Privacy Policy

Wanloo Inc. ("Wanloo", "we", "our", or "us") is committed to protecting the personal information of its users in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Wanloo platform and related services. By using our Service, you consent to the practices described in this policy.

We collect the following categories of personal information: • Identity information: Full name, date of birth, government-issued identification (for KYC verification) • Contact information: Email address, phone number, mailing address • Pet information: Pet name, species, breed, age, and medical history relevant to insurance or financing • Financial information: Income details, employment status, and credit-related information provided during financing applications • Account information: Login credentials, account preferences, and communication preferences • Usage data: IP address, browser type, device information, pages visited, features used, and interaction timestamps • Transaction data: Payment request details, financing amounts, repayment history, and insurance claims

We use your personal information for the following purposes: • Service delivery: To operate the Wanloo platform, process payment requests, and connect you with veterinary financing and insurance options • Credit assessment facilitation: To share your financial information with partner lenders for the purpose of evaluating financing applications (with your explicit consent) • Insurance matching: To match you with appropriate pet insurance products based on your pet profile and coverage needs • Communication: To send transactional notifications, account updates, service announcements, and — with your consent — promotional materials • Compliance: To meet legal, regulatory, and audit obligations, including anti-money laundering (AML) and know-your-customer (KYC) requirements • Platform improvement: To analyze usage patterns, improve our services, and develop new features

We may disclose your personal information to the following categories of third parties, solely for the purposes described in this policy: • Partner lenders: Licensed financial institutions that provide financing to pet owners. Your financial and identity information is shared only with your explicit consent during a financing application. • Partner insurers: Licensed insurance providers that underwrite pet insurance policies. Your pet and personal information is shared to facilitate insurance matching and claims. • Payment processors: Third-party payment service providers that facilitate secure transactions between parties. • Service providers: Technology vendors, hosting providers, and analytics services that help us operate and improve the platform, under strict data processing agreements. • Legal authorities: Government or regulatory bodies when required by law, court order, or to protect the rights, property, or safety of Wanloo, our users, or the public. Wanloo will never sell your personal information to third parties for marketing or any other purpose.

We retain your personal information for as long as your Wanloo account remains active and as needed to provide you with our services. After account closure, we retain certain information as required by applicable law and regulatory obligations: • Financial transaction records: Retained for a minimum of 7 years to comply with Canadian financial record-keeping requirements • KYC and identity verification records: Retained for a minimum of 5 years after account closure as required by anti-money laundering regulations • General account information: Deleted or anonymized within 12 months of account closure, unless retention is required for legal or regulatory purposes When personal information is no longer needed, it is securely deleted or anonymized so that it can no longer be associated with you.

Under PIPEDA, you have the following rights regarding your personal information: • Right of access: You may request access to the personal information we hold about you. We will respond to your request within 30 days. • Right of correction: You may request that we correct any inaccurate or incomplete personal information. • Right to withdraw consent: You may withdraw your consent for the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. Withdrawal of consent may affect your ability to use certain features of the Service. • Right to complain: If you believe your privacy rights have been violated, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada. To exercise any of these rights, contact our Privacy Officer at the address provided below.

We obtain your explicit consent at the time of registration and at key points during your use of the Service — particularly before sharing your information with lending or insurance partners. You may withdraw your consent at any time by contacting our Privacy Officer at privacy@wanloo.ca. Please note that withdrawing consent may limit your ability to use certain features of the Wanloo platform, including financing applications and insurance matching. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include: • Encryption: All data in transit is protected using TLS 1.2+ encryption. Sensitive data at rest is encrypted using AES-256. • Access controls: Role-based access controls ensure that only authorized personnel can access personal information, on a need-to-know basis. • Regular audits: We conduct periodic security assessments and penetration testing to identify and address vulnerabilities. • Incident response: We maintain a data breach response plan and will notify affected individuals and the Privacy Commissioner as required by PIPEDA's breach notification provisions. • Infrastructure: Our platform is hosted on enterprise-grade cloud infrastructure with SOC 2 compliance and geographic data residency in Canada.

Wanloo uses cookies and similar tracking technologies for the following purposes: • Session management: To maintain your authenticated session and ensure the platform functions correctly. • Analytics: To understand how users interact with our platform, identify popular features, and improve the user experience. We use privacy-respecting analytics that do not track you across other websites. • Preferences: To remember your language, display, and notification preferences. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service. We do not use cookies for third-party advertising or cross-site tracking.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact our Privacy Officer: