Wanluv Privacy Policy
Effective date: 10 September 2026
Wanluv is operated by PNG EduTech Limited (IPA 1-131147376) trading as Wanluv, of Port Moresby, National Capital District, Papua New Guinea ("Wanluv", "we", "us", "our"). We are the data controller for personal information collected through wanluv.com, app.wanluv.com, our mobile apps, and related services (together, the "Platform").
This Policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have. It applies to guests, hosts, experience hosts, drivers, service providers, shop sellers, shop customers and visitors.
1. Information we collect
1.1 Information you give us
- Account details: name, email address, mobile number, password, date of birth, profile photo, preferred language.
- Identity verification: where required for hosting, driving or high-value bookings — a photo of a government-issued ID (passport, driver's licence, NID card), a selfie for matching, and business registration details (IPA/TIN) for business hosts and sellers.
- Listing and service information: property address, photos, descriptions, house rules, vehicle registration and licence details (drivers), menus and product listings (sellers).
- Payment information: card details are entered directly into our payment gateway (Kina Bank IPG) and are not stored by Wanluv; we receive only a token, the card type, the last four digits, and the transaction result. For payouts we collect PNG bank account details or mobile-money details.
- Communications: messages between guests and hosts/providers sent through the Platform, support requests, reviews, and survey responses.
- Booking details: who is travelling, check-in/out dates, pick-up and drop-off locations, special requests, delivery addresses for Shop orders.
1.2 Information collected automatically
- Device and log data: IP address, device type and identifiers, operating system, browser, app version, language, crash reports, pages viewed, and timestamps.
- Location data: precise GPS location when you use Transport features or opt in to location services; approximate location derived from your IP address otherwise.
- Cookies and similar technologies: see our Cookie Policy.
1.3 Information from other sources
- Identity-verification and fraud-screening partners.
- Payment providers (Kina Bank, and any other gateway we add) — transaction status and chargeback information.
- Social login providers (Google, Facebook, Apple) if you choose to sign in that way — name, email and profile picture.
- Other users — for example, a host's review of you, or a co-traveller added to a booking.
2. How we use your information
| Purpose | Examples | Legal basis (where GDPR applies) |
|---|---|---|
| Providing the Platform | Creating your account, publishing listings, processing bookings and orders, connecting you with hosts/drivers/sellers, sending confirmations | Performance of a contract |
| Payments and payouts | Charging your card through Kina Bank IPG, paying hosts and providers, processing refunds, tax records | Contract; legal obligation |
| Trust, safety and verification | Verifying identity, screening for fraud, investigating incidents and disputes, enforcing our Terms | Legitimate interests; legal obligation |
| Support | Responding to your requests, running the Resolution Centre | Contract; legitimate interests |
| Improvement and analytics | Understanding how the Platform is used, testing new features, fixing bugs | Legitimate interests; consent (for analytics cookies) |
| Marketing | Sending offers and updates by email, SMS or push; showing personalised content | Consent (you can opt out at any time) |
| Legal compliance | Responding to lawful requests from PNG authorities, meeting IRC and anti-money-laundering obligations under the Anti-Money Laundering and Counter Terrorist Financing Act 2015 | Legal obligation |
We do not use automated decision-making that produces legal or similarly significant effects on you without human review.
3. How we share your information
- Between users, to complete a booking. When a booking is confirmed we share what is needed to carry it out: a guest's name, profile photo and phone number with the host; the host's address and contact details with the guest; pick-up location and phone number with a driver; delivery address with a seller. Messages sent through the Platform are visible to both parties.
- Service providers who work for us under contract: cloud hosting and database (Supabase), payment processing (Kina Bank IPG), email and SMS delivery, mapping, analytics, customer-support tools, and identity verification. They may only use your information to provide services to us.
- Legal and safety. With courts, regulators, law enforcement (including the Royal Papua New Guinea Constabulary) or other parties where required by law, to enforce our Terms, or to protect the rights, property or safety of Wanluv, our users or the public.
- Business transfers. If PNG EduTech Limited or the Wanluv business is sold or merged, your information may be transferred to the new owner under this Policy.
- With your consent or at your direction.
We do not sell your personal information.
4. International transfers
Wanluv is based in Papua New Guinea. Some of our service providers store or process data in other countries (for example, Supabase infrastructure in Singapore, Australia or the United States). Where the EU/UK GDPR applies to you, we rely on the providers' standard contractual clauses or equivalent safeguards for those transfers. By using the Platform you understand that your information may be processed outside your country.
5. How long we keep your information
| Data | Retention |
|---|---|
| Account and profile | For as long as your account is active, then up to 2 years unless a longer period is needed |
| Bookings, orders, invoices and payout records | 7 years after the transaction, to meet PNG tax and accounting obligations |
| Identity verification documents | Deleted or anonymised within 90 days of verification unless required for an open investigation or by law |
| Messages and support tickets | 3 years after the last message |
| Marketing preferences | Until you opt out |
| Logs and analytics | Up to 24 months, then aggregated or deleted |
6. Your rights and choices
- Access and correction: view and update your profile at any time in Account settings. You can ask us for a copy of the personal information we hold about you.
- Deletion: you can request deletion of your account from Account settings or by emailing us. We will delete or anonymise your information except where we must keep it (for example, transaction records for tax purposes, or data relating to an unresolved dispute).
- Marketing opt-out: use the unsubscribe link in any marketing email, reply STOP to SMS, or turn off notifications in the app. You will still receive transactional messages about your bookings.
- Location: turn off location services in your device settings (some Transport features will not work).
- Cookies: manage your preferences using our cookie banner or your browser — see the Cookie Policy.
- EU/UK/EEA users additionally have the rights to restrict or object to processing, to data portability, to withdraw consent, and to lodge a complaint with your local supervisory authority.
To exercise any right, email privacy@wanluv.com (or call/WhatsApp +675 70659262) with the subject "Privacy request". We may ask you to verify your identity first, and we aim to respond within 30 days.
7. Security
We protect your information with encryption in transit (TLS), encryption at rest, role-based access controls, row-level security in our database, and audit logging. Card payments are handled by Kina Bank's PCI-DSS-compliant gateway; Wanluv never sees your full card number. No system is completely secure, so please use a strong, unique password and let us know immediately at security@wanluv.com if you suspect unauthorised access to your account.
8. Children
The Platform is for adults aged 18 or over. We do not knowingly collect personal information from anyone under 18, other than the names and ages of minors listed as co-travellers on a booking made by an adult. If you believe a child has created an account, contact us and we will remove it.
9. Third-party links
The Platform may contain links to third-party websites (for example, a host's own site or a tourism operator). We are not responsible for their privacy practices.
10. Changes to this Policy
We may update this Policy from time to time. We will post the new version here with a new Effective Date and, for material changes, notify you by email or in-app notice at least 14 days before it takes effect.
11. Contact us
PNG EduTech Limited trading as Wanluv
Port Moresby, National Capital District, Papua New Guinea
Privacy enquiries: privacy@wanluv.com
General support: support@wanluv.com · Phone/WhatsApp: +675 70659262