Data Platformhub

Privacy control audits for consumer finance apps

We test how consent, retention, and rights requests actually work in lending, wallet, and BNPL products—then leave your team with evidence that holds up in review.

Book a scoping conversation

Primary engagement

Privacy Control Mapping

Our flagship audit does not invent slideware—it traces personal data through onboarding, credit decisions, payments, collections, and support, then ties each flow to a control owner and proof source.

Professionals reviewing documents and plans at a shared desk

Privacy Control Mapping

We inventory data flows across onboarding, lending decisions, payments, collections, and support channels. Each flow is tied to a control owner, evidence source, and residual risk note so product, legal, and compliance can prioritise the same backlog before a regulator or partner review.

From HK$52,000 · 2–4 weeks

See this audit

Related privacy audits

Each engagement is scoped to consumer-facing finance products—not generic IT questionnaires.

Person holding a smartphone showing a mobile app interface

Consent & Preference Review

Hands-on review of in-app consent capture, preference centres, and downstream honoring across marketing, analytics, and partner feeds.

Organized paperwork and notebook ready for a formal review

Data Subject Rights Audit

Test access, correction, and deletion workflows for consumer finance customers under Hong Kong PDPO expectations and partner contracts.

From teams we have audited beside

Names withheld where engagements remain confidential; titles reflect the roles we work with day to day.

“Their control map showed exactly where our preference centre stopped talking to the collections CRM. We fixed it before the bank partner’s questionnaire landed.”
M. Chen — Head of Compliance, consumer lending app
“The rights audit sampled real tickets, not slideware. Deletion exceptions finally have named owners and clear retention clocks.”
A. Rahman — Product counsel, digital wallet
“Walkthrough coaching kept our engineers and privacy lead answering from the same evidence pack. No scramble mid-meeting.”
L. Wong — VP Operations, BNPL platform