Privacy Policy
1. About Us
Pakimu Investment Limited T/A WanPaus Microfinance ("Pakimu", "we", "us", "our") operates WanPaus Microfinance, a technology platform for microfinance loan management in Papua New Guinea. We are incorporated under the Companies Act 1997 (PNG).
We are engaged in the process of meeting our regulatory obligations with the Bank of Papua New Guinea (BPNG) under the Financial Institutions Act 1999 (PNG) and are committed to operating in accordance with applicable PNG financial regulation.
This Privacy Policy explains how we collect, use, store, and disclose personal information about borrowers, staff, and platform users. By using our platform or accepting a loan from us, you agree to the practices described in this policy.
2. Information We Collect
Identity and contact information: full name, date of birth, residential address, email address, phone number, and government-issued identification document (number, type, expiry date, and copy).
Financial information: loan principal, interest rate, repayment history, outstanding balance, credit balance, and ledger records related to your account.
KYC and verification data: identity verification results, liveness check outcomes, document verification status, phone and email verification confirmations.
Account and security telemetry: IP address, device fingerprint, browser information, session activity, and audit log records generated during use of the platform.
Communications: enquiries submitted through the platform, bug reports, and records of any communications with our team.
3. How We Use Your Information
- To assess your eligibility for a loan and make lending decisions, including credit risk evaluation.
- To operate and manage your loan account, process repayments, and maintain accurate financial records.
- To comply with legal and regulatory obligations under the Companies Act 1997 and applicable PNG financial legislation, and any lawful directions from PNG courts or law enforcement agencies.
- To prevent fraud, detect unauthorised access, and protect the security and integrity of our platform and its users.
- To communicate with you about your account, repayment obligations, overdue notices, and service updates.
- To improve our platform and services through aggregated, de-identified analytics.
We do not sell your personal information to third parties.
4. Disclosure of Your Information
We maintain strict confidentiality of your personal information in accordance with our contractual and common law obligations of confidence.
We may disclose your information only in the following circumstances:
- (a) with your explicit consent;
- (b) to comply with a court order, legal process, or lawful direction from BPNG or another regulatory authority;
- (c) to licensed credit bureaus or reporting agencies, where you have provided consent and only to the extent required for credit assessment;
- (d) to our service providers (cloud infrastructure, email) who are contractually bound to confidentiality and process data only on our instruction;
- (e) in the course of a business transfer, merger, or acquisition, where the receiving entity agrees to be bound by equivalent privacy obligations.
We will notify you of any disclosure to law enforcement or regulatory authorities where we are legally permitted to do so.
5. Data Retention
We retain your personal and financial data for a minimum of seven (7) years following the closure or full repayment of your loan account, in line with financial record-keeping best practice applicable to microfinance platforms operating in Papua New Guinea.
Security telemetry and audit logs are retained for a minimum of five (5) years. KYC documents are retained for the duration of the account and seven (7) years thereafter.
Data that you request be deleted will be removed where legally permissible. Where retention is required by law or regulation, we will inform you and restrict further processing of the data.
6. Data Security
All data transmitted to and from the platform is encrypted in transit using TLS. Data at rest is stored on access-controlled, audited infrastructure hosted on Neon PostgreSQL (managed cloud) with role-based access limited to authorised personnel.
We maintain comprehensive audit logs of all data access and financial operations. Unusual access patterns trigger automated alerts.
In the event of a data breach that poses a risk to your rights or interests, we will notify you and, where required, the relevant regulatory authority, within a reasonable timeframe.
7. Your Rights
You have the right to:
- (a) request access to the personal information we hold about you;
- (b) request correction of inaccurate or incomplete information;
- (c) request deletion of your personal information, subject to our legal retention obligations;
- (d) withdraw consent to data processing where consent is the basis for processing, without affecting the lawfulness of processing before withdrawal;
- (e) lodge a complaint with the Bank of Papua New Guinea or seek legal remedy through the National Court of Papua New Guinea.
To exercise any of these rights, contact us at hi@wantekpng.com. We will respond within 30 days. Identity verification will be required before we disclose or amend personal information.
8. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of Papua New Guinea. Any dispute arising under this policy shall be subject to the exclusive jurisdiction of the National Court of Papua New Guinea.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to you by email and will require your renewed acceptance through the platform before you can continue using the service. The effective date at the top of this document will be updated accordingly.
10. Contact
Pakimu Investment Limited T/A WanPaus Microfinance
Email: hi@wantekpng.com
Papua New Guinea