පෞද්ගලිකත්ව ප්‍රතිපත්තිය

1. What we collect

• Account: your name, email, phone number and password (stored encrypted). If you sign in with Google we receive your name, email and Google account ID.
• What you post: ads, business details, photos, prices, locations, opening hours, reviews, deals and events.
• Contact between users: chat messages, quote requests, bookings and job applications (including any CV you upload).
• Payments: what you bought, the amount and the payment reference. Card details go directly to PayHere or Stripe; we never receive your full card number. Bank slips you upload are kept privately.
• Technical: IP address, device and browser type, pages visited and the time of sign-ins, used to keep the site secure and to stop spam and fraud.

2. Why we use it

• To run your account and publish your listings (our agreement with you).
• To let buyers, customers and employers contact you, and to send you messages, alerts and reminders you asked for.
• To process promotions and keep financial records (legal obligation).
• To review listings, prevent fraud and abuse, and secure the site (legitimate interest).
• With your consent, to measure visits so we can improve the site.

3. What other people can see

Your listings, the name you choose to show, your district and town, and the contact details you add to a listing are public. Your email address and password are never shown. Messages are only visible to the people in the conversation and, if a message is reported, to our moderators.

4. Who we share data with

• Payment providers (PayHere, Stripe) to take payments.
• Our hosting, email delivery and storage providers, who process data for us under contract.
• Google, if you sign in with Google or accept analytics cookies.
• The police or courts when the law requires it.

We do not sell your personal data.

6. How long we keep it

• Account data: while your account is open.
• Expired ads: kept in your account so you can renew them, but not shown publicly. Ads you delete are removed from public view at once.
• Payment records: as long as tax and accounting law requires. If you delete an account that has payments, we keep the order records but remove your name and contact details.
• Security logs: only as long as needed to protect the site and investigate abuse.

7. Your rights

You can ask to see the personal data we hold about you, correct it, delete it, or stop us using it for a purpose you agreed to. Most of it you can change yourself in My account. For anything else, contact us; we reply within 21 working days. You may also complain to the Data Protection Authority of Sri Lanka.

8. Security

Data is sent over HTTPS, passwords are hashed, private files (CVs, slips, claim documents) are not publicly accessible, and staff access is protected by two-factor authentication and logged.

9. Children

Tap to Lanka is not meant for children under 13, and we do not knowingly collect their data.

10. Changes and contact

If we change this policy, the date at the top will change, and important changes will be announced on the site. Questions or requests: [email protected].