specific Processing Activitiesa) Account ManagementCreating and maintaining your accountProcessing transactionsProviding statements and recordsManaging your preferencesb) Regulatory ComplianceIdentity verificationAnti-money laundering (AML) checksCounter-terrorist financing (CTF) screeningSanctions screeningTax reporting (FATCA/CRS)Regulatory reportingc) Security and Fraud PreventionMonitoring for suspicious activityDetecting and preventing fraudProtecting against unauthorized accessConducting security auditsd) Service ProvisionFacilitating payments and transfersProviding budgeting and savings toolsOffering investment-related featuresEnabling multi-currency servicese) CommunicationSending transactional notificationsResponding to inquiriesProviding important updatesSending marketing (with consent)f) Analytics and ImprovementAnalyzing usage patternsImproving our ServicesDeveloping new featuresConducting research and surveysg) Legal and RegulatoryComplying with court ordersResponding to regulatory requestsEnforcing our Terms and ConditionsProtecting our legal rights4.3 Automated Decision-MakingWe may use automated decision-making, including profiling, for:a) Identity VerificationAutomated document verificationBiometric matchingLiveness detectionb) Fraud DetectionReal-time transaction scoringBehavioral analysisRisk assessmentc) Credit DecisionsAutomated creditworthiness assessmentRisk-based pricingYour Rights: You have the right to:Request human interventionExpress your point of viewContest automated decisionsObtain an explanation of the decisionTo exercise these rights, contact: [email protected]. Data Sharing and Disclosure5.1 When We Share Your DataWe may share your personal data with:a) Service ProvidersPayment processorsIdentity verification providersCloud hosting providersIT support servicesCustomer support platformsAnalytics providersb) Financial InstitutionsBanking partnersCard networks (Visa, Mastercard)Correspondent banksPayment scheme operatorsc) Regulatory and Government AuthoritiesFinancial regulatorsTax authoritiesLaw enforcement agenciesCourts and tribunalsAML/CTF authoritiesd) Fraud Prevention AgenciesCredit reference agenciesFraud prevention databasesIndustry fraud prevention bodiese) Professional AdvisorsLegal advisorsAuditorsConsultantsInsurersf) Business PartnersJoint marketing partners (with consent)Referral partnersAffiliate networksg) Corporate TransactionsIn case of merger, acquisition, or saleDue diligence purposesAsset transfers5.2 Data Sharing SafeguardsWhen sharing data, we ensure:Written agreements with data processorsAppropriate technical and organizational measuresCompliance with GDPR Article 28 requirementsConfidentiality obligationsPurpose limitation5.3 International Data Transfersa) Transfers Outside EU/EEAWhere we transfer personal data outside the EU/EEA, we ensure appropriate safeguards:Adequacy Decisions: Transfers to countries deemed adequate by the European CommissionStandard Contractual Clauses (SCCs): EU Commission-approved contract termsBinding Corporate Rules: For intra-group transfersCertification Mechanisms: Approved codes of conduct or certificationsDerogations: Explicit consent, contract necessity, or legal claimsb) Transfers to the United StatesFor transfers to the US, we rely on:EU-US Data Privacy Framework (where certified)Standard Contractual ClausesSupplementary measures where requiredc) Your RightsYou may request information about transfer safeguards by contacting: [email protected]. Your Rights Under GDPRAs an EU/EEA data subject, you have the following rights:6.1 Right of Access (Article 15)You have the right to:Confirm whether we process your personal dataObtain a copy of your personal dataReceive information about processing purposes, categories, recipients, retention, and your rightsHow to Exercise: Email [email protected] with "GDPR Access Request" in the subject line.6.2 Right to Rectification (Article 16)You have the right to:Correct inaccurate personal dataComplete incomplete personal dataHow to Exercise: Update your account settings or email [email protected] Right to Erasure / "Right to be Forgotten" (Article 17)You have the right to request deletion of your personal data when:Data is no longer necessary for the original purposeYou withdraw consent (where consent is the legal basis)Data is unlawfully processedLegal obligation requires erasureLimitations: We may retain data to comply with legal obligations (AML, tax, regulatory).6.4 Right to