01
1) Introduction and Scope
This Privacy Policy explains how WBM Direct Finance Capital Ltd ("WBM," "we," "us" or "our") collects, uses, protects and discloses personal data when you visit this website, communicate with us or use our digital forms and services.
This policy applies to this website and its related pages and functionality only. It does not replace any separate contractual privacy terms that may apply under specific engagement letters or service agreements.
02
2) Categories of Personal Data We May Collect
We may collect personal data that you provide directly and technical data generated through your use of the website.
- Identity and contact data: name, email address, phone number, organization, country.
- Professional data: role, sector/investment interests, inquiry or application details.
- Technical and usage data: IP address, browser/device details, visited pages, timestamps and cookie data.
- Communication data: content of messages submitted via forms or email.
03
3) Identity Verification and Electronic Signing
When you are invited to a protected signing workflow, face matching and liveness checks are initially processed in your browser. Only after a successful check may a selected document image and live face image be uploaded in encrypted form to the WBM server for authorized manual review. Images are not sent to third-party biometric recognition services.
The workflow uses an email verification code, explicit consent and signing-intent confirmations, and final review by WBM staff. Approved-copy download links are time-limited and require a fresh email verification code.
- The document image, primary live face image and standalone signature-image file are deleted after a short operational period under WBM retention controls.
- For service security, we record the IP address, basic browser/device type and time of verification submission, signature submission and document requests. Records are encrypted and accessible only to authorized reviewers, not included in PDFs or emails. Contract activity follows contract-record retention; client-portal activity is retained for 90 days; standalone verification network details follow evidence retention. An IP address alone does not establish a person's identity or prove that a document was read.
- With explicit photo-evidence consent, four liveness photos, a collage and snapshots at signing start and submission are encrypted and kept under the contract-record retention period shown at consent. Authorized WBM staff can review and download them; they are not attached to the final contract or emails.
- The signature appearance and approval record may be embedded in the final contract and retained for the contract-retention period selected by WBM.
- Automated verification alone does not establish legal capacity or authority to represent a company; WBM may require additional documents or review.
04
4) Processing Purposes and Legal Bases
We process personal data only for specific legitimate purposes and to the extent necessary to achieve those purposes.
- Responding to inquiries and requests submitted through the website (contractual necessity or pre-contract steps).
- Managing professional relationships and, where permitted, sharing service-related updates (legitimate interests or consent).
- Complying with legal and regulatory obligations, including fraud prevention and security obligations.
- Operating, securing and improving website performance and user experience (legitimate interests).
05
5) Data Sharing and Cross-Border Transfers
We may disclose personal data strictly on a need-to-know basis for operational, compliance or legal purposes, subject to appropriate confidentiality and security controls.
- Technology and operational service providers (hosting, email, analytics and security support).
- Professional advisors (legal, tax, audit) where required for legitimate business needs.
- Regulators, authorities or law enforcement where disclosure is legally required.
- Personal data may be transferred across jurisdictions with appropriate safeguards as required by applicable law.
06
6) Data Retention and Security
We retain personal data only for as long as necessary for the purposes described in this policy, or as needed to satisfy legal, regulatory and legitimate business requirements.
We apply reasonable administrative, technical and organizational safeguards designed to protect personal data against unauthorized access, loss, alteration or disclosure.
07
7) Your Privacy Rights
Subject to applicable law, you may have rights to access, correct, erase, restrict or object to processing of your personal data, and to withdraw consent where processing is based on consent.
Where legally applicable, you may request data portability and may lodge a complaint with the relevant supervisory authority.
08
8) Cookies and Similar Technologies
We use cookies and related technologies to operate, secure and improve the website and to understand usage patterns. You can control cookies through your browser settings, though some website features may be affected.
09
9) Policy Updates and Contact
We may update this policy from time to time. Any revisions become effective upon publication on this page with an updated effective date.
For privacy-related requests or questions, contact us at: privacy@wbmdfc.com.
Important: This policy is drafted as a professional general template and should be reviewed by qualified local counsel before final legal adoption in each jurisdiction.