Privacy Policy
How OLAI collects, uses, shares and protects personal data.
Last updated: 28 September 2026
This policy explains data handling on olai.az. OLAI is a financial-product information and comparison platform, not a bank, non-bank lender or pawnshop.
1. Controller and contact
Processing is organised by the administrator of olai.az. Access, correction, deletion and withdrawal requests may be sent to info@olai.az.
2. Data collected
A credit or pawnshop enquiry may include name, phone, optional email, city, requested amount and term, income and employment indicators, collateral type and a note. Advertising enquiries may include company, contact person, email, phone, budget and message. Reviews include name, rating and text.
Security and analytics data may include URL, device and browser, language, screen size, source and UTM parameters, session identifiers and interaction signals. We aim not to retain a full IP permanently in analytics reports; a short-lived or one-way identifier may be used for security and rate limiting. The site does not request card numbers, PINs or OTPs.
3. Purposes
Data is used to accept an enquiry, route it to a suitable financial organisation, contact the user, manage status, prevent abuse, measure service operation and acquisition, answer lawful requests and protect claims.
Data is not sold for incompatible purposes. Marketing messages require a separate lawful basis or consent.
4. Basis and consent
A required form checkbox records the user’s decision to permit processing for the purposes in this policy and the separate consent. Withdrawal stops future consent-based processing but does not automatically invalidate earlier lawful acts. Some records may remain for legal obligations and claims.
5. Third-party disclosure
Contact and application data may be sent to the selected organisation or a partner bank, non-bank lender or pawnshop shown on the platform and suitable for the enquiry, so it can review and contact the user. After receipt, that partner may act as a separate controller under its own policy and law.
Hosting, email, security and analytics providers process only what is necessary. Data may be disclosed to an authorised public body when legally required.
6. Retention and security
Data should not be retained longer than required for purpose, security, reporting and legal claims. Application status, withdrawal, disputes and obligations are considered. Access is role-limited, transmission uses HTTPS, and backups and logs may be maintained. No internet method guarantees zero risk.
7. Your rights
Subject to law, you may request information about data and source, a copy, correction, restriction or objection, deletion and withdrawal. State the name, application phone/email and request; identity verification may be required to protect another person’s data.
8. Children and changes
The platform is not intended for independent financial applications by minors. This policy may change with processes or law; the current date is shown above.