BusMeCentral — Privacy Policy

Version: 2.0
Effective Date: 12 October 2026
Operator: Richard Hembu, trading as WEBSOFT-PNG
PNG Business Name Registration No.: 6-148210039
Website: https://busmecentral.websoft-png.com
Contact Email: admin@websoft-png.com

1. Introduction

BusMeCentral (Business SME Central Hub) is operated by Richard Hembu, trading as WEBSOFT-PNG, a registered business name in Papua New Guinea.

This Privacy Policy explains how information is collected, used, stored, shared, protected and handled when individuals and businesses use BusMeCentral.

This policy should be read together with the Terms of Service and other applicable BusMeCentral policies.

2. Information We Collect

Depending on how the application is used, we may collect and process the following information.

Registration and account information: Names, email addresses, telephone numbers, login identifiers, business registration information and account settings.

Business profile information: Business names, addresses, contact details, business descriptions, logos, tax-related settings and other profile information supplied by users.

Customer and supplier information: Names, contact details, outstanding balances, transaction histories and other information that business users enter about their customers and suppliers.

Sales, expenses and inventory information: Income records, expenses, credit sales, repayments, products, quantities, stock movements and business reports.

Subscription and payment information: Subscription plans, payment references, claimed payment amounts, payment dates, uploaded payment proofs, verification decisions and payment histories.

Communications: Messages exchanged through BusMeCentral and records associated with supported email communications.

Technical and security information: Authentication and session information, application activity, security events, audit logs and technical information made available by the hosting or authentication infrastructure. This may include IP addresses, device or browser information and access timestamps where collected by the service infrastructure.

We do not require customers to submit online banking passwords, payment card PINs or other banking credentials to verify manual subscription payments.

3. How We Use Information

We process information for purposes including:

• Creating and managing accounts.
• Providing business tracking, inventory and reporting functions.
• Calculating subscriptions and managing account access.
• Receiving and verifying payment submissions.
• Providing customer support and responding to requests.
• Protecting business information and investigating suspected misuse.
• Maintaining transaction, payment and audit histories.
• Improving reliability and correcting technical problems.
• Sending necessary account, subscription and security communications.
• Complying with applicable legal obligations.

We do not treat the submission of payment proof as confirmation that funds have been received.

Information is used only for legitimate service, operational, security, communication and legal purposes consistent with this policy.

4. Business Customer Data

Businesses may enter personal information relating to their customers, suppliers, employees and other third parties.

The business submitting that information is responsible for ensuring it has appropriate authority to collect, enter and use the information.

WEBSOFT-PNG processes this information to provide the application and related support services, subject to this Privacy Policy and applicable obligations.

Business customer data must not be made available to unrelated businesses through BusMeCentral without authorization.

WEBSOFT-PNG does not claim ownership of a business's underlying customer, supplier, sales or inventory records merely because those records are stored in the application.

5. Access to Information

Access to information is controlled according to account identity, business ownership and authorized administrative permissions.

Business users are restricted to information associated with their own authorized business account.

Administrative access is restricted to the Super Admin and staff who have been granted appropriate permissions.

Staff permissions are controlled by the Super Admin and do not arise merely from a staff role title.

Administrative access may be used for legitimate service administration, payment verification, technical support, security investigations and legal compliance, subject to applicable permissions.

Access restrictions are applied through the application's security controls, although no technical system can guarantee complete protection against every security threat.

6. Payment Proofs and Financial Information

Uploaded subscription payment proofs may contain personal or financial information.

Such information is used to assess payment submissions, maintain payment records, investigate disputes and support legitimate accounting or security requirements.

Payment proof uploads are not automatically accepted as evidence of received funds.

Authorized personnel must independently verify payment before approving the relevant subscription activation or renewal.

Users should avoid uploading unnecessary sensitive information, including bank passwords, PINs, full payment card details or unrelated personal financial records.

7. Hosting and Third-Party Service Providers

BusMeCentral operates using third-party application infrastructure and supporting services.

These services may include:

• Application hosting and databases.
• Authentication and account management.
• File storage.
• Email delivery.
• Technical monitoring and security.
• Backup or recovery facilities where enabled.

WEBSOFT-PNG uses external service providers where necessary to operate, maintain and support BusMeCentral.

Depending on the infrastructure and providers used, information may be processed, transmitted or stored outside Papua New Guinea.

WEBSOFT-PNG does not represent that all customer information is stored exclusively within Papua New Guinea.

Third-party providers may process information to the extent necessary to deliver their contracted services, subject to applicable agreements, security arrangements and legal requirements.

WEBSOFT-PNG will take reasonable steps to assess relevant providers and their information-handling arrangements.

8. Information Sharing and Disclosure

WEBSOFT-PNG does not sell customer or business information to advertisers.

Information may be disclosed where reasonably necessary to:

• Provide the application through authorized service providers.
• Respond to legitimate support requests.
• Investigate fraud or security incidents.
• Comply with applicable legal requirements.
• Protect the rights, security and legitimate interests of users and the service.
• Process verified subscription payments and related records.

Access or disclosure will be limited to information reasonably necessary for the relevant purpose.

Business users are responsible for disclosures they independently make when using customer communication features.

WEBSOFT-PNG does not authorize unrelated businesses to access another business's private records.