Restrict Processing (Article 18)You have the right to restrict processing when:You contest data accuracyProcessing is unlawful but you oppose erasureWe no longer need data but you need it for legal claimsYou object to processing pending verification6.5 Right to Data Portability (Article 20)You have the right to:Receive your data in a structured, commonly used, machine-readable formatTransmit your data to another controllerHave data transmitted directly where technically feasibleFormat: We provide data in JSON or CSV format.6.6 Right to Object (Article 21)You have the right to object to:Processing based on legitimate interestsDirect marketing (absolute right)Processing for scientific/historical research (in certain circumstances)6.7 Rights Related to Automated Decision-Making (Article 22)You have the right to:Not be subject to solely automated decisions with legal effectsRequest human interventionExpress your point of viewContest the decision6.8 Right to Withdraw ConsentWhere processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing.6.9 Exercising Your RightsHow to Submit a Request:Email: [email protected] Line: "GDPR Rights Request – [Right Type]"Include: Full name, email, account number, and specific requestResponse Timeline:Acknowledgment: Within 5 business daysFull Response: Within 30 days (extendable by 60 days for complex requests)Verification: We may request additional information to verify your identity.Cost: Free of charge, unless requests are manifestly unfounded or excessive.6.10 Right to Lodge a ComplaintYou have the right to lodge a complaint with your local supervisory authority:EU Supervisory Authorities:Find your authority: https://edpb.europa.eu/about-edpb/board/members_enLead Supervisory Authority: For cross-border processing, our lead authority is determined by our main establishment in the EU.7. Your Rights Under CCPA/CPRA (California Residents)California residents have additional rights:7.1 Right to KnowCategories of personal information collectedSources of informationBusiness purposes for collectionCategories of third parties with whom we shareSpecific pieces of personal information7.2 Right to DeleteRequest deletion of personal information, subject to legal exceptions.7.3 Right to CorrectRequest correction of inaccurate personal information.7.4 Right to Opt-Out of Sale/SharingWe do not sell personal information. To opt out of sharing for cross-context behavioral advertising, contact us.7.5 Right to Limit Use of Sensitive Personal InformationYou may limit use of sensitive personal information to necessary purposes.7.6 Right to Non-DiscriminationWe will not discriminate against you for exercising your rights.7.7 How to ExerciseEmail: [email protected]
Subject Line: "CCPA/CPRA Request"8. Data Retention8.1 Retention PeriodsData TypeRetention PeriodReasonAccount informationAccount duration + 5 yearsLegal/regulatory requirementsTransaction records5-10 yearsAML/tax regulationsKYC documents5 years after account closureAML requirementsCommunication records5 yearsDispute resolutionMarketing dataUntil consent withdrawnConsent-basedTechnical logs12 monthsSecurity/analyticsCookie dataPer cookie policyVaries by typeFraud prevention data5-7 yearsFraud prevention8.2 Retention PrinciplesWe retain data only as long as necessaryRetention periods comply with legal requirementsData is securely deleted or anonymized after retentionSome data may be retained for legal claims9. Data Security9.1 Security MeasuresWe implement appropriate technical and organizational measures:a) Technical MeasuresAES-256 encryption at restTLS 1.3 encryption in transitMulti-factor authenticationIntrusion detection systemsSecurity information and event management (SIEM)Regular penetration testingVulnerability scanningNetwork segmentationb) Organizational MeasuresEmployee background checksSecurity awareness trainingAccess control policiesIncident response proceduresBusiness continuity planningVendor security assessmentsData protection impact assessments (DPIAs)c) Physical MeasuresData center access controlsSurveillance systemsEnvironmental controlsSecure disposal procedures9.2 Data Breach ResponseIn case of a personal data breach:a) Internal ResponseImmediate containmentImpact assessmentRemediation actionsb) Regulatory NotificationSupervisory authority notified within 72 hours (where required)Documentation of breach detailsc) User NotificationAffected users notified without undue delay (if high risk)Clear description of breach and mitigation stepsd) Breach Contact
