6.1 Principles of Data Collection We strictly adhere to data minimization: we only collect personal data directly required to provide micro-loan services, perform risk assessments, and satisfy regulatory legal standards. 6.2 Data Categories & Collection Methods 6.3 Data Storage & Protection Standards Location: Data is stored on secure, encrypted cloud servers managed under strict ISO 27001 compliance standards. Access Control: Strict Role-Based Access Control (RBAC) ensures only verified compliance officers can view identity records. Third-Party Analytics: We do not pass user personal identity data to third-party ad networks or analytics services.

.