Privacy Policy
Clear information about how your personal data is handled across VikiniMataEtha.
Clear information. Practical next steps.
Built around the same trusted marketplace experience used throughout VikiniMataEtha.
Sri Lankan marketplace
Local support, clear policies and island-wide service.
Customer-first guidance
Simple explanations without hidden or unsupported claims.
1. Scope, controller role and legal framework
Last updated: 24 August 2026. This policy explains how VikiniMataEtha handles personal data when you browse, create an account, place an order, make or confirm a payment, receive delivery or collection, use warranty or return services, post reviews, or contact support.
Who is responsible
VikiniMataEtha is responsible for personal data used for its own marketplace operations. An identified seller, courier, bank or other independent service provider may also be separately responsible for processing it controls.
Sri Lankan data protection
We aim to process personal data lawfully, fairly, transparently and securely under applicable Sri Lankan law, including the Personal Data Protection Act, No. 9 of 2022 and requirements in force from time to time.
Your statutory rights remain
Nothing in this policy is intended to reduce rights or remedies available to you under applicable Sri Lankan law.
2. Personal data we collect
We collect only information reasonably needed to operate, secure and improve the marketplace and to meet legal or record-keeping obligations.
Account and contact data
Name, email, telephone number, account identifiers, password hash, addresses, district, language, verification status and details needed to identify an authorized recipient.
Order and product data
Cart and wishlist activity, product and variant selections, quantities, prices, discounts, invoices, order status, delivery instructions, returns, refunds, warranty records, claims, reviews and support evidence.
Payment and reconciliation data
Payment method, amount, currency, order and bank transaction references, payment or verification status, payer name where supplied, bank-transfer evidence, COD collection status, refund information, fraud signals and dispute information. We do not ask you to send full card numbers, card security codes, OTPs or online-banking passwords to VikiniMataEtha.
Device and usage data
IP address, browser and device type, operating system, approximate location derived from network information, pages viewed, searches, clicks, referral source, cookie choices, timestamps, diagnostics, performance data and security events.
Communications and feedback
Support messages, email or WhatsApp enquiries, transactional notification preferences, reviews, ratings, reactions, suggestions, survey responses, complaint or bug details, optional feedback screenshots, requested follow-up details, publication choices and records of consent or opt-out. Contact details and feedback attachments are not displayed in the public community section.
3. Why we use personal data
We use personal data for the purposes reasonably connected with providing and protecting the marketplace.
Accounts and requested services
To register and authenticate users, maintain carts and wishlists, show account history, answer enquiries and provide requested marketplace features.
Orders, payments and delivery
To validate stock and prices, accept and fulfil orders, verify bank transfers, manage COD or pay-at-store transactions, issue invoices, arrange home delivery or store collection and resolve delivery issues.
Warranty, returns and customer care
To determine warranty eligibility and provider responsibility, activate coverage from delivery or collection where applicable, handle serial or unit traceability, securely review claim photos or short video, communicate with the identified seller or manufacturer where needed, and manage returns, refunds, repairs, replacements and customer feedback.
Security, fraud and compliance
To protect accounts and systems, prevent duplicate or fraudulent transactions, maintain audit and accounting records, investigate incidents and comply with lawful requests from competent authorities.
Service improvement
To diagnose errors, measure site performance, improve search and product presentation, forecast operational needs and understand aggregate marketplace usage.
4. Banks and payment-related service providers
Current customer-facing payment methods are shown at checkout. VikiniMataEtha may use banks and other approved financial service providers only when required for the payment method you choose.
Information shared
We may provide an order reference, amount, currency, customer contact details and other information reasonably necessary to verify, reconcile, refund or investigate a transaction.
Independent processing
Banks and approved financial institutions may process information under their own legal duties and privacy notices. Use only official payment instructions shown at checkout or provided through verified support channels.
Payment security
Do not send passwords, OTPs, full card details or online-banking credentials to VikiniMataEtha support. If a future online payment method is introduced, its provider and relevant terms will be disclosed when that method is made available.
5. Delivery, collection and logistics
We may share only the personal and order information reasonably necessary with approved courier, logistics and fulfilment partners for delivery, tracking, COD collection, fulfilment, returns, delivery support, transit claims and financial reconciliation.
Information shared with approved logistics partners
Where necessary this may include the recipient name, primary or optional secondary mobile number, delivery address, city or district, order or parcel identifier, relevant order and shipping details, COD amount, delivery instructions, tracking or return information, and limited claim information needed to investigate a delivery issue.
Information received from logistics partners
We may receive tracking events, delivery attempts, operational branch or route information, proof-of-delivery references, COD collection status, return-to-origin status, loss or damage information, claim references and settlement information needed for support and reconciliation.
Purpose limitation
Courier and logistics data is used for fulfilment, delivery, tracking, COD collection, returns, delivery support, claims, reconciliation, fraud prevention and related record-keeping. We do not provide delivery partners with unrelated account information merely because they are handling a shipment.
Independent responsibilities
An assigned courier, logistics or fulfilment provider may separately retain transport and delivery records it controls for its own legal and operational obligations under its own privacy notice. VikiniMataEtha's customer policy is not tied to a fixed list of courier brands.
6. Other disclosures
We do not sell personal data. We disclose data only when reasonably necessary for marketplace operations, with your direction or consent, or where required or permitted by law.
Technology and support providers
Hosting, database, cloud storage, email, security, analytics, error monitoring, backup, customer support and maintenance providers may process limited data under appropriate contractual or confidentiality controls.
Sellers and professional advisers
An identified seller may receive only the order, contact, product, claim and evidence details reasonably needed to fulfil or support its product and advertised Seller Warranty. Accountants, auditors, insurers, banks, legal advisers and other professional advisers may receive information needed for lawful business, claims, tax, audit or dispute purposes.
Authorities and safety
We may preserve or disclose information where reasonably necessary to comply with law, court orders or valid authority requests, or to protect customers, the public, the marketplace or our legal rights.
7. Retention and security
We keep personal data only for as long as reasonably required for the relevant purpose, applicable legal retention periods, accounting, tax, fraud prevention, warranty, dispute or enforcement needs.
Security safeguards
We use access controls, authentication, authorization, logging, backups and other technical and organizational safeguards appropriate to the sensitivity and risk of the data.
No absolute guarantee
No internet or storage system can be guaranteed completely secure. If we identify a material incident, we will respond in accordance with applicable law and our incident procedures.
Account security
Use a strong unique password, keep your device secure and contact us promptly if you suspect unauthorized account access.
8. Your choices and rights
Subject to applicable law, you may have rights relating to access, correction, objection, withdrawal of consent where relevant, deletion or other control over personal data.
Access and correction
You can update certain account information directly. For other requests, contact VikiniMataEtha support so we can verify the request and respond appropriately.
Marketing choices
Where optional marketing is used, you may unsubscribe or withdraw the relevant permission. Transactional order, security and policy communications may still be sent where necessary.
Complaints
Contact us first if you have a privacy concern. You may also have a right to contact the Data Protection Authority or another competent authority under applicable Sri Lankan law.
Need more help?
We are here to guide your next step
Use our Help Center, order tools or contact options for clear assistance.