PDPA Compliance

Personal Data Protection Act (PDPA) Compliance

LendKaki Loan Match is committed to protecting your personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA).

About PDPA

The Personal Data Protection Act 2012 (PDPA) is Singapore's data protection law that governs the collection, use, and disclosure of personal data by organizations. As a loan comparison platform operating in Singapore, we are fully committed to complying with all PDPA requirements to protect your personal information.

Your Rights Under PDPA

Right to Access

You have the right to request access to your personal data that we hold, and to obtain information about how it has been used or disclosed within the past year.

Right to Correction

You may request correction of any personal data that is inaccurate, incomplete, or outdated.

Right to Withdraw Consent

You may withdraw your consent for us to collect, use, or disclose your personal data at any time by contacting our Data Protection Officer.

Right to Erasure

Upon request, we will delete your personal data unless we are required by law to retain it or have other legitimate grounds for retention.

Data Collection & Purpose

We collect and use your personal data for the following purposes:

  • Matching you with suitable licensed lenders based on your loan requirements
  • Communicating loan offers, updates, and relevant information
  • Verifying your identity and eligibility for loan products
  • Improving our services and user experience
  • Complying with legal and regulatory requirements
  • Preventing fraud and ensuring platform security

Security Measures

Encryption

256-bit SSL encryption for all data transmission

Access Control

Strict access controls limiting data access to authorized personnel only

Secure Storage

Personal data stored in secure, encrypted databases

Regular Audits

Periodic security assessments and vulnerability testing

Staff Training

All staff undergo mandatory data protection training

Incident Response

Established procedures for data breach notification and response

Data Retention Policy

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Loan application data is typically retained for 7 years in accordance with Singapore's regulatory requirements. After this period, your data will be securely deleted or anonymized.

Third Party Disclosure

We may share your personal data with the following categories of third parties:

Partner Lenders

Banks regulated by MAS and licensed moneylenders regulated by the Ministry of Law (Minlaw), to process your loan application.

Service Providers

Third-party service providers who assist us in operating our platform (e.g., hosting, analytics).

Regulatory Authorities

Government agencies and regulators when required by law or to comply with legal obligations.

Contact Our Data Protection Officer

If you have any questions about our PDPA compliance, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact our Data Protection Officer.

Last updated: January 2026