I do not believe a privacy notice is required in this case. You never established a customer relationship with the potential borrower. The information you used to evaluate the loan, and anyone you shared it with (credit bureau for credit report, etc.) falls under the exceptions at 1016.14:
(a) Exceptions for processing transactions at consumer's request. The requirements for initial notice in §1016.4(a)(2), for the opt out in §§1016.7 and 1016.10, and for service providers and joint marketing in §1016.13 do not apply if you disclose nonpublic personal information as necessary to effect, administer, or enforce a transaction that a consumer requests or authorizes.
_________________________
There's never enough time to do all the nothing you want.