Privacy Policy

ceylonservices.lk (“we”, “us”, “our”) is a Sri Lankan local-services marketplace that connects customers with verified service providers and agents across a wide range of everyday needs — from vehicle repair and home maintenance to food, transport, tourism, events, health, and education. This Privacy Policy explains what personal information we collect when you use our website and mobile services, how we use it, and the choices available to you.

This policy is governed by the laws of Sri Lanka, including the Personal Data Protection Act, No. 9 of 2022 (PDPA). By using ceylonservices.lk, you agree to the practices described below.

Our platform supports service listings and bookings across 11 main categories:

The data we collect and how we use it depends on the category and on whether you are a customer, provider, or agent — explained in the sections below.

Depending on how you use ceylonservices.lk, we collect the following categories of data:

Account Information

• Full name, username, and unique member code (e.g. WDK-00001)
• Mobile number (Sri Lankan format) and/or email address
• Password (stored only as a secure hash)
• Google account details, if you sign in via Google OAuth

Identity & Verification (Providers & Agents)

• National Identity Card (NIC) number and images
• Business Registration details and documents, where applicable
• Profile photo

Service Listing Data (Providers)

• Service titles, descriptions, photos, pricing, and availability/leave dates
• Category and sub-category selections (Home Services, Transport, Events, etc.)
• Operating areas and service locations

Booking, Messaging & Review Data

• Service requests, booked dates, and status
• Messages exchanged through the in-app chat
• Ratings, reviews, and comments (including images attached to them)
• Favourites, community posts, and interactions

Location Data

• District, city, and approximate geo-coordinates (latitude/longitude) for listings and searches
• Service area used to filter nearby providers

Financial Data (Agents)

• Bank account details used solely for payout processing
• Canvassed service records and commission history

Technical & Usage Data

• Device type, browser, IP address, and operating system
• Login times, SMS OTP events, and audit logs
• Cookies and similar technologies (see Section 7)

• To create and secure your account and issue your unique member code
• To verify providers and agents via NIC and/or Business Registration checks
• To display service listings, match customers to nearby providers, and enable bookings
• To deliver in-app messaging, ratings, reviews, and community features
• To send OTPs for login, registration, phone changes, and password resets via Notify.lk SMS
• To process agent payouts to the bank account on file
• To improve platform safety, detect fraudulent canvass records, and investigate abuse
• To comply with legal obligations in Sri Lanka
• To send service updates, receipts, and (with consent) promotional messages

We do not sell your personal data. We may share limited information in these cases:

• With providers— when you book or enquire about a service, your name, member code, contact number, and service-location details may be shared to complete the job.
• With agents— an agent may see your member code and the service they canvassed for you; they do not see your NIC or full account details.
• With service partners— SMS gateways (Notify.lk), hosting providers, payment/payout processors, and Google (for OAuth sign-in), strictly to operate the platform.
• With authorities— when required by Sri Lankan law, court order, or lawful request from law-enforcement or the Data Protection Authority.
• Business transfers— in the event of a merger or acquisition, with prior notice to affected users.

Location is central to finding nearby providers. We use approximate coordinates and area filters to show relevant listings, and providers choose the areas in which they operate. You can disable precise location sharing in your device settings at any time, though this may reduce the accuracy of nearby-service results.

We use cookies and similar technologies to keep you logged in, remember preferences, and understand how our platform is used. You can control cookies through your browser settings. Disabling essential cookies may prevent you from signing in.

Under Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectify — correct inaccurate or incomplete information
• Erase — request deletion of your account and associated data
• Object — object to processing for marketing or profiling
• Withdraw consent — where processing is based on your consent
• Portability — receive your data in a structured, machine-readable format
• Lodge a complaint— with the Data Protection Authority of Sri Lanka if you believe your rights have been violated

To exercise any of these rights, email us at [email protected].

We retain your data for as long as your account is active, and for a reasonable period afterwards to comply with legal, accounting, and dispute-resolution obligations. Verification documents (NIC, BR) are retained only while the related profile is active and are soft-deleted after account closure, unless retention is required by law. Reviews and community posts may remain visible to maintain the integrity of the rating system, but are disassociated from your name on request.

We apply industry-standard technical and organisational measures to protect your data: HTTPS encryption in transit, hashed passwords, OTP-based phone verification, restricted staff access, audit logging, and regular security reviews. No system is perfectly secure, so we encourage you to use a strong password and to never share OTPs.

ceylonservices.lk is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. Material changes will be notified via the platform or by SMS/email. The “Last updated” date at the top of this page shows when the policy was most recently revised.

If you have questions or concerns about this Privacy Policy or your data, reach out to us: