Privacy Policy

We collect personal identification information only when you provide it yourself, through one of the two forms on this website. The loan application form asks for the amount you want to borrow; your name, telephone number, date of birth, email address and home address (including the date you moved in); whether you have borrowed from Express Cash before; your source of income and related details (such as your employer, your supervisor's name, your work telephone number, how often you are paid, your start date and your next pay date); whether you have declared bankruptcy; and one personal reference (first and last name, telephone number and relationship to you). If your address is in Quebec, the form also asks whether you rent your home, your gross annual income, and your monthly housing, electricity, car and other payments, which the lender uses to assess your ability to repay. The contact form asks for your name, your email address and your message, and notes the language of the page you used.

We use this information to review your loan application and verify your bank account through CreditBook, to answer the messages you send us, and to protect our forms against abuse. We do not use it for any other purpose without your consent.

We will collect personal identification information from users only if such information is voluntarily submitted. However, refusing to provide the information a form requires means that we cannot review your application or answer your message.

Apart from these forms, the optional tools described in the Analytics and advertising tools section collect technical information through cookies and similar technologies, only if you accept them.

We may also collect non-personal identification information about users whenever they interact with our website. This information may include the browser name, the type of device, and technical information about the user's means of connection to our site, such as the operating system, the Internet service provider, and other similar information. Apart from what a browser sends to any website with each request, this information is collected only by the optional tools described below, and only if you accept them.

When you first visit this website, a banner asks you to accept or reject optional cookies. You can reject all of them, accept all of them, or choose by category (Analytics and Marketing). Nothing from the tools below loads, and none of them receives anything from your browser, until you accept the matching category.

Analytics category: Google Analytics 4 (Google). Marketing category: Google Ads, for conversion measurement and remarketing (Google), and Meta Pixel (Meta). When both categories are accepted, three more tools load: Google Tag Manager (Google), Microsoft Advertising Universal Event Tracking (Microsoft) and Microsoft Clarity (Microsoft), which our Google Tag Manager container loads.

These tools use cookies and similar identifiers to recognize your browser, count visits, and measure which ads lead to an application. Their providers also receive what any browser sends with a request: your IP address, details about your browser and device, and the address of the page you visit. Microsoft Clarity also records how you use our pages (clicks, scrolling and pointer movements) to produce heatmaps and session recordings; the loan application page is marked so that Clarity masks its content. The events our site itself sends to these tools carry only fixed labels, such as a click on an Apply button, reaching the second step of the form, or the outcome of sending an application; they never carry the answers you type, the amount you request or any identifier.

This site uses the Google Ads remarketing service to advertise Express Cash on third-party websites (including Google) to previous visitors of our site, and only to visitors who accepted the Marketing category. This means we may advertise to previous visitors who have not completed an application. These ads could appear on a Google search results page or on a site within another network. Third-party vendors, including Google, use cookies to serve ads based on previous visits to the Express Cash website. The information collected will be used in accordance with this privacy policy and the privacy policies of Google, Meta and Microsoft.

A few items are stored in your browser only to run the site: your cookie choice (kept in your browser's local storage and never sent to our server), your light or dark display preference, and, if you use the address search, a security cookie that lasts one hour. The other cookies come from the tools above, are listed by category in the preferences window, and are set only after you accept their category.

You can change or withdraw your consent at any time. Select Cookie settings in the footer, in the Legal column, at the bottom of every page of this website (in French: Paramètres des témoins, under Mentions légales). The preferences window lets you turn each category off and save your choice, or select Reject all. When you withdraw a category, the page reloads so that the tools stop, and the cookies of those tools that your browser lets our site reach are deleted. A few cookies are set on the providers' own domains (such as fr from Meta, IDE from Google and MUID from Microsoft); only your browser settings can delete them.

A choice is valid for up to 395 days. We ask for your choice again when it is older than that, and when the list of cookies or their purposes changes. A choice that has expired, or that an updated list has made obsolete, is no longer used, but it stays in your browser's local storage until your next choice replaces it or you clear this website's data in your browser.

When you send the application form, our server checks the security challenge and then sends your answers directly to CreditBook, the loan platform that Express Cash uses to review applications. This website does not keep a copy of your application.

After you send it, when CreditBook's platform offers a secure bank verification for your application, this website redirects you to it; otherwise it shows a confirmation message and does not redirect you. The bank verification is part of the lender's own process and takes place on CreditBook's platform, not on this website. This website never asks for your online banking credentials.

A message sent through the contact form is delivered by email to info@expresscash.ca through Amazon Simple Email Service (Amazon Web Services), in its Montréal region, Canada. The message is then held in Express Cash's mailbox so that we can answer you; this website does not store it.

The address field of the application form can suggest addresses as you type. This feature uses the Google Places API (Google). Your browser does not contact Google for it: it sends what you type to our server, which asks Google. From three characters, our server sends Google the text you typed, a restriction to Canada, the language of the page and a random session identifier; if you pick a suggestion, it also sends that suggestion's identifier to get the address details. Your IP address, your cookies and your browser details are not sent to Google, and our server does not keep the text you typed.

This feature is available only after a security check (Cloudflare Turnstile), which sets a technical cookie that lasts one hour. You can ignore the suggestions and type your address yourself.

Our forms (application, contact and address search) are protected by Cloudflare Turnstile (Cloudflare, Inc., United States). Your browser loads a script from Cloudflare, and Cloudflare receives information about your browser and your visit to decide whether you are a person. When you send a form, our server sends Cloudflare the Turnstile token and your IP address to have it verified.

To limit abuse, our server also keeps counters by IP address (the number of recent requests). These counters are held only in the server's memory and never written to disk, they count requests over periods between one minute and one hour, and they are lost when the server restarts. The logs of our application record only a fixed outcome name (for example, that a request was sent, refused or limited), a status code and, for loan applications, the reference number assigned by CreditBook; they never contain your IP address, your answers, your messages or the addresses you type.

This website runs on a virtual server rented from OVHcloud and located in Quebec, Canada.

We adopt rigorous data collection, storage, and processing practices, along with appropriate security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

Data exchanged between your browser and this website is transmitted over an encrypted HTTPS connection (TLS).

We do not sell, trade, or rent users' personally identifiable information to third parties. We share personal information only with the providers needed for the purposes described in this policy, and only the information each one needs.

These providers receive personal information through this website, each for one purpose: CreditBook, to review your loan application and verify your bank account; Amazon Web Services (Amazon SES), to deliver the contact form's messages to our mailbox; Cloudflare, to check that our forms are used by people (Turnstile); Google (Places API), to suggest addresses in the application form; and, only if you accept the matching category in the banner, Google (Google Analytics, Google Ads and Google Tag Manager), Meta (Meta Pixel) and Microsoft (Microsoft Advertising and Microsoft Clarity), to measure the use of the site and our advertising. OVHcloud hosts the server on which this website runs. No other third party receives personal information from this website.

Your information is processed in the following places. In Quebec: this website's server (OVHcloud). In Canada: CreditBook, which receives loan applications on a platform hosted in Canada (the connection to it passes through Cloudflare's network), and Amazon Web Services (Amazon SES), in its Montréal region. In the United States: Cloudflare (security check on our forms), Google (address search; Google Analytics, Google Ads and Google Tag Manager), Meta (Meta Pixel) and Microsoft (Microsoft Advertising and Microsoft Clarity). The analytics and advertising tools of Google, Meta and Microsoft receive information only if you accept them.

Communicating personal information outside Quebec, whether to another province or to another country, is governed by a privacy impact assessment, as the Act respecting the protection of personal information in the private sector requires, and by a written agreement that takes its results into account.

We keep personal information only as long as needed for the purposes for which it was collected, then we destroy or anonymize it. This website itself keeps no copy of your application, of your messages or of the addresses you type: it passes them on and logs only fixed outcome names. The counters used against abuse exist only in the server's memory and are lost when it restarts.

Your cookie choice is valid for up to 395 days. Its record stays in your browser's local storage, even after it expires, until a new choice replaces it or you clear this website's data in your browser. A contact message is kept in Express Cash's mailbox, and an application with CreditBook, for as long as needed to follow up on your request and to meet our legal obligations.

You have the right to: access the personal information we hold about you and obtain a copy of it; have it corrected when it is inaccurate, incomplete or equivocal; withdraw your consent to the use or communication of your information; receive your computerized personal information in a structured, commonly used technological format, or have it sent to another organization you name (portability); and ask that the dissemination of your personal information cease, or that any hyperlink attached to your name be de-indexed, where the law allows.

Withdrawing your consent to cookies takes one click in Cookie settings (see above). For any other request, write to the person in charge of the protection of personal information, the web data manager named under Contact information. We reply within 30 days of receiving your request. Withdrawing your consent to the use of the information in your application may prevent us from continuing to process it.

To report an incident that affects your information, or to make a complaint about how we handle it, write to info@expresscash.ca, for the attention of the person in charge of the protection of personal information.

If a confidentiality incident involves a risk of serious injury, we notify the people concerned and the Commission d'accès à l'information du Québec, as the law requires. You may also file a complaint with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) if you believe your rights have not been respected.

Users may find links on our website to sites and services of our partners, suppliers or other third parties, such as the independent review platform Trustpilot, the client portal and CreditBook's own application form (the last two are served from CreditBook's platform on Express Cash addresses). We do not control the content or links that appear on these sites, and we are not responsible for the practices employed by Web sites linked to our site. In addition, these sites or services, including their content and links, may change from time to time. These sites and services may have their own privacy policies and customer service policies. Your browsing and interaction on any other Website, including sites linked to our site, are subject to the terms and policies of those sites.

Trustpilot reviews appear on this website as text and links only: no Trustpilot script runs here, and Trustpilot receives information only if you follow its link.

Express Cash reserves the right to update this privacy policy at any time. The date of the last update appears at the top of this policy. We encourage users to visit this page regularly to stay informed of any changes and of the measures we take to protect the personal information we collect. You acknowledge that it is your responsibility to check this Privacy Policy periodically for changes.

By using this Web site, you signify your acceptance of this Privacy Policy and the associated Terms of Service. If you do not agree to this policy, please do not use our Website. Your continued use of the Web site following the posting of changes to this policy will be considered acceptance of those changes. Your consent to the optional analytics and advertising tools is a separate choice: it is given only through the cookie banner and can be withdrawn at any time. The application form asks you to accept the terms of use and this privacy policy before you send it.