Privacy Policy
Last updated: June 2026
1. Data we collect
We collect information you provide at registration (name, email, phone), bidding and order history, KYC documents for verified sellers, device push tokens, and technical logs (IP address, browser type) for security and fraud prevention.
2. How we use data
- Operate auctions, payments, and delivery tracking
- Send transactional notifications (outbid alerts, payment status, shipping updates)
- Verify seller identity and comply with legal obligations
- Improve platform performance and detect abuse
3. Sharing
We share data with payment (PayHere), SMS (ShoutOUT), courier partners, and cloud infrastructure providers only as needed to deliver the service. We do not sell personal data to third parties.
4. Retention & security
Account and transaction records are retained as required for tax, dispute resolution, and legal compliance. Data is encrypted in transit (TLS) and at rest on AWS. Access to production systems is restricted to authorised personnel.
5. Your rights
You may request access, correction, or deletion of your personal data by contacting support. Some records must be kept for regulatory or financial reasons even after account closure.
6. Cookies
The web app uses essential cookies and local storage for session tokens. Analytics cookies, if enabled, are disclosed in the cookie banner.
7. Contact
Privacy enquiries: privacy@lankaaution.lk
See also Terms & Conditions.