Privacy Policy

Last updated: 22 October 2026

LankaAutoWeb.com (“we”, “us”, “our”) is a Sri Lankan marketplace for vehicles, spare parts and automotive services. This Privacy Policy explains what personal data we collect, why we use it, who we share it with, and the choices you have.

This policy should be read with our Terms & Conditions. By using the site, creating an account, posting a listing, or contacting us, you acknowledge this policy.

1. Who we are

The operator of LankaAutoWeb.com is the controller of personal data processed through this website. For privacy questions, account requests, or to exercise your rights, use the details in the Contact section below or our Contact Us page.

2. The data we collect

The information we hold depends on how you use the site. It may include:

• Account details — name, email address, mobile number, password (stored in hashed form), user type (individual or business), and profile photo.
• Google sign-in — if you choose “Sign in with Google”, we receive the identifier, name and email address Google shares with us for that login.
• Listings and business profiles — titles, descriptions, prices, locations, vehicle or parts details, photos, and the contact details you choose to show on an ad.
• Payments — membership or promotion amounts, payment method, transaction status, and, if you pay by bank slip, the slip image you upload. Card payments are processed by PayHere; we do not store full card numbers.
• Messages and support — contact-form submissions, reports of listings, and emails or calls you send us.
• Technical data — IP address, browser type, device information, pages visited, and cookies or similar identifiers as described in the Cookies section.
• Optional marketing — newsletter or alert sign-ups, if you subscribe.

If you post an ad, some of that information (for example your phone number, location and photos) is published so buyers can contact you. Do not include data you do not want to be public.

3. Why we use your data

We use personal data to:

• create and administer accounts, listings, business pages and memberships;
• show ads to other users and let interested buyers contact sellers;
• process payments, confirm bank slips, and keep transaction records;
• verify a mobile number (including by SMS where that service is enabled);
• moderate content, prevent fraud, spam, abuse and security incidents;
• respond to enquiries and send service messages about your account or listing;
• improve the site, including with aggregated usage statistics;
• send newsletters or promotional messages only where you have asked for them, or where the law allows;
• comply with Sri Lankan law and respond to lawful requests.

We rely on a combination of: performing a contract with you (for example providing an account or a paid membership); our legitimate interests in running a safe marketplace; consent (for optional cookies, newsletters, and some marketing tools); and legal obligations.

4. Cookies

Cookies are small text files stored on your device when you visit a website. We use them to keep the site working, remember choices you make, and — only if you allow it — to measure traffic and support sharing and advertising.

We group cookies into four categories:

• Strictly necessary — required for security, login, and core features. These are always on and cannot be switched off.
• Functional — remember choices such as language or layout. We do not currently use this category.
• Analytics — help us understand how the site is used (Google Analytics).
• Marketing — used for advertising and social sharing tools (Meta Pixel, ShareThis).

Third parties that may set cookies if you grant the relevant category: Google Analytics, Meta (Pixel), and ShareThis. Typical durations are up to 12 months for your consent choice stored in this browser, up to 2 years for Google Analytics, up to 90 days for the Meta Pixel, and up to 13 months for ShareThis, unless you delete them sooner.

You can change or withdraw consent at any time via the Cookie settings button. Strictly necessary cookies will remain. Withdrawing analytics or marketing consent stops those tools from loading on later visits and deletes matching first-party cookies we can reach on this site.

Third-party cookies set by Google, Meta, or ShareThis on their own domains can be cleared in your browser’s cookie or site settings. Clearing those in the browser is the only way to remove cookies we cannot delete from this site.

We also use Google reCAPTCHA on some forms to reduce spam, and Google Maps where a map is shown. Those services are provided by Google under Google’s own terms and privacy policy.

5. Who we share data with

We do not sell your personal data. We may share it with:

• Other users — contact and listing details you publish on an ad or business profile.
• Payment providers — currently PayHere, to complete online payments.
• SMS and email providers — to send verification codes or service messages.
• Analytics and advertising partners — Google, Meta and ShareThis, only if you have allowed the matching cookie category.
• Hosting, storage and IT suppliers — who process data on our instructions.
• Authorities — where the law requires, or to protect our rights, users or the public.

Some of these providers may process data outside Sri Lanka (for example Google or Meta). Where that happens, we take steps that are reasonable in the circumstances, and those providers apply their own safeguards.

6. How long we keep data

We keep account and listing data while your account is open and for a period afterwards as needed for moderation, dispute handling, tax and accounting, and legal claims. Payment records are kept for as long as Sri Lankan financial and tax rules require. Cookie consent stored in your browser is treated as valid for up to 12 months. You can ask us to delete your account; some records may still be retained where the law requires or where we have a legitimate need (for example to show why a listing was removed).

7. Security

We use access controls, hashed passwords, and HTTPS to protect the site. No method of transmission or storage is completely secure. Please use a strong unique password and keep your login details private. Listing photos may be watermarked to discourage unauthorised reuse; a watermark is not a guarantee against copying.

8. Your rights

Subject to the Personal Data Protection Act, No. 9 of 2022 and other applicable law, you may request to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete data, or restrict or object to certain processing;
• withdraw consent where processing is based on consent (this does not affect processing already carried out);
• change cookie preferences at any time via Cookie settings.

To make a request, contact us using the details below. We may need to verify your identity. You may also complain to the Data Protection Authority of Sri Lanka.

9. Children

The site is intended for people aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has given us data, please contact us so we can delete it.

10. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site after an update means you should review the new version.

11. Contact

LankaAutoWeb.com
Email: [email protected]
Phone: +94 70 230 4799
Address: Templers Road, Mount Lavinia, Sri Lanka
Contact Us