Onlend Website Privacy Policy

ONEZ FOUNDATION, a foundation established under the laws of Panama, is responsible for the website processing described in this policy. “We”, “us” and “our” mean ONEZ FOUNDATION. Our postal address is 50th Street, P.H. Plaza 2000, 17th Floor, Province of Panama, Republic of Panama. For privacy questions or requests, contact info@onlend.io

This policy covers the website and related communications. It does not cover independently operated lending applications built using Onlend or other third-party services, which have their own privacy arrangements.

You provide contact and project information when you submit a form or communicate with us, including your name, work email, project or company website, proposed use case and correspondence. Please do not submit sensitive information through the enquiry form.

Our website and its hosting or security providers may also process technical information, including IP addresses, browser and device details, request timestamps, security logs and information used to distinguish legitimate visitors from automated traffic. We receive data directly from you, from your browser and from providers supporting the website.

We use enquiry information to respond to you, assess potential integrations or partnerships, organise pre-launch discussions and manage related communications. We use technical information to deliver and secure the website, prevent spam and misuse, and diagnose faults. We may also process data to meet legal duties or establish, exercise or defend legal claims.

We process data only on a basis permitted by applicable law. Depending on the circumstances, this may include consent, steps you request before entering a contract, legal obligations, or legitimate interests in managing enquiries and protecting the website where that ground is available and your rights do not override those interests. Where consent is required, we request it.

Providing enquiry information is voluntary, but without the required contact and project details we may be unable to respond or assess your request. Registering your interest does not itself authorise unrelated marketing. We send promotional communications only where permitted by law and provide a way to unsubscribe.

The enquiry form uses Google reCAPTCHA to help prevent spam and abuse. It may process device, browser, network and interaction information and set cookies for its security assessment. See Google’s Privacy Policy at https://policies.google.com/privacy and reCAPTCHA information at https://developers.google.com/recaptcha.

We do not use analytics cookies, advertising cookies, tracking pixels, web beacons or similar technologies for audience measurement, profiling, behavioural advertising or indirect marketing on this website. We do not operate advertising networks on the website and do not disclose browsing data to advertising networks or data brokers.

The website does not set first-party cookies for analytics or marketing purposes. Web fonts are served from our own infrastructure, so visiting the website does not generate a request to a third-party font provider. Apart from the reCAPTCHA components described above, the website does not load third-party scripts, tags or tag-management tools.

We obtain prior consent for non-essential cookies or similar technologies where required by law. Browsing the website or submitting an enquiry does not itself constitute consent to optional tracking. Browser controls can restrict cookies, although this may affect the form or security checks.

We share personal data only as reasonably necessary with providers supporting website hosting, security, form delivery, email and enquiry management, and with professional advisers. Relevant personnel and contractors receive access only as needed for their work. Providers acting on our behalf must process data under appropriate confidentiality, security and data-protection arrangements.

We may disclose data where required by law or lawfully necessary to protect rights or investigate misuse. We do not sell personal data.

Personal data may be processed in Panama and in other countries where our providers or authorised personnel operate. Where applicable law restricts an international transfer, we use a permitted transfer mechanism and required safeguards, including contractual protections where appropriate. Contact us for information about relevant recipients, processing locations and safeguards.

We retain enquiries and correspondence for as long as reasonably needed to respond and pursue the relevant discussions or business relationship. We periodically review these records and delete or anonymise information no longer needed. Technical and security records are kept for operational needs and incident investigation. Legal requirements, disputes or claims may justify longer retention; access to retained data remains restricted.

We use technical and organisational safeguards proportionate to the information and risks, including access restrictions and appropriate provider arrangements. No online system or transmission can be guaranteed completely secure.

Subject to applicable law, you may request confirmation of processing, access, correction, deletion or restriction of your personal data, object to certain processing, and request portability where available. You may withdraw consent without affecting processing lawfully carried out before withdrawal. You may object to direct marketing at any time.

Use the privacy contact in section 1 to make a request or raise a concern. We may reasonably verify your identity and will respond within the applicable legal period. Rights may be subject to lawful exceptions, which we will explain where relevant. You may also complain to Panama’s Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI), or another competent data-protection authority where applicable.

Links, integrations or references to third-party applications do not extend this policy to their independent processing. Review their notices before providing personal data. We remain responsible for our own processing and disclosures.

The website’s project and partnership enquiries are intended for adults. If you believe a child has provided personal data to us, please contact us so we can take appropriate action.

We may update this policy as the website or our processing changes. We will publish the updated version with its revision date and provide additional notice or obtain consent where required. New live services or interfaces may require additional privacy information before personal data is collected.