Lanka Sathosa

Lanka Sathosa Limited (herein after referred to as LSL) has a firm commitment to safeguard privacy of users accessing LSL E-Commerce Platform. This Privacy Policy for LSL E- Commerce Platform (hereinafter referred to as the ‘Policy’) sets out LSL’s commitment to privacy of the users of the platform/website.

This Policy is applicable for the parties who access LSL E-Commerce Platform (hereinafter referred to as the ‘Users’) to purchase goods and/or services from LSL E-Commerce platform (hereinafter referred to as the ‘Website/Platform’)

The Users understand that the user’s personal data shall be entered in to the LSL system by the Users. As such, Users shall be solely responsible for any submission or entry of inaccurate or incomplete data.

Users, having read and having satisfied themselves of the Policy hereinafter recited continues to use or access the Website and such continued access shall mean User’s consent to collect, store and process the User’s data. Process shall mean and include but not be limited to collect, store, preserve, alter, retrieve, disclose, transmit, align, combine or carry out logical or arithmetic operations. In the event the User is not satisfied with the privacy commitment under this Policy, User shall immediately discontinue the use of service and/or access to this Website and inform LSL via [email protected] of User’s withdrawal of consent.

1. Collection of Personal Data

Users understand that it is essential for LSL to collect personal data for the purpose of provisioning of services to the Users via this Platform. Users shall not provide any personal data belonging/relating to another person. The sales via this Website includes LSL services and third party services, which the Users may opt to purchase. LSL collect, store and process user data only for the purpose of processing purchases on the Website as detailed hereunder. LSL may collect personal information including, but not limited to, title, name, gender, date of birth, email address, billing address, delivery address, telephone number, mobile number, IP address, fax number, payment details, payment card details, purchase selections or bank account details of the User (hereinafter referred to as ‘User Data).

LSL will utilize User Data to process orders and to provide the Users with the services and/or information on the services offered through this Website. Further, LSL will use User Data for the purpose of placing of an order; the completion of a transaction; verify and carry out financial transactions in relation to payments; verification of the credit card, audit the downloading of data from the Website; arranging for a delivery of a purchase; improve the layout and/or content of the pages of the Website and customize or to personalize them for Users; identify visitors on the Website and/or carry out research on Users’ demographics (Primary Purpose).

LSL may send useful information to the Users, provided that Users have marked “entitlements” displayed on this Website for the purpose of being contacted. This would indicate the User’s free, specific, informed and unambiguous consent. Subject to obtaining User consent, LSL may contact Users via email, SMS or any other consented means with details of other products and services offered through this Website for the purposes of marketing, advertising and promoting of other products and Services, other than those delivered under the Website (Secondary Purpose). In the event the Users do not wish to receive any unsolicited marketing communications from LSL, they can opt out from such communications at any time by clicking unsubscribe link in the emails, through the entitlement page on the website or by directly emailing to [email protected]

2. Information Shared with Third Parties

Users understand that, in general, the third-party providers on the Website engaged by LSL will only collect, use and disclose User Data only for the Primary Purpose under this Policy.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect of the purchase-related transactions.

Further, subjected to a non-disclosure agreement, LSL may share User’s name, telephone number and address to third parties in order to assist with delivering of the products to Users and to collect payments from Users relating to the achieving of the Primary Purpose. (eg. courier).

Unless the same is required for achieving of the Primary Purpose or by Law, LSL shall NOT sell or disclose User Data to third parties without obtaining prior consent of the User.

3. Cookies

Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to the browser from the Website and stored on hard drive of the User devices when using this service. LSL and selected third parties of the Website use “cookies” to provide Users with a better, faster and safer user experience or to show personalized advertising.

Cookies and similar technologies may have following functions among other things:

They may be technically necessary for the provision of the service

They help to optimize the services (e.g. monitoring of error messages and loading times)

They help LSL to improve User experience (e.g. save font size and form data entered)

They allow LSL to show Users more relevant advertisements

Where possible, LSL take appropriate security measures to prevent unauthorized access of cookies and similar technologies. A unique ID ensures that only LSL and/or selected third parties have access to User Data on cookies.

4. Retention of Data

Users shall understand that LSL shall retain the User Data up to the period the same is necessary for the purpose/s they are being processed. However, the Users shall understand that LSL may store and retain data for archiving purposes obligatory/entitled under the law. Further, LSL shall be obliged/entitled to retain User Data without erasure or further processing in the event the same is required for evidentiary purposes or retention purposes under a written law or for a criminal investigation or judicial proceeding.

5. Security of Data

User Data shall be treated as confidential and be protected from unauthorized disclosure or modification. LSL is committed to protect User Data through technical and organizational security measures to minimize risks associated with data loss, misuse, unauthorized access, unauthorized disclosure, unauthorized destruction and alteration. The User Data will always be treated as confidential information by LSL.

It should be noted that, Users are solely responsible for protecting their passwords and their devices against unauthorized access.

