Last Updated: 05 September 2026
This Data Protection Policy explains how we collect, use, store, and safeguard personal information. It is designed to ensure transparency, compliance with BSP Pay Merchant requirements, and protection of client data.
We may collect the following types of information:
Contact details (name, email address, phone number).
Business information (company name, registration details, TIN).
Payment information (processed securely via BSP Pay or other gateways).
Technical information (IP address, browser type, device details).
Collected information is used for:
Providing and improving our digital services.
Processing payments and issuing invoices.
Communicating with clients regarding projects, support, or updates.
Meeting legal, regulatory, and compliance obligations.
We use reasonable technical and organisational measures appropriate to the service, including access controls and encryption where supported by the relevant system or service provider.
Payment information is handled by payment gateways under the gateway's applicable security and compliance terms.
Access to client data is restricted to authorized personnel only.
Backups and service monitoring may be used where appropriate to reduce the risk of data loss and support the detection of unauthorised access.
We do not sell or rent client information. Data may only be shared in the following cases:
With BSP Pay or other payment processors for transaction purposes.
With regulators or authorities when legally required.
With service providers who support our operations, subject to applicable contractual or confidentiality obligations.
Clients have the right to:
Request access to the personal data we hold.
Request correction of inaccurate or outdated information.
Request deletion of personal data, subject to legal and contractual obligations.
Withdraw consent for non‑essential data processing.
Our website may use cookies or similar technologies to improve user experience. Clients can manage cookie preferences through their browser settings.
This policy is published to support transparency and applicable BSP Pay merchant requirements.
It is accessible to all clients and partners.
Any updates will be reflected with a revised “Last Updated” date.
For questions or requests regarding this Data Protection Policy, please contact:
Embakai Tech Solutions
📞 74511449
Port Moresby, Papua New Guinea
We seek to collect and use only information reasonably necessary for the relevant service. Access to personal information is limited to authorised personnel and service providers who need it for their work, subject to appropriate duties of confidentiality.
We use reasonable technical and organisational measures appropriate to the service and the nature of the information. Measures may include account access controls, secure connections, logging, backups and provider security features where available. No online service can guarantee absolute security.
Information is retained only for as long as reasonably needed to provide the service and meet applicable legal, accounting, security, contractual or dispute-resolution needs. A user may request deletion by following our User Data Deletion Instructions. We delete applicable information from Embakai-controlled systems after proportionate identity and account verification, subject to lawful retention requirements.
We may engage hosting, communications, security, payment, support and other service providers where needed for our operations. When a client connects a Meta or WhatsApp Business integration, we may process Meta Platform Data, WhatsApp Business Account identifiers, WhatsApp phone number IDs, messages, message metadata and webhook events within the permissions granted by that client. We do not sell personal data.
If we identify a suspected incident involving information under our control, we will assess it, take reasonable steps to contain and investigate it, preserve relevant records where appropriate, and notify affected parties or authorities when required by applicable law or contract.
We may disclose information where required by applicable law, a valid legal process, or a lawful request from an authorised public body. We may also disclose information where reasonably necessary to protect users, our services, rights, security or the integrity of connected platforms.