Privacy Policy

Last Updated: 01/July/2025

[Your Platform Name] (“we,” “us,” or “our”) respects your privacy. This policy

explains how we collect, use, and protect your personal data when you use our

Platform. By accessing our services, you agree to these terms.

1. Information We Collect

We collect data to facilitate trade and improve our services:

A. Provided by You:

•  Account Details: Name, email, phone, business registration, tax IDs.
• Transaction Data: Payment details (processed via secure gateways like PayPal/Stripe), shipping addresses.
• Content: Product listings, messages to buyers/sellers.

B. Collected Automatically:

• Usage Data: IP address, device type, browser, pages visited (via cookies).
• Location: Country/region (to comply with export laws).

C. From Third Parties:

• Verification Services: Business licenses, export permits.
• Payment Processors: Confirmation of transactions (we do not store card

details).

2. How We Use Your DataPurpose Legal Basis

Facilitate transactions between buyers/sellers Contractual necessity

Verify user identities (anti-fraud) Legal compliance (UK/Sri Lankan law)

Improve Platform functionality Legitimate interest

Send service updates/promotions (opt-out available) Consent (where required)

Comply with export/import regulations Legal obligation

3. Data Sharing & Disclosure

We only share data when necessary:

• With Other Users: Buyers see seller contact details (only after agreement).
• Service Providers: Payment processors, logistics partners (under strict confidentiality).
• Legal Compliance: If required by Sri Lankan/UK courts or international trade authorities.
• Business Transfers: In case of merger/acquisition (users will be notified).

We never sell your data to third parties.

4. International Data Transfers

• Data is stored in secure servers (e.g., AWS/GCP) with locations disclosed to users.

• For UK/EU users: Transfers comply with GDPR adequacy standards (e.g., Standard Contractual Clauses).

5. Data Retention

We retain data only as long as necessary:

• Active Accounts: Until deletion request.
• Transaction Records: 7 years (for tax/compliance under Sri Lankan/UK law).
• Inactive Accounts: Deleted after 2 years of inactivity.

6. Your Rights

Depending on your location, you may:

• Access/Correct your data (via account settings).
• Request Deletion (unless legal retention applies).
• Opt Out of marketing emails (unsubscribe link in all emails).
• Withdraw Consent (e.g., for cookies).
• Lodge Complaints with Sri Lanka’s Data Protection Authority or UK’s ICO.

7. Security Measures

We implement:

• Encryption: SSL/TLS for data transfers.
• Access Controls: Limited to authorized personnel.
• Regular Audits: To prevent breaches.

8. Cookies & Tracking

• Essential Cookies: Required for Platform functionality (e.g., login sessions).
• Analytics Cookies: Google Analytics (opt-out available).
• Third-Party Cookies: Payment processors (covered under their policies).9. Children’s Privacy

Our Platform is not for users under 18. We do not knowingly collect children’s data.

10. Changes to This Policy

Updates will be posted here. Material changes will notify users via email.

11. Contact Us

For questions or data requests:

Email: info@lankasrimart.com