Privacy Policy

Effective Date: 05/06/2025

At LEND LB, your privacy is a priority. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the European Union’s General Data Protection Regulation (GDPR) and French data protection laws.

1. Data controller 

LEND LB is the data controller responsible for processing your personal data.

2. Personal data we collect 

• Identity and contact data: name, email, phone, address, date of birth, identity documents (for KYC/AML compliance)

• Financial data: bank account and payment details to process investments

• Technical data: IP address, browser type, device information, login data

• Usage data: interactions with our platform for service improvement and security

3. Legal Basis for Processing 

We process your data based on the following lawful grounds:

• Consent: Where you provide explicit consent (e.g., marketing communications)
• Contractual necessity: To fulfill our agreement with you (e.g., processing investments)
• Legal obligation : To comply with regulatory requirements such as anti-money laundering (AML) laws
• Legitimate interests: For platform security, fraud prevention, and business operations, balanced against your rights

4. How we use your data 

• To verify your identity and comply with KYC/AML regulations
• To process and manage your investments and payments
• To communicate important information about your account and projects
• To improve the platform’s functionality and user experience
• To ensure platform security and prevent fraud

• To comply with legal obligations

5. Data sharing 

Your data may be shared with:

• Project developers (limited to information necessary for investment management)
• Payment processors for transaction handling
• Regulatory authorities when legally required
• Service providers who assist us under strict confidentiality agreements

We do not sell or rent your personal data.

6. Data retention 

We keep your personal data only as long as necessary to fulfill the purposes above or as required by law. Typically, data related to your investments will be retained for at least 10 years to comply with financial regulations.

7. Payment processing 

When you invest through our platform, your payment details are processed securely by a licensed third-party payment service provider, compliant with EU regulations (e.g., PSD2). We do not store your sensitive payment information on our servers. For more details on how your payment data is handled, please refer to the payment provider’s privacy policy.

8. Your rights under GDPR 

You have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request erasure of data (“right to be forgotten”) where applicable
• Restrict or object to certain processing activities
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time (without affecting the lawfulness of prior processing)
• Lodge a complaint with the French Data Protection Authority (CNIL) at https://www.cnil.fr

To exercise these rights, contact us at: [email protected]

9. Security measures 

We implement appropriate technical and organizational measures, including encryption and access controls, to protect your data against unauthorized access, alteration, or disclosure.

10. Updates to this policy 

We may update this policy periodically. Changes will be posted on this page with an updated effective date.