Evlo App Privacy & Cookie Policy.

At Evlo, we're committed to protecting your personal information and being transparent about how we use it. This policy explains what data we collect when you use our customer app and why we collect it.

This policy specifically covers use of the Evlo customer app. For a full overview of how we handle your data across all our services, please refer to ourMain Privacy Notice.

When you use the Evlo customer app, we may collect:

• Login and account details – your personal details (name, postcode, date of birth), email, phone number, and agreement information to securely identify you.
• Usage data – pages visited, time spent, and features used (e.g. payment tools or message centre).
• Device and browser info – such as IP address, browser type, or operating system, to keep your session secure and optimise performance.

We never collect more data than necessary.

We use your data to:

• Provide secure access to your loan details and services
• Help you make payments and manage your account
• Improve the functionality, speed, and usability of the app
• Detect and prevent fraud or unauthorised access
• Contact you (if relevant) regarding support, service updates, or with your consent, marketing

We process your data where it is necessary to:

• Perform our contract with you
• Comply with legal obligations
• Pursue our legitimate interests (such as improving our services)
• Where applicable, based on your consent (e.g. marketing communications)

When you use the app, we use a Microsoft token and your devices browser to:

• Keep you securely logged in
• Understand how you use the app so we can improve it

MyEvlo app does not set cookies. When you sign in, we open your device's web browser to Microsoft Entra's sign-in page. Microsoft may set strictly-necessary cookies on that browser to keep your session secure and enable single sign-on. These cookies are controlled by Microsoft and stored on the current session of your browser. Evlo cannot alter them, and we do not use them for advertising.

Types of Cookies We Use:

Under UK data protection law, you have the right to:

• Access a copy of the data we hold about you
• Request that we correct or delete your data
• Object to or restrict how we process your data in certain situations
• File a complaint with the Information Commissioner's Office (ICO)

For a complete list of your rights and how we uphold them, please visit ourMain Privacy Notice.

Evlo is a trading style of Everyday Lending Limited (Company registration no. 5850869, England & Wales).

Registered office and trading Address: Suite 3, 1st Floor, Aquasulis House, 10 – 14 Bath Road, Slough, SL1 3SA.

Everyday Lending Limited (Firm Reference No. 724445) is authorised and regulated by the Financial Conduct Authority.

Everyday Lending Limited is a member of the Finance and Leasing Association and as a member, we follow its Lending Code.

If you have any questions about this policy or how we handle your data, please get in touch:

📧 dpo@evlo.co.uk