Privacy Policy

Sri Lanka Real Estate ("we", "us", "our") is committed to protecting your personal information.

This Privacy Policy explains what data we collect, why we collect it, how it is used and shared, and the rights you hold over your data. By using our platform at https://srilankarealestate.lk, you agree to the practices described here.

1. Personal Information We Collect

We collect personal information necessary to provide our property listing, search, and lead-generation services. This includes:

• Contact details: full name, email address, mobile number (with +94 prefix), and postal address.
• Account information: username, password (hashed), profile photo, and lister type (Owner, Agent, or Developer).
• Property listing data: property address, coordinates, price, photos, title deed documents, and ownership documents submitted through our platform.
• Search and browsing data: saved searches, favourited listings, browsing history, and filter preferences.
• Communication data: messages sent via our lead inquiry forms, WhatsApp click-throughs, and in-platform contact requests.
• Payment information: billing details processed via PayHere; we do not store card numbers or CVVs.
• Employment and tenancy details (renters only): employment status, employer name, and referee information when required for rental applications.
• Device and technical data: IP address, browser type, operating system, referring URLs, and session identifiers via cookies and similar technologies.

2. How We Collect Your Information

• Directly from you when you register, list a property, submit an inquiry, or contact us.
• Automatically through cookies, analytics tools (e.g. Google Analytics), and server logs when you browse the platform.
• From third parties such as Google or Facebook when you choose to sign in via social media OAuth.
• From publicly available property registries or government land data where applicable.

3. How We Use Your Information

We process your personal information for the following purposes:

• Service delivery: to operate accounts, display listings, match buyers to properties, and facilitate lead connections between buyers and agents/developers.
• Verification: to review and approve listings, verify agent and developer credentials, and issue Verified badges.
• Communications: to send listing status updates, lead notifications (via email and WhatsApp), renewal reminders, and OTP verification codes.
• Payments: to process listing fees and subscription charges through PayHere and issue receipts.
• Marketing: to send you relevant property recommendations, platform updates, and promotional offers. You may opt out at any time.
• Analytics and improvement: to understand usage patterns and improve the platform.
• Legal compliance: to meet obligations under applicable Sri Lankan laws and regulations.

4. Sharing Your Information

We do not sell your personal information to third parties. We may share it with:

• Property buyers, tenants, and agents: limited contact details are shared when you choose to receive or respond to a lead inquiry.
• Payment processors: PayHere receives the information required to process your transaction securely.
• Cloud service and IT providers: AWS (hosting and storage), Cloudinary (image delivery), SendGrid (email), and Twilio (SMS), all bound by confidentiality obligations.
• Analytics providers: Google Analytics receives anonymised usage data to help us improve the platform.
• Legal authorities: where required by Sri Lankan law, court order, or to protect the rights and safety of users.

5. International Data Transfers

Some of our service providers operate outside Sri Lanka. Where personal information is transferred internationally, we take reasonable steps to ensure the recipient handles it in accordance with applicable data protection obligations, including contractual safeguards and data processing agreements.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Listing data is retained for the duration of the listing plan plus a 30-day grace period. Account data is retained for 12 months following account deletion requests, after which it is permanently deleted or de-identified, except where retention is required by law.

7. Cookies

We use cookies and similar technologies to personalise your experience, analyse usage, and serve relevant content. For full details, please refer to our Cookie Policy available on the platform.

8. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your data (subject to legal retention requirements).
• Opt out of direct marketing communications at any time.
• Lodge a complaint with us or a relevant authority if you believe your privacy rights have been violated.

To exercise these rights, contact our Privacy Officer at info@srilankarealestate.lk.

9. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords, role-based access controls, and encrypted storage for sensitive documents. While we strive to protect your data, no system is 100% secure. We encourage you to use a strong password and log out from shared devices.

10. Children

Our platform is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted at https://srilankarealestate.lk/privacy-policy with the updated effective date. Continued use of the platform after changes constitutes acceptance.