Privacy Policy

This policy is designed to comply with the Personal Data Protection Act, No. 9 of 2022 (PDPA) of the Democratic Socialist Republic of Sri Lanka. By using our website and services, you consent to the data practices described in this policy.

1. 01. The Data Controller

   For the purposes of the PDPA, Gadget Sri Lanka acts as the Data Controller. This means we determine the purposes and means of processing your personal data.

2. 02. Information We Collect

   To provide you with a seamless online shopping experience, we collect the following types of information:
   • Identity and Contact Data: Name, billing address, delivery address, email address, and phone/WhatsApp number.
   • Financial and Transaction Data: Payment details (processed securely via our third-party payment gateways) and details about payments to and from you, including your order history.
   • Technical and Usage Data: Internet Protocol (IP) address, browser type and version, time zone setting, and information about how you navigate and interact with our website.

3. 03. How We Use Your Information (Purpose & Lawful Basis)

   We will only process your personal data where we have a lawful basis to do so. We use your information for the following purposes:
   • To Fulfill Your Order: o Fulfill Your Order: Processing payments, arranging shipping, and providing order confirmations and invoices. (Lawful Basis: Performance of a Contract)
   • To Manage Our Relationship With You: Notifying you about changes to our terms or privacy policy, and handling customer service inquiries, including our 24-hour verification policy. (Lawful Basis: Performance of a Contract & Legitimate Interests)
   • To Improve Our Business: Analyzing website usage to improve our website, products, marketing, and customer experiences. (Lawful Basis: Legitimate Interests)

4. 04. How We Share Your Data

   As a strictly online business, we rely on trusted third parties to fulfill our services. We may share your data with:
   • Courier and Delivery Partners: We must share your name, delivery address, and phone number with third-party logistics providers to ensure your gadgets reach you.
   • Payment Processors: Secure third-party gateways that handle your payment transactions.
   • Legal Authorities: We may disclose your information where required by Sri Lankan law or to protect the rights, property, or safety of Gadget Sri Lanka, our customers, or others.
   We do not sell, rent, or trade your personal data to third parties for marketing purposes.

5. 05. Data Security

   We implement appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. Access to your personal data is limited to employees and third-party partners who have a strict business need to know.

6. 06. Data Retention

   We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Once the data is no longer necessary, it will be securely deleted or anonymized.

7. 07. Your Rights Under the PDPA

   Under the Personal Data Protection Act of Sri Lanka, you have the following rights regarding your personal data:
   • Right of Access: You can request a copy of the personal data we hold about you.
   • Right to Rectification: You can request that we correct any incomplete or inaccurate data we hold about you.
   • Right to Withdraw Consent: Where we are relying on consent to process your data, you have the right to withdraw that consent at any time.
   • Right to Object: You may object to our processing of your personal data for direct marketing purposes or where we are relying on a legitimate interest.
   To exercise any of these rights, please contact us using the information provided below.

8. 08. Third-Party Links

   Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

9. 09. Changes to This Privacy Policy

   We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any changes will be posted on this page with an updated "Effective Date."

10. 10. Contact Us

    If you have any questions about this Privacy Policy or our data protection practices, please contact us at: