Privacy Policy

This Privacy Policy sets out how Schokman and Samerawickreme ("we", "us", or "our") collects, uses, stores, discloses, and protects personal data of users ("you" or "Users") who access and use our website and online marketplace (the "Platform"). By accessing, registering on, or using the Platform, and by ticking the confirmation box indicating that you have read and understood this Privacy Policy, you expressly consent to the collection, use, processing, and disclosure of your personal data in accordance with this Policy.

This Privacy Policy is prepared in accordance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka and other applicable laws of the Democratic Socialist Republic of Sri Lanka.

We respect your right to privacy and are committed to protecting your personal data. We take reasonable legal, administrative, technical, and organisational measures to safeguard personal data against unauthorised access, loss, misuse, alteration, or disclosure.

We may collect and process personal data that you voluntarily provide when registering, placing an order, or communicating with us, including your full name, National Identity Card (NIC) number, residential or business address, email address, telephone or mobile number, login credentials, delivery and billing details, and such other information as is reasonably necessary to provide our services.

We may also collect payment-related information required to process transactions through secure Sri Lankan and international third-party payment gateways. We do not store your card details.

When you use the Platform, we may automatically collect certain technical and usage information, including your IP address, browser type, device information, pages visited, time spent on the Platform, and similar usage data. Such information does not, by itself, identify you personally.

We use cookies and similar technologies to enhance user experience, analyse usage patterns, and improve the functionality and performance of the Platform. You may disable cookies through your browser settings; however, doing so may affect certain features or functionality of the Platform.

We process your personal data for lawful purposes including creating and managing user accounts, facilitating purchases and payments, arranging delivery or collection of goods, communicating with you regarding transactions, improving Platform performance and security, and complying with legal or regulatory obligations.

We may disclose your personal data strictly to the extent necessary for lawful purposes, including to sellers or consignors of goods purchased by you where such disclosure is required to complete the transaction, to service providers or contractors assisting us in operating the Platform, to payment processors, and to courts, regulators, or public authorities where disclosure is required by law or court order. We do not sell or trade your personal data.

We implement reasonable security safeguards, including access controls and secure system architecture, to protect personal data. While we take reasonable measures, no electronic system is entirely secure and absolute security cannot be guaranteed.

We retain personal data only for as long as is reasonably necessary for the purposes stated in this Privacy Policy or as required by law. Unless a longer period is required, personal data will generally not be retained for more than two (2) years after you cease using the Platform or close your account.

Subject to applicable law, you may request access to, correction of, or erasure of your personal data, withdraw consent where processing is based on consent, or object to processing in certain circumstances. Requests must be made in writing and may require proof of identity.

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such third parties.

We reserve the right to amend this Privacy Policy at any time. Any amendments will be published on the Platform and will take effect upon publication. Continued use of the Platform after such publication constitutes acceptance of the amended Policy.

This Privacy Policy shall be governed by and construed in accordance with the laws of the Democratic Socialist Republic of Sri Lanka.

For the avoidance of doubt, we do not knowingly collect, request, or require copies or scans of your NIC, passport, driving licence, or other identity documents for ordinary use of the Platform, unless we notify you otherwise and such collection is lawful and reasonably necessary.

In addition to the personal data listed above, we may create or maintain records associated with your use of the Platform, including your order history, invoices, delivery/collection records, communications with our customer support, and records relating to refunds, disputes, cancellations, or complaints, to the extent reasonably necessary for operational, accounting, audit, and legal purposes.

Where you contact us via email, telephone, chat, social media, web forms, or other channels, we may retain records of such communications and any information you provide, and use them for customer support, quality assurance, training, and dispute resolution.

We may use your contact details to send you transaction-related communications, including account verification, order confirmations, invoices, payment status updates, delivery/collection notifications, and security alerts. Such communications are considered necessary for the performance of our services.

If you opt in, or where permitted by applicable law, we may send you marketing communications relating to the Platform, new listings, promotions, or updates. You may opt out of marketing communications at any time by using the unsubscribe function (where available) or by contacting us using the contact details stated above. Transaction-related messages may still be sent even if you opt out of marketing.

We may process personal data to prevent, detect, investigate, and address fraud, suspicious activity, misuse of the Platform, breaches of our Terms and Conditions, and security incidents, including by maintaining audit logs and monitoring unusual account activity.

We may use personal data and usage information to improve the Platform, including by carrying out analytics, troubleshooting, testing, and performance monitoring. We may also use aggregated or anonymised information for research, statistical analysis, and business planning.

Our cookies and similar technologies may include strictly necessary cookies (for core Platform functions such as login, cart, and checkout), performance/analytics cookies (to understand usage and improve performance), and functionality cookies (to remember certain user preferences). Where required, we will request your consent for non-essential cookies.

Certain services that support the Platform (including hosting, cloud services, email delivery, analytics, customer support tools, and payment gateways) may be provided by third parties. Where such third parties process personal data on our behalf, we require them to maintain appropriate confidentiality and security standards.

Payment transactions are processed through third-party payment gateways and processors. Your payment details may be handled directly by such third parties in accordance with their own policies and security standards. We do not store your full card details on our servers.

Depending on the service providers used by us, your personal data may be processed or stored in jurisdictions outside Sri Lanka (for example, where a payment gateway, cloud host, or technology provider operates internationally). Where cross-border processing occurs, we will take reasonable measures to ensure that such processing is carried out with appropriate safeguards and in accordance with applicable Sri Lankan law.

We may be required to retain certain records for longer periods than those stated above where retention is reasonably necessary for tax, accounting, audit, statutory compliance, enforcement of rights, prevention of fraud, or for any legal proceedings, investigations, or regulatory inquiries.

You are responsible for maintaining the confidentiality of your login credentials. You agree to notify us promptly if you believe your account has been accessed without authorisation or if there is any other security incident relating to your account.

You agree that you will not provide personal data of any third party to us (including delivery contact details) unless you have obtained the necessary authority or consent to do so.

The Platform is intended for users who are competent to contract. If you are below the age of 18 years, you should not create an account or use the Platform without the involvement and consent of a parent or legal guardian.

Where you request access, correction, deletion, or other action in relation to your personal data, we may decline or limit such request where permitted by law, including where compliance would conflict with legal obligations, legitimate business purposes, or the establishment, exercise, or defence of legal claims.

If we become aware of a material personal data breach affecting your personal data, we will take reasonable steps to investigate, mitigate, and respond, including notifying affected users and/or relevant authorities where required or appropriate.

If you are not satisfied with our response to a privacy-related request or complaint, you may raise the matter with the relevant authority or any other forum available under applicable law.

By ticking the relevant box during registration or checkout, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

If you have any questions or requests relating to this Privacy Policy or your personal data, you may contact: