Privacy Policy

Last updated: July 8, 2026

This Privacy Policy explains how 4Way Enterprise (“we”, “us”, “our”) collects, uses, discloses, and protects information when you use our website and platform services (the “Services”). By using the Services, you agree to this Policy.

1. Information we collect

Account and authentication data: for example name, email address, and identifiers provided when you sign in (including through third-party providers such as Google, where enabled).
Operational and loan-related data: information entered or imported in connection with loan facilitation workflows (e.g. contact details, application status, documents metadata processed within your workspace).
Technical data: IP address, device/browser type, approximate location derived from IP, and logs needed for security, auditing, and service improvement.
Cookies and similar technologies: as described in your browser settings and any cookie notice we publish.

2. How we use information

To provide, maintain, and secure the Services.
To authenticate users, enforce permissions, and comply with regulatory or contractual obligations applicable to your organisation.
To communicate service-related notices and respond to enquiries.
To monitor usage, troubleshoot issues, and improve performance and user experience.
Where required by law or to protect rights, safety, and integrity of users and the public.

3. Legal bases (where applicable)

Depending on jurisdiction, we rely on one or more of: performance of a contract, legitimate interests (in running and securing our Services, balanced against your rights), legal obligation, or consent where we expressly ask for it.

4. Sharing and disclosure

We do not sell your personal information. We may share information with:

Service providers who assist us (e.g. hosting, email delivery, authentication) under strict confidentiality and instructions.
Your organisation and authorised users within the same workspace, as governed by role-based access.
Authorities when required by law, court order, or to protect vital interests.
Business transfers in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.

5. International transfers

If data is processed in countries other than your own, we implement appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) where required by applicable law.

6. Retention

We retain information only as long as necessary for the purposes above, including legal, tax, and audit requirements. Retention periods may depend on your organisation’s settings and contractual terms.

7. Security

We apply technical and organisational measures designed to protect information against unauthorised access, loss, or alteration. No system is completely secure; please protect your credentials and report suspected incidents promptly.

8. Your rights

Depending on applicable law, you may have rights to access, rectify, delete, restrict, or object to certain processing of your personal data, and to data portability or withdrawal of consent where processing is consent-based. You may lodge a complaint with a supervisory authority. To exercise rights, contact us using the details on our Contact page.

9. Children

The Services are not directed at children under 16 (or the age required in your jurisdiction). We do not knowingly collect personal information from children for marketing purposes.

10. Changes

We may update this Policy from time to time. The “Last updated” date will change accordingly. Continued use of the Services after changes constitutes acceptance where permitted by law.

11. Contact

Questions about this Policy: see Contact us.