Report suspected breaches: [email protected]. Children's Privacy10.1 Age RequirementOur Services are not intended for individuals under 18 years of age.10.2 Data CollectionWe do not knowingly collect personal data from children under 18. If we become aware of such collection:We will delete the data promptlyWe will close the associated account10.3 Parental ContactParents/guardians who believe their child has provided data should contact: [email protected]. Marketing and Communications11.1 Marketing CommunicationsWith your consent, we may send:Product updates and new featuresPromotional offersNewslettersEvent invitationsPartner offers11.2 Opt-OutYou may opt out of marketing:Click "Unsubscribe" in emailsUpdate preferences in app settingsEmail: [email protected]Note: You cannot opt out of transactional/service messages.11.3 Push NotificationsManage push notifications in your device settings.12. Cookie Policy12.1 What Are CookiesCookies are small text files stored on your device when you visit websites.12.2 Types of Cookies We UseCookie TypePurposeDurationStrictly NecessaryCore functionalitySessionFunctionalRemember preferences12 monthsAnalyticsUsage statistics24 monthsMarketingTargeted advertising12 monthsSecurityFraud preventionSession12.3 Managing CookiesBrowser settings allow cookie controlDisabling cookies may affect functionalityCookie consent banner on first visit12.4 Third-Party CookiesWe may use third-party cookies from:Analytics providers (e.g., Google Analytics)Advertising networksSocial media platforms13. Changes to This Privacy Policy13.1 UpdatesWe may update this Privacy Policy to reflect:Legal changesService changesBest practice updates13.2 NotificationWe will notify you of material changes via:Email to registered addressIn-app notificationWebsite notice13.3 Effective DateChanges are effective upon posting unless otherwise stated.13.4 Continued UseContinued use after changes constitutes acceptance.14. Contact Us14.1 General InquiriesIberia Finance
1425 Harmony Ave
Austin, TX 73301
United StatesEmail: [email protected]
Support Hours: 24/714.2 Data Protection InquiriesData Protection Contact:
Email: [email protected]
Subject Line: "Data Protection Inquiry"14.3 EU RepresentativeFor EU/EEA data subjects, contact details for our EU representative are available upon request.14.4 ComplaintsIf unsatisfied with our response:EU: Contact your local supervisory authorityCalifornia: Contact the California Attorney GeneralOther: Contact relevant consumer protection agency15. Additional Information for Specific Jurisdictions15.1 European Union/EEAGDPR rights as described in Section 6Supervisory authority complaint rightsADR/ODR access for disputes15.2 United StatesCCPA/CPRA rights for California residentsState-specific privacy laws where applicableFTC consumer protection rights15.3 United KingdomUK GDPR rights (post-Brexit)ICO complaint rightsUK-specific data protection laws15.4 Other JurisdictionsLocal data protection laws applyContact us for jurisdiction-specific information16. DefinitionsTermDefinitionPersonal DataAny information relating to an identified or identifiable natural personData ControllerEntity that determines purposes and means of processingData ProcessorEntity that processes data on behalf of controllerProcessingAny operation performed on personal dataData SubjectIndividual whose personal data is processedConsentFreely given, specific, informed, unambiguous agreementLegitimate InterestBusiness interest that doesn't override individual rightsSupervisory AuthorityIndependent public authority for data protectionAutomated Decision-MakingDecisions made without human involvementProfilingAutomated processing to evaluate personal aspects17. Summary of Key Points We collect personal, financial, technical, and usage data
We use data to provide Services, comply with law, and prevent fraud
We share data with service providers, regulators, and partners
We protect data with encryption, access controls, and monitoring
You have rights to access, correct, delete, and port your data
We comply with GDPR, CCPA, and other privacy laws We retain data only as long as necessary You can contact us at [email protected]By using Iberia Finance Services, you acknowledge that you have read, understood, and agree to this Privacy Policy.Document Version: 1.0
Last Reviewed: January 1, 2026
Next Review: January 1, 2027Iberia Finance

[email protected]
https://iberia-finance.com