PRIVACY POLICY
Effective Date: May 30, 2026

Article 1: Data Controller and Corporate Framework
This Privacy Policy governs the data processing protocols executed by BusinessLoanClearinghouse.com (the "Site"), a proprietary digital infrastructure asset owned and operated by Pung Technology Ltd (London, UK). Technical oversight, programmatic auditing, and data compliance frameworks are managed under the strategic direction of Dostlar Advisory. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Pung Technology Ltd acts as the Data Controller. We are fully committed to safeguarding the operational and personal data of our users through robust security architectures.

Article 2: Categories of Data Collected
We collect and process two primary streams of information when you interact with our digital infrastructure:

1. Voluntary Corporate Data: Information provided directly by you when interacting with pre-qualification forms, contact interfaces, or financial evaluation fields. This includes your business legal name, corporate email address, corporate telephone numbers, country of incorporation, financial metrics, and operational requirements.
2. Automated Technical Metadata: Information systematically harvested by our hosting architecture, including internet protocol (IP) addresses, browser telemetry, operating system details, device identifiers, asymmetric clickstream patterns, and navigational timestamps.

Article 3: Legal Basis for Data Processing
Under the UK GDPR, we only process your information when we have a valid legal justification. Our data processing actions are executed under the following legal pillars:

• Contractual Necessity: To evaluate corporate metrics, verify financial viability, and process requests for commercial credit lines or institutional leverage.
• Legitimate Interests: To maintain the network security of our closed-loop infrastructure, prevent automated scraping or malicious server queries, monitor asymmetric traffic distribution across our 9 active portals, and optimize AdSense revenue performance.
• Legal Compliance: To satisfy corporate transparency laws, anti-money laundering (AML) protocols, and reporting requirements in the United Kingdom.

Article 4: Closed-Loop Network Sharing and Third-Party Data Transfer
To preserve the structural efficiency of our closed-loop digital ecosystem, your verified corporate interest data may be shared asymmetrically between authorized internal nodes managed by Pung Technology Ltd and Dostlar Advisory. Your information is never sold to external third-party data brokers. Data transfers occur strictly under the following conditions:

• With institutional liquidity providers and financial entities directly tied to our business loan verification networks.
• With authorized cloud hosting networks and automated software processing APIs that maintain the security of our data repositories.
• To regulatory bodies or UK law enforcement agencies when mandated by binding institutional agreements or legal statutes.

Article 5: Children’s Privacy and Strict Age Limitations
Business Loan Clearinghouse is strictly engineered as a business-to-business (B2B) financial infrastructure portal. It is explicitly not designed, intended, or structured to attract individuals under the age of 18. We do not knowingly target, solicit, or collect personal information from children or minors. If we discover that an individual under the age of 18 has bypassed our technical barriers and submitted personal data, we will execute immediate programmatic protocols to purge that information permanently from our secure servers. If you are a parent or legal guardian residing in the UK and believe your child has transmitted data to our infrastructure, please contact our compliance desk immediately for manual removal.

Article 6: Data Retention Protocols and Structural Security
We retain your personal and corporate data only for the precise duration required to fulfill the operational purposes detailed in Article 3, or to satisfy legal, accounting, and institutional compliance obligations under UK law. Automated metadata and technical log entries are compressed and archived under strict encryption standards to safeguard against unauthorized access, data breaches, or algorithmic modification. Once the retention window expires, data is subjected to a military-grade digital overwrite process, rendering it entirely unrecoverable.

Article 7: Your Legal Rights Under UK GDPR
As a data subject residing in the United Kingdom, you possess clear statutory rights regarding the processing of your personal information. You can exercise these rights at any time by contacting our compliance division:

• Right of Access: The right to request a formal copy of all data points we hold regarding your corporate identity or personal profile.
• Right to Rectification: The right to demand immediate correction of inaccurate or incomplete financial metrics.
• Right to Erasure ("Right to be Forgotten"): The right to request the complete deletion of your data from our active databases, subject to legal retention overrides.
• Right to Restrict or Object: The right to object to specific processing practices, including automated network profiling or asymmetric cross-portal tracking.

Article 8: Cookie Infrastructure and Algorithmic Tracking
Our digital platform deploys cookies, web beacons, and unique tracking pixels to manage active network sessions, authenticate institutional users, and monitor traffic routing. We utilize essential technical cookies to ensure platform stability and analytical cookies to evaluate performance and track high-CPC ad conversions via networks like Google AdSense. Users can modify their local browser configurations to reject cookies or trigger automatic tracking alerts; however, disabling these systems may cause structural latency or block specific functional modules on the Site.

Article 9: Global Jurisdictional Sovereignty and Updates
This Privacy Policy is governed entirely by the laws of the United Kingdom and is subject to the exclusive jurisdiction of the corporate courts of London, UK. Dostlar Advisory monitors and executes real-time content audits on this document to guarantee compliance with shifting regulatory frameworks. We reserve the corporate right to update this policy at any moment without prior warning. Any structural updates will be deployed directly to this URL, and your continued interaction with the digital asset confirms your automatic acceptance of the active privacy framework.