Privacy Policy

Last updated: 24 September 2026

LankaSriMart respects your privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our website, marketplace, supplier services, B2B buyer features, enquiry forms, checkout, account pages, and related services.

By using LankaSriMart, creating an account, placing an order, registering as a supplier, submitting an enquiry, or contacting us, you agree that your personal information will be handled as described in this Privacy Policy.

1. Who We Are

LankaSriMart is an online marketplace for Sri Lankan products, suppliers, customers, retailers, wholesalers, importers, exporters, and B2B buyers.

Website: LankaSriMart.com
Email: info@lankasrimart.com
Address: 2 Orchard Way, Sutton, Surrey SM1 3QQ, United Kingdom

For privacy questions or data requests, contact us at:

info@lankasrimart.com

2. Personal Information We Collect

We collect personal information that is needed to operate our marketplace, process orders, manage accounts, support suppliers, and improve our services.

A. Information You Provide

We may collect:

• Name

• Email address

• Phone number

• Billing address

• Shipping address

• Account username and password

• Business name

• Supplier or vendor profile details

• B2B buyer details

• Business registration information

• Tax or VAT information where applicable

• Product listings, descriptions, images, prices, and stock details

• Messages, enquiries, reviews, support requests, and uploaded content

• Order details and delivery instructions

B. Payment and Transaction Information

When you place an order, payment may be processed by third-party payment providers such as PayPal, Stripe, card processors, banks, or other secure payment services.

We may receive payment confirmation, transaction status, order amount, billing details, and fraud-check information.

We do not intentionally store full card numbers or full payment card security details on our website.

C. Information Collected Automatically

When you use our website, we may automatically collect:

• IP address

• Device type

• Browser type

• Operating system

• Pages visited

• Date and time of visit

• Referring website

• Search terms used on the website

• Approximate country or region

• Cookie and analytics information

D. Information from Third Parties

We may receive information from:

• Payment processors

• Delivery and logistics partners

• Fraud prevention services

• Supplier verification services

• Business verification sources

• Analytics providers

• Marketing or email service providers

• Marketplace, plugin, or platform tools used to operate the website

3. How We Use Personal Information

We use personal information to:

• Create and manage customer accounts

• Create and manage supplier/vendor accounts

• Process orders and payments

• Deliver products and provide order updates

• Handle returns, refunds, cancellations, and disputes

• Respond to enquiries and support requests

• Allow buyers and suppliers to communicate through the platform

• Display supplier profiles and product listings

• Verify supplier, seller, or business information

• Provide B2B buyer access, wholesale enquiries, and business features

• Prevent fraud, abuse, spam, unauthorised access, and illegal activity

• Improve website performance, design, security, and functionality

• Send service updates, account notices, order emails, and security alerts

• Send marketing emails where permitted or where you have opted in

• Comply with legal, tax, accounting, import/export, customs, and regulatory duties

• Enforce our Terms of Use and marketplace policies

4. Legal Basis for Using Personal Information

Where UK GDPR or similar data protection laws apply, we rely on one or more lawful bases, including:

Contract

We process information when needed to provide services, process orders, manage accounts, deliver products, or handle supplier/customer relationships.

Legal Obligation

We process information where needed to comply with tax, accounting, fraud prevention, legal, customs, import/export, consumer protection, and regulatory requirements.

Legitimate Interests

We process information for legitimate business purposes, including website security, fraud prevention, service improvement, supplier management, customer support, marketplace operation, and business administration.

Consent

We rely on consent where required, such as for certain marketing communications or non-essential cookies.

You may withdraw consent where consent is the lawful basis.

5. How We Share Personal Information

We only share personal information where necessary.

We may share information with:

• Suppliers or vendors, where needed to process orders or enquiries

• Customers or B2B buyers, where needed for marketplace communication

• Payment processors

• Delivery and courier partners

• Hosting providers

• Website platform and plugin providers

• Email and notification providers

• Analytics services

• Fraud prevention and security services

• Accountants, legal advisers, and professional service providers

• Government authorities, courts, regulators, customs authorities, or law enforcement where legally required

• Buyers or successors if our business is sold, merged, reorganised, or transferred

We do not sell personal information to third parties.

6. Supplier and Buyer Visibility

Because LankaSriMart is a marketplace, some information may be visible to other users.

For example:

• Supplier names, business names, logos, product listings, product images, business descriptions, and supplier contact details may appear publicly or to registered users.

• Buyers may share enquiry information with suppliers when requesting quotes, wholesale pricing, or product details.

• Suppliers may receive buyer information needed to respond to enquiries or fulfil orders.

Users should not misuse another user’s personal or business information.

7. International Transfers

LankaSriMart may use service providers based outside the United Kingdom, Sri Lanka, or your country of residence.

Where personal information is transferred internationally, we aim to use appropriate safeguards such as contractual protections, secure service providers, and other measures required by applicable data protection law.

Some website, hosting, payment, email, analytics, and security providers may process data in other countries.

8. How Long We Keep Personal Information

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Typical retention periods include:

• Account information: while your account is active

• Order and transaction records: usually up to 7 years for tax, accounting, and legal purposes

• Supplier/vendor records: while the supplier account is active and for a reasonable period afterward

• Enquiries and support messages: for as long as needed to respond, manage disputes, and improve services

• Marketing preferences: until you unsubscribe or withdraw consent

• Security logs: for a limited period needed for fraud prevention and website security

• Inactive accounts: may be deleted or anonymised after a reasonable period of inactivity

We may keep some information longer where required by law, tax rules, legal claims, investigations, disputes, fraud prevention, or regulatory obligations.

9. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

• Access the personal information we hold about you

• Correct inaccurate or incomplete information

• Request deletion of your personal information

• Object to certain processing

• Restrict certain processing

• Request a copy of your information

• Withdraw consent where processing is based on consent

• Opt out of marketing emails

• Complain to a data protection authority

To make a request, contact:

info@lankasrimart.com

We may need to verify your identity before responding.

10. Marketing Communications

If you subscribe to our newsletter or agree to receive marketing, we may send emails about products, suppliers, promotions, marketplace updates, and offers.

You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us.

We may still send important service messages, order updates, account notices, or legal notices even if you unsubscribe from marketing.

11. Cookies and Tracking

We use cookies and similar technologies to operate and improve our website.

Cookies may be used for:

• Login sessions

• Shopping cart functionality

• Checkout and payment processes

• Security

• Website performance

• Analytics

• User preferences

• Marketing and advertising where applicable

Some cookies are essential for the website to work. Other cookies may require consent depending on applicable law.

You can manage cookies through your browser settings or cookie preference tools where available.

12. Analytics

We may use analytics tools to understand website traffic, product interest, page performance, and user behaviour.

Analytics information helps us improve the website, products, categories, supplier pages, and customer experience.

Where possible, analytics data may be aggregated or anonymised.

13. Security

We use reasonable technical and organisational measures to protect personal information, including:

• SSL/TLS encryption

• Secure hosting

• Access controls

• Password protection

• Limited staff access

• Payment processing through secure providers

• Security monitoring

• Regular review of website tools and plugins

However, no website or online service can guarantee complete security. You are responsible for keeping your account password secure.

14. Children’s Privacy

LankaSriMart is not intended for children under 18.

We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it where required.

15. Third-Party Websites

Our website may contain links to third-party websites, payment processors, delivery partners, supplier websites, social media pages, or external tools.

We are not responsible for the privacy practices, content, security, or policies of third-party websites.

Please read their privacy policies before using their services.

16. Data Protection Authorities

If you are in the United Kingdom, you may contact the Information Commissioner’s Office if you are unhappy with how your personal information is handled.

If you are in Sri Lanka, you may contact Sri Lanka’s Data Protection Authority where applicable.

We encourage you to contact us first so we can try to resolve your concern.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will be posted on this page with a new “Last updated” date.

If we make significant changes, we may notify users by email or website notice where appropriate.

18. Contact Us

For questions, requests, or complaints about this Privacy Policy or your personal information, contact:

LankaSriMart
2 Orchard Way, Sutton, Surrey SM1 3QQ
United Kingdom
Email: info@lankasrimart.com