9. Data Security

BusMeCentral uses application authentication, business access restrictions, administrative permissions and other security measures supported by its infrastructure.

Security controls may include restricted access to business records, permission-based administrative functions, audit information and protective measures against unauthorized activity.

WEBSOFT-PNG takes reasonable steps to review and correct identified security issues.

However, internet services, software and third-party infrastructure may be exposed to technical failures, unauthorized access or other risks.

WEBSOFT-PNG cannot guarantee that all information will remain secure under every circumstance.

Users should protect their account credentials and report suspected unauthorized access promptly.

10. Data Retention

Business and account information may be retained while an account remains active and for additional periods reasonably necessary to:

• Provide services and account support.
• Maintain payment and transaction histories.
• Resolve disputes.
• Investigate security incidents.
• Meet applicable legal and recordkeeping obligations.
• Respond to lawful requests and enforce legitimate contractual rights.

Retention periods may vary according to the category of information, the purpose for which it is held, legal requirements and available platform capabilities.

Information is not necessarily deleted immediately when a subscription expires or an account becomes read-only.

Where information is no longer reasonably required and is eligible for deletion, WEBSOFT-PNG will process it in accordance with the Data & Account Deletion Policy and applicable obligations.

Certain records may remain in restricted archives, audit histories or backups where justified by legitimate retention requirements and technical limitations.

11. Data Export and Account Deletion

Authorized users may request available data exports, account closure or deletion through BusMeCentral's Privacy & Data Requests process.

WEBSOFT-PNG may require reasonable identity or authority verification before processing requests.

Where technically available, users may be given an opportunity to export supported records before eligible deletion.

Some information may remain where retention is necessary for legitimate financial, security, audit or legal purposes.

Account deletion may not immediately remove information from all backups or records subject to legitimate retention requirements.

Further details are provided in the Data & Account Deletion Policy.

12. Deleted Transaction Recovery and Backups

The availability of deleted-transaction recovery depends on whether an appropriate recovery process has been implemented and verified.

BusMeCentral does not guarantee a fixed deleted-transaction recovery period.

Backup frequency, retention and restoration depend on the actual infrastructure configuration and available service-provider capabilities.

WEBSOFT-PNG does not guarantee recovery of every deleted or lost record.

Users are encouraged to retain independent copies of important business information through supported reporting and export functions.

13. Cookies and Similar Technologies

BusMeCentral may use cookies, browser storage or related technologies for authentication, session management, security and application functionality.

These technologies may help maintain login sessions, remember application settings and support reliable operation.

Additional technologies, such as analytics or third-party tracking, depend on the application's actual configuration.

Further information is provided in the Cookie & Tracking Policy.

Optional tracking technologies will be subject to appropriate notice or consent where required by applicable law.

14. Email and Communications

BusMeCentral may send service-related communications, including account notices, subscription reminders, payment updates, invitations and security information.

Administrative and business-to-customer email features may be subject to usage limits, delivery restrictions and applicable service-provider requirements.

Service communications are separate from optional promotional marketing.

Registration for BusMeCentral does not automatically establish consent to receive unrelated promotional marketing.

Where marketing consent is required, it will be obtained through an appropriate process.

Users sending messages or emails to their own customers are responsible for ensuring those communications are lawful and appropriately authorized.

15. Accuracy and Correction of Information

Business users may update supported account and business information through the application.

Certain protected information, including business ownership and subscription verification records, may require authorized administrative processes.

Users may contact WEBSOFT-PNG if information cannot be corrected through the available application features.

Requests will be assessed according to identity, authorization, technical capabilities and applicable obligations.

WEBSOFT-PNG may retain relevant historical or audit records where necessary for legitimate operational, security or legal purposes.

16. Privacy Requests and Complaints

Users may request assistance concerning:

• Access to available personal information.
• Correction of inaccurate information.
• Supported data exports.
• Account deletion.
• Questions about information handling.
• Suspected unauthorized access.
• Privacy-related complaints.

Requests may be submitted through the Privacy & Data Requests feature, the in-app Messages module or by emailing admin@websoft-png.com.

WEBSOFT-PNG will review requests and respond within a reasonable period, taking account of the circumstances and applicable obligations.

Identity or business ownership verification may be required before sensitive information is disclosed or deleted.

17. Security Incidents

If WEBSOFT-PNG becomes aware of a suspected security incident affecting personal or business information, it will assess the incident and take reasonable steps appropriate to the circumstances.

These may include investigating the issue, restricting unauthorized access, preserving relevant evidence, correcting identified weaknesses and communicating with affected parties where appropriate or legally required.

Notifications will be handled in accordance with applicable legal obligations and the nature of the incident.

18. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes in BusMeCentral, its supporting infrastructure, information-handling practices or applicable requirements.

Updated versions will identify their effective dates.

Material changes will be communicated appropriately.

Historical versions and relevant acceptance or acknowledgement records will be retained where supported and required by applicable recordkeeping obligations.

Changes will not remove rights or remedies that cannot lawfully be excluded.

19. Contact

Service Operator: Richard Hembu, trading as WEBSOFT-PNG
PNG Business Name Registration No.: 6-148210039
Country: Papua New Guinea
Website: https://busmecentral.websoft-png.com
Email: admin@websoft-png.com

BusMeCentral privacy questions and requests may also be directed through:

• The in-app Messages feature.
• The Privacy & Data Requests feature.