Privacy notice

Effective 25 July 2026

Information collected

We collect account credentials, identity and contact details, application activity, document-request metadata, requests, transactions, and security logs.

How information is used

Information supports registration, review, communication, tracking, account operations, fraud prevention, compliance, audit, and support.

Access and retention

Access is role-based and limited to authorized personnel. Records are retained according to applicable account, transaction, and legal requirements.

Security

Passwords are one-way hashed, forms use CSRF protection, tracking is rate-limited, and staff actions are audited.