Legal Documents

StaffLoans PNG Ltd ("StaffLoans", "we", "us", or "our") operates the StaffLoans financial wellness platform accessible at staffloans.net. We are a Papua New Guinea registered company.

For privacy enquiries, contact: privacy@staffloans.net

Personal information you provide:

• Name, email address, mobile number
• Date of birth, nationality, residential address
• National ID, passport, or driver's licence number
• Employment details (employer, position, salary)
• Bank account or mobile money details for disbursements

Information collected automatically:

• Device type, browser, IP address
• Pages visited and actions taken on the platform
• Login timestamps and session data

Information from your employer:

• Payroll records, salary data, and deduction confirmations
• Employment status updates

• To verify your identity (KYC) and assess loan eligibility
• To process loan applications, disbursements, and repayments
• To manage your savings account and benefit entitlements
• To calculate your Financial Wellness Score
• To send notifications about your account activity
• To prevent fraud and comply with legal obligations
• To improve our platform and services

We will never use your information for purposes beyond what is listed above without your explicit consent.

We share your information only in the following limited circumstances:

• Your employer: Payroll deduction amounts only — never loan balances, interest rates, or personal financial details beyond what is needed for deductions.
• Service providers: Email, SMS, and payment service providers acting under strict data processing agreements.
• Regulators: Bank of Papua New Guinea (BPNG) or law enforcement as required by law.
• With your consent: Any other sharing requires your explicit permission.

We do not sell your personal data to third parties. Ever.

We protect your data with:

• 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for data at rest
• Role-based access controls — staff can only access what they need
• Full audit trail of all data access events
• Regular security audits and penetration testing

We retain your personal data for as long as your account is active and for up to 7 years after account closure, as required by PNG financial regulations and for legal compliance purposes.

You may request deletion of your data at any time — subject to our legal retention obligations — by contacting privacy@staffloans.net.

You have the right to:

• Access the personal data we hold about you
• Correct any inaccurate personal data
• Request deletion of your data (subject to legal requirements)
• Withdraw consent for optional data processing
• Lodge a complaint with relevant PNG regulatory authorities

To exercise any of these rights, email privacy@staffloans.net.

We use essential cookies to keep you logged in and remember your preferences. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, but some platform features may not function correctly.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 14 days before changes take effect.