DRIVER, LLC handles personal information carefully and openly. This page sets out what we process when you use our digital lending service, the grounds we rely on, how we safeguard it, and the choices you have.
Information we collect
Identity & contact
Your name and residential address.
Email and phone number, including hashed forms used for verification and security.
Identity-document details supplied during onboarding.
Financial data
Payment-account details and transaction identifiers.
Application data: requested amount, declared income, existing obligations, and repayment history.
Verification imagery
Document and selfie photographs captured during the identity check.
A pass/fail signal indicating whether the image matches your application data.
Verification imagery is used only inside the identity-check flow. DRIVER does not pull face data from background device activity or from third parties.
How we use your information
Confirming who you are and opening access to service features.
Processing applications, disbursements, repayments, and service messages.
Detecting and preventing fraud, unauthorised access, and abuse of the platform.
Meeting obligations under consumer-protection, financial, and data-protection law.
Keeping the service and its infrastructure secure and reliable.
When we share it
DRIVER never sells or rents personal data. We share it only in these cases:
With vetted partners providing payment, hosting, verification, or security services — each bound by contractual data-protection duties.
With regulators, courts, or law-enforcement bodies where a law or binding order requires it.
With a successor entity in a merger or acquisition, where equivalent protections carry over.
Verification imagery is never shared for marketing, advertising, or analytics unrelated to your identity check.
How long we keep it
Account and service records are kept for as long as needed to run the service and satisfy recordkeeping rules.
Financial records are retained for the periods set by applicable regulation.
Verification imagery is deleted within 30 days of collection unless the law demands longer.
How we protect it
Encrypted channels for data in transit and at rest.
Role-based access controls that limit data to those who need it.
Regular security reviews and a defined incident-response process.
Your rights
Depending on applicable law, you may access, correct, or request deletion of your personal data, or ask us to restrict how we process it. To exercise any of these, write to [email protected].
Cross-border processing
Some operational functions rely on external providers who may sit in other countries. Where personal data crosses a border, we require appropriate safeguards consistent with applicable data-protection law.
Minors
The service is intended for adults aged 18 and over. If you believe a minor's data has been submitted without consent, contact us at [email protected] and we will remove it.
Changes to this policy
We may revise this policy from time to time. When we do, we update the effective date at the top of the page. Continuing to use the service after a change means you accept the revised policy.