Privacy Policy

Placeholder — to be replaced with lawyer-reviewed text in Phase 0.14.
Last updated: 2026-09-08

1. Who we are

Vikkaa.lk is operated by Vikkaa (Pvt) Ltd, a private limited company incorporated in Sri Lanka. The Data Protection Officer is the founder, reachable at privacy@vikkaa.lk.

2. What we collect

• Account information: name, email, phone (optional), preferred language
• Listing content you publish
• Inquiries from buyers about your listings
• Payment metadata (transaction IDs, amounts — never card numbers)
• Technical data: IP address, browser type, pages visited

3. Why we collect it

• To operate the Vikkaa.lk platform (legitimate interest, contract performance)
• To match buyers and sellers
• To process payments via licensed third-party gateways (PayHere)
• To comply with Sri Lankan tax and consumer-protection law
• To send transactional and (only with explicit consent) marketing emails

4. Your rights under PDPA 2022

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion (subject to retention obligations)
• Export your data in a portable format
• Withdraw consent to marketing communications at any time
• Lodge a complaint with the Sri Lankan Data Protection Authority

Contact privacy@vikkaa.lk to exercise any of these.

5. Retention

Account data: retained while your account is active + 24 months. Transaction records: retained for 7 years per Sri Lankan tax law. Inquiry data: retained for 12 months from last contact.

6. Cookies

We use essential cookies (session, CSRF) and, with your consent, analytics cookies (Google Analytics 4) and marketing cookies (Meta Pixel). You can manage cookie preferences in your browser.

7. Changes to this policy

We'll notify registered users by email at least 14 days before any material change to this policy.