Privacy Policy

This is the Privacy Policy of Kredua for its Pakistan edition (pages under /pk/ and content with the “pk-” prefix). It explains which personal data we collect, why we use it, with whom we share it and how you can exercise your rights. Pakistan has not yet enacted a general personal data protection statute as of the date of this policy; we therefore apply the principles of the Personal Data Protection Bill approved by the federal cabinet, the provisions of the Prevention of Electronic Crimes Act 2016 (PECA) and the Electronic Transactions Ordinance 2002 that protect your data, and, because the controller is established in Brazil, the Brazilian General Data Protection Law (Law 13,709/2018, LGPD). Where those rules differ, we apply the one that protects you more.

1. Who is responsible for your data

RR Digital (trading as Kredua), Brazilian company registration CNPJ , with its registered office at Rua Balbino Bento da Silva, 02, União dos Palmares/AL, CEP 57800-000, Brazil. Contact e-mail: [email protected].

Data protection officer: [email protected]. This is the channel for questions about this policy and for exercising your rights.

2. Personal data we collect

  • Data you give us: your name, e-mail address and, only when we ask for it expressly, your mobile number, when you answer a quiz, subscribe to our recommendations or write to us through the contact form. Also the answers you give in the quizzes (for example, the amount you are looking for, your employment situation, your income bracket or how you describe your repayment history), which do not include your CNIC number, bank details or any sensitive data.
  • Browsing data: IP address, approximate country, device and browser type, pages visited, source of the visit (UTM parameters) and cookie or similar identifiers, as described in section 9.
  • E-mail interaction data: opens, clicks and unsubscribes, when you receive our communications.

We do not collect sensitive personal data and we do not consult the eCIB or any credit bureau. The data you enter on a bank’s website when applying for a product is processed by that bank, not by Kredua.

3. Why we use your data

Primary purposes (necessary for the service you request):

  • To show you the site’s content and calculate the result of the quizzes.
  • To reply to your enquiries sent through the contact form or by e-mail.
  • To send you by e-mail the credit card, loan and money recommendations you agreed to receive when you ticked the box in the quiz or form.
  • To keep the site secure and prevent fraud and abuse.
  • To comply with legal obligations and respond to requests from competent authorities.

Secondary purposes (not necessary for the service; you may object to them at any time):

  • To measure audience and improve content and navigation.
  • To show advertising, including advertising based on your interests, through the partners listed in section 9.
  • To measure the results of our advertising campaigns on platforms such as Meta and Google.

4. Legal basis

We process your data on the basis of your consent (recommendation e-mails, advertising cookies), the performance of the service you request (quizzes, contact), our legitimate interest in keeping the site secure and measuring its audience, and compliance with legal obligations. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Automated decisions

The quiz result is calculated automatically from your answers, using fixed rules that match the product we review to your profile. It is a content recommendation, not a credit decision: it does not assess your creditworthiness, it does not consult any bureau and it has no legal or similar effect on you. Any credit decision is taken solely by the bank you apply to.

6. With whom we share your data

  • Service providers that process data on our behalf and under our instructions: hosting and content delivery, e-mail sending platform, analytics tools and the form and quiz infrastructure.
  • Advertising partners (Google, Meta and their advertising networks), which receive browsing and interaction data through cookies and pixels when you consent, as described in section 9.
  • Financial institutions: we do not send your quiz data or your e-mail address to the banks. When you click a link to an official website, you leave Kredua and the bank’s own privacy policy applies from then on.
  • Authorities, when required by law or by a valid order.

We do not sell your personal data.

7. International transfers

Kredua is operated from Brazil and uses providers located in Brazil, the United States and the European Union. Your data is therefore transferred outside Pakistan. We rely on contractual safeguards with each provider that require a level of protection equivalent to the one described in this policy, and we apply the LGPD rules on international transfers.

8. How long we keep your data

  • Contact and quiz data: while you remain subscribed to our communications and for up to 12 months after you unsubscribe or after your last interaction, for the record of your consent and its withdrawal.
  • Contact form messages: up to 24 months after the last reply.
  • Browsing and analytics data: up to 26 months, in aggregated or pseudonymised form where possible.
  • Data needed to meet a legal obligation or to defend a claim: for the applicable limitation period.

9. Cookies and similar technologies

We use strictly necessary cookies (security, form operation, remembering your cookie choice), analytics cookies (audience measurement) and advertising cookies and pixels (Google, Meta), which allow interest-based advertising and campaign measurement. Analytics and advertising cookies are set only after you accept them in the banner shown on your first visit; you can change your choice at any time from the banner or the cookie settings link in the footer, and through your browser settings. Blocking cookies does not prevent you from reading the site.

10. E-mail communications

We send recommendation e-mails only to people who have given us their address and accepted them. Every message carries an unsubscribe link, effective within 24 hours, and identifies Kredua as the sender. We do not send SMS marketing unless you have given us your number and accepted it expressly, in line with the Pakistan Telecommunication Authority rules on unsolicited messages.

11. Your rights and how to exercise them

You may ask us, at any time and free of charge, for confirmation that we process your data, access to it, correction of incomplete or inaccurate data, deletion of data that is unnecessary or processed without a valid basis, information about the parties with whom we share it, portability where technically feasible, and the withdrawal of your consent or objection to a secondary purpose. Write to [email protected] from the e-mail address you registered with, or from another address with an explanation that lets us confirm your identity. We reply within 15 days. If you are not satisfied with our answer, you may complain to the authority competent for data protection in Pakistan once it is established, to the Federal Investigation Agency for offences under PECA, or to the Brazilian National Data Protection Authority (ANPD), which supervises the controller.

12. Minors

Our content and quizzes are aimed at adults. We do not knowingly collect data from persons under 18; if we learn that we have done so, we delete it. If you believe a minor has given us data, write to the data protection officer.

13. Security

We apply technical and organisational measures proportionate to the risk: encryption in transit (HTTPS), access controls and logging, minimisation of the data we collect and contractual obligations on our providers. No system is completely secure; if a security incident is likely to cause you significant harm, we will inform you and the competent authorities as the law requires.

14. Changes to this policy

We may update this policy to reflect changes in the law, in our providers or in our services. The date of the last update is shown at the top of the page and, if the change is material, we will announce it on the site or by e-mail before it takes effect.

15. Contact

For anything related to this policy or to your personal data: [email protected]. For other matters: [email protected] or the form on the Contact Us page.

Last updated: 19/09/2026