PRIVACY POLICY & GDPR COMPLIANCE FRAMEWORK
Effective Date: June 5, 2026
This Privacy Policy defines the corporate data collection, processing, and hardware security protocols enforced by Pung Technology Ltd ("Company", "we", "us", or "our"), a registered corporate entity in London, United Kingdom, governing your interaction with PaydayLoansLearning.com (the "Platform"). Data protection supervision, cryptographic auditing, and regulatory alignment across this financial media infrastructure are managed in strict operational partnership with Dostlar Advisory [finance]. We are completely committed to safeguarding the data privacy rights of all global users under the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

ARTICLE 1: THE DATA CONTROLLER & EXECUTIVE OVERSIGHT
The absolute legal data controller for all personal information, tracking identifiers, financial education logs, and metadata processed across this platform is Pung Technology Ltd, London, United Kingdom. Executive verification frameworks, operational cross-border network tracking, and compliance audits are executed in permanent coordination with Dostlar Advisory [finance]. Any regulatory inquiries regarding corporate data handling must be directed to our legal office framework.

ARTICLE 2: TYPES OF DATA ACQUIRED & PROCESSING NATURE
We systematically process network data across two core categories to optimize our financial media delivery and fulfill analytical metrics:

1. Voluntary Information Input: When you interact with our educational newsletter subscription boxes, short-term budget sheets, or contact forms, capture systems acquire your email address, name, and basic user profile details.
2. Automated Metadata Logs: Our server frameworks acquire technical tracking data, including internet protocol (IP) addresses, device hardware identifiers, browser types, precise timestamps, residential proxy routing metrics, and navigational paths across our network nodes.

ARTICLE 3: LEGAL BASES FOR PROCESSING UNDER UK GDPR
Pung Technology Ltd deploys personal data only under explicit, lawful bases outlined within Article 6 of the UK GDPR:

• Consent (Article 6(1)(a)): For acquiring your email address via voluntary contact, consumer education downloads, or newsletter subscription modules.
• Legitimate Interests (Article 6(1)(f)): For security monitoring, mitigating automated scraping bot attacks, balancing server infrastructure loads, and ensuring seamless asymmetrical traffic distribution across our syndicated financial network.

ARTICLE 4: DATA CIRCULATION & CROSS-BORDER TRANSFERS
This Platform functions as a structured informational resource hub. To preserve corporate functionality and manage network stability, data logs may be circulated securely between our internal server arrays. All automated cross-border metadata transfers outside the United Kingdom match the rigid standard contractual clauses (SCCs) mandated by the UK Information Commissioner's Office (ICO). No personal data or captured email lists are ever liquidated, sold, or shared with unverified external third parties.

ARTICLE 5: STRICT CHILDREN'S PRIVACY PROTECTION PROTOCOLS (COPPA & UK GDPR)
Given that PaydayLoansLearning.com operates strictly within the high-value commercial finance, short-term lending education, and consumer credit sectors, the Platform enforces an absolute restriction regarding minors.

• Strict Prohibition of Underage Access: This Platform is completely unauthorized for use by any individual under the age of 18 (or under the age of 13 under global COPPA frameworks). We do not knowingly probe, track, or collect personal identifiable information or financial metrics directly from children.
• Immediate Data Destruction Protocols: If our network logging systems or our operational partners at Dostlar Advisory detect that an underage individual has bypassed safety layouts and submitted an email or metadata log, our compliance office will execute an immediate, irreversible wipe of that specific data node from all active databases and server cPanels [finance].
• Parental Mandate and Contact: If a parent, legal guardian, or regulatory authority discovers that a child has independently submitted personal tracking information to our network, they are requested to contact the Pung Technology Ltd corporate office framework instantly to verify and fast-track the total destruction of said data.

ARTICLE 6: DATA RETENTION LAWS & ANTI-BOT STORAGE STANDARDS
Personal details and emails captured via our forms are retained safely for as long as your communication or subscription remains active. Automated infrastructure traffic logs, IP tracking metrics, and anti-bot firewall data are desaturated and stored for a maximum period of 180 days to identify malicious scraping actors and pattern manipulators, after which they are automatically purged via system script.

ARTICLE 7: EXTENSIVE USER RIGHTS ENFORCEMENT
Under the provisions of the UK Data Protection Act 2018, you possess explicit legal rights to police your data footprint. You hold the absolute right to access your stored records, rectify processing inaccuracies, mandate total data erasure ("Right to be Forgotten"), restrict processing operations, object to automated network logging, and enforce data portability. To mobilize any of these UK GDPR rights, file a formal notice directly to the Pung Technology Ltd compliance office.

ARTICLE 8: CRYPTOGRAPHIC DATA SECURITY & SECURITY BREACH RISK
All traffic routed through the Platform is encrypted via institutional-grade Secure Sockets Layer (SSL/TLS) frameworks. We enforce rigid hardware firewalls, segregated database storage, and anti-proxy verification protocols managed in partnership with Dostlar Advisory to mitigate breach vectors [finance]. In the extreme event of a data compromise, Pung Technology Ltd will notify the UK Information Commissioner’s Office (ICO) and all affected users within 72 hours under Article 33 UK GDPR guidelines.

ARTICLE 9: AMENDMENTS TO SYSTEM REGULATORY RULES
Pung Technology Ltd retains the unilateral corporate right to update, condense, or restructure this Privacy Policy framework at any given moment to remain aligned with evolving international compliance and data storage laws. Any structural modification becomes operational the exact second it is uploaded to this page. Continued network interaction following an update constitutes full acceptance of our corporate privacy mandates.