If a User attempts to change the password or attempt any other account activity, User may be required to enter their current password.

Users can typically end the signed in session by either signing out and/or clearing the cookies. If a User has certain browser privacy settings enabled, simply closing the browser may also end signed in session. When using a public or shared computer, User shall sign out and/or clear cookies in order to protect their account and personal User Data.

User shall be solely responsible for password protection proper sign-out and such other acts of securing their data and keep LSL indemnified of repercussions of failure to do so.

6. Consent of the User

Users understand that purchasing of Goods and/or Services from LSL by accessing the LSL E-Commerce Platform amounts to granting of the consent for the use of User Data for achieving of the Primary Purpose as detailed under this Policy.

Any use of the User Data by LSL for a Secondary Purpose as defined herein will be made with the consent of the User and an opportunity will be provided to the User to decline/withdraw such consent subsequently at any given point.

As such, in the event of LSL wishing to use User Data for any Secondary Purpose, LSL shall obtain the prior consent of the User to use, share, transfer or dispose any User Data to a third party.

For avoidance of doubt, the User understands that, once the consent is given, LSL may, from time to time, send pop-ups, alerts and messages to the User of any new product or service available under the Website without further consent of the User.

7. Children's Privacy

This service is not intended for the use by Minors (below the age 18). LSL will not knowingly collect User Data from Users who are considered children/minors. This Policy do not permit the use of the service by children/minors.

8. User Rights

Users are entitled to withdraw the consent given for the collection and processing of the User Data at any time. Such withdrawal of consent will not affect any lawful collection, processing or transaction created prior to such withdrawal.

Further, the Users may request the erasure of the User Data, subject the rights of LSL under clause 09.

The Users shall have the right to request LSL to provide a written confirmation on the User Data collected or processed by LSL from time to time. Such right of access to User Data shall not mean or construe any right of the User to access the premises or systems of LSL, but only to obtain confirmation and information of User Data on a hard or softcopy format.

Users may, with legitimate proof of the same, request to rectify or complete any personal data, which is either inaccurate or incomplete.

User’s may request to correct, update or remove any information that may be in LSL’s records by sending an e-mail with the details of the request to or through the complete contact information on the ‘Contact Page.’

Users shall have the right to request for a written confirmation from LSL whether User request for rectification, completion, erasure or refraining from further processing would be granted or refused.

Users are free to disable the use of any cookies supported by the device. Users may refuse the use of cookies by selecting the appropriate settings on their browser; however, in the event of a User doing so, such User may not be able to use the full functionality of this Website.

In the event a User decides not to use cookies, LSL will not use cookies to personalize the advertisements. However, the User will continue to receive general advertisements.

9. Rights of LSL

LSL may with the consent of the User, use the User Data collected or processed for any Secondary Purpose other than the purpose of delivering Services under the Website.

LSL may refuse to collect additional data, which are not required for purpose of delivering of services under the Website, or refuse to make any changes to the collected data unless legitimate proof is provided in the process of rectifying inaccurate or incomplete User Data.

LSL shall be entitled to retain User Data without erasure or further processing in the event the same is required for evidentiary purposes or retention purposes under a written law or for a criminal investigation or judicial proceeding.

LSL shall have the right to grant or refuse any request by the User for rectification, completion, erasure or refraining from further processing due to technical and operational feasibility of LSL to act on such request amongst any other reasons made available under any written law. However, LSL shall inform the User of such decision of LSL

LSL reserves the right to impose any fees for grant of any requests made by the Users.

10. Using Data for Secondary Purpose

In the event the Users have given their consent, by ticking to the “entitlements”, LSL may use any telecommunication services, electronic or any other similar means for the purpose of disseminating messages in writing, electronically, orally, in pictorial or video forms for any Secondary Purpose. Any such message will be considered a solicited message for direct marketing to promote goods or services or to promote any person, entity or organization. Each time a solicited message is sent by LSL via Website for any Secondary Purpose the User will be given the option of opting-out of receiving solicited messages. Therefore, any Users who shall wish to obtain such solicited messages shall signify their agreement consent for the collection and processing of the User Data for the said purpose by way of clicking to “entitlements” box indicated on the Website.

11. Exceptions to this Policy

The laws of the Democratic Socialist Republic of Sri Lanka will supersede over this Policy.

This Policy shall not be applicable in the event a User is redirected to another website/portal or a frame of another site or application which may have a link to the Website. LSL shall not be responsible for the privacy practices or content of those third parties or other sites and LSL encourage Users to read the privacy policies of such third parties or sites.

12. Changes to this Privacy Policy

LSL may update this Policy from time to time in response to changes in legal, technical or business environment. Changes to this Policy will take effect immediately upon its posting on the Website/platform. User can check the latest update by checking the “last updated date and time” displayed at the bottom of this Privacy Policy.

Last Updated by: 2020/07/01 12.30pm