Privacy Policy
Bilum Forensics Limited ("Bilum Forensics", "we", "us") operates the Bilum Check digital evidence verification platform at www.bilumforensics.com (the "Platform"). This Privacy Policy explains what information we collect, why, how it is protected, and the choices you have. We handle evidence material in accordance with the evidentiary handling principles of the Papua New Guinea Cybercrime Code Act 2016.
1. What We Collect
- Evidence files — the images, videos and documents you upload for analysis. These files may contain personal information about you or third parties (faces, names, identifiers).
- Technical metadata — upload timestamp, file hashes (SHA-256, MD5), file properties and analysis results.
- Submitting IP address — recorded at the moment of upload as part of the chain-of-custody log.
- Contact details — where you provide them (e.g. when purchasing a certificate or contacting support).
2. Why We Collect It
- To perform the forensic analysis you request and issue evidence certificates;
- To maintain a tamper-evident chain of custody, as required for court-admissible evidence;
- To detect reuse of the same media across cases (cross-case linkage), which is a core investigative feature of the Platform;
- To operate, secure and improve the Platform, and to respond to support requests.
3. How Evidence Is Protected
- All traffic to the Platform is encrypted in transit (HTTPS/TLS);
- Every file is cryptographically sealed (SHA-256) at the moment of ingestion — any subsequent alteration, even by us, is detectable;
- Case records are written to a hash-chained custody ledger; entries cannot be modified without breaking the chain;
- Access to case data and certificates is restricted by access keys;
- Data is hosted on access-controlled infrastructure operated for Bilum Forensics.
4. Retention & Deletion
Uploaded evidence files are retained for 90 days from the date of upload, after which they are securely deleted, unless you request earlier deletion or extended retention (for example, where a matter is before the courts). Cryptographic hashes, case reference numbers and custody-log entries are retained permanently: they contain no content of your file and are necessary so that issued certificates can be verified for their lifetime. You may request deletion of your evidence file at any time via info@bilumforensics.com, quoting your case reference.
5. Sharing & Disclosure
We do not sell, rent or trade your data. We do not share evidence files or case data with third parties except: (a) at your direction; (b) where required by law, court order, or lawful request by the Royal Papua New Guinea Constabulary under the Cybercrime Code Act 2016; or (c) to protect the rights, safety and integrity of the Platform and its users.
6. Your Responsibilities
By submitting a file you confirm that you are lawfully entitled to possess and submit it, and that you have any necessary authority or consent in respect of personal information of third parties contained within it.
7. Your Rights
You may request access to, correction of, or deletion of your personal information, or ask any question about this Policy, by emailing info@bilumforensics.com. We will respond within a reasonable time.
8. Changes to This Policy
We may update this Policy from time to time. The current version is always published at www.bilumforensics.com/privacy.html with the date of last update shown above.
9. Contact
Bilum Forensics Limited — A Talai JMA Investments Limited family group
Section 229, Lot 132, Gaibodubu Street, Tokarara, NCD, Port Moresby, Papua New Guinea
Email: info@bilumforensics.com · +675 7436 2733