user Login / Register
post your ad

Privacy Policy

This Privacy Policy explains how Idamkadam.lk collects, uses, shares, and protects personal information. It also describes your rights and choices when using the Platform.

Effective: 1 February 2026 Last Updated: 1 February 2026 Applies to: Visitors, Users & Advertisers No selling of personal data
No card data stored Retention: 5 years (key logs) Cookies for sessions & security
Print / Save as PDF Privacy Help via WhatsApp Email Privacy / Support
What we collect

Account details, listing content, transaction metadata, device logs, and support communications (as needed).

Why we collect

To run the Platform, deliver paid services, prevent fraud, support users, and improve security & performance.

Your controls

Update your profile, request deletion, manage cookies, and contact us for privacy requests and corrections.

Jump to a section
Need privacy help?

Contact us for privacy questions, correction requests, or account deletion support.

HARITHA HOMES (PRIVATE) LIMITED
Company No: PV00333365

Related policies: Terms • Refund/Return

By using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy explains what we collect, why we collect it, and how you can control your information.

1.1 Platform Operator (Data Controller)

Idamkadam.lk is owned and operated by:

  • HARITHA HOMES (PRIVATE) LIMITED
  • Registered Company Number: PV00333365
  • Registered under the Companies Act No. 7 of 2007.

Contact (Privacy & Support):

1.2 What This Policy Covers
  • Visitors who browse the Platform (“Visitors”),
  • Registered users (“Users”),
  • Advertisers who post listings and purchase services (“Advertisers”),
  • Interactions with our pages, forms, features, communications, and support channels related to the Platform.

This Policy does not cover third-party websites or platforms you may access via links from the Platform (including social media platforms).

We collect different types of information depending on how you use the Platform:

2.1 Account and Login Data
  • Phone number, email address,
  • Google authentication identifier (if you sign in using Google),
  • Name details (if provided),
  • Password hash (we do not store your plain password).
2.2 Profile Data (Optional/Editable)
  • First name and last name,
  • WhatsApp number,
  • Phone number and/or email address (as applicable),
  • Other preferences or settings you choose to provide.
Security note: If you signed in using Google authentication, you may be required to set a password before changing certain account credentials to protect account security.
2.3 Advertisement (Listing) Content Data
  • Listing title, description, category, and attributes,
  • Images and media you upload,
  • Location information (e.g., city, district, and other location fields used by the Platform),
  • Contact/communication details you choose to show (depending on Platform features),
  • Listing status history (e.g., pending, approved, rejected, inactive).
2.4 Transaction and Payment Metadata (No Card Data Stored)
  • Transaction/reference IDs,
  • Purpose of payment (package/boost type),
  • Amount, currency, payment status,
  • Timestamps (created, paid, confirmed),
  • Gateway-related identifiers (e.g., merchant_rid, tr_id) when provided by the payment gateway,
  • Internal records connecting the transaction to your account and/or listing.

We do not store full card details, CVV, or payment credentials. (See Section 5.)

2.5 Technical, Device, and Usage Data
  • IP address, browser type/version, device identifiers (where available),
  • Operating system information,
  • Pages visited, clicks, and interaction logs,
  • Session and security logs, timestamps,
  • Error logs and diagnostic data.
2.6 Cookies and Similar Technologies
  • Session management (keeping you logged in),
  • Security and fraud prevention,
  • Performance and user experience improvements,
  • Analytics (as described in Section 9).
2.7 Communications and Support Interactions
  • Contact details, message content/call notes,
  • Summaries of requests and actions taken,
  • Timestamps and ticket/reference numbers (if used).
3.1 Provide and Operate the Platform
  • Create and manage user accounts,
  • Enable posting, displaying, and managing Ads,
  • Allow profile updates and account setting changes,
  • Enable platform features such as bookmarks/favorites.
3.2 Moderation and Platform Integrity
  • Review Ads for policy compliance,
  • Prevent prohibited content and misuse,
  • Enforce Terms and platform policies.
3.3 Payments, Orders, and Service Delivery Records
  • Process paid service requests (publishing packages, boosts),
  • Track service activation and duration,
  • Maintain transaction records for billing and support.
3.4 Security, Fraud Prevention, and Dispute Evidence
  • Detect suspicious behavior and unauthorized access,
  • Protect users and the Platform from fraud,
  • Maintain logs and evidence to handle disputes and chargebacks.
3.5 Customer Support and Notices
  • Respond to user requests and complaints,
  • Send service updates and policy/legal notices,
  • Provide operational updates related to transactions and listings.
3.6 Analytics and Improvements
  • Understand Platform usage patterns,
  • Improve features, reliability, and usability,
  • Debug issues and strengthen performance.
4.1 Contractual Necessity

When you register, post Ads, or purchase services, we process your data to deliver what you requested (for example: account access, ad publishing, boosts, transaction confirmation).

4.2 Legitimate Interests

We may process data for legitimate interests such as:

  • Maintaining platform security,
  • Fraud prevention and abuse detection,
  • Keeping audit logs and evidence for disputes,
  • Improving Platform safety and performance,

…as long as your rights are not overridden.

4.3 Consent

We may rely on consent when:

  • You choose to provide optional profile information,
  • Some cookies/tracking require consent (where applicable),
  • Marketing communications are introduced (if any).

You may withdraw consent where applicable (see Section 8).

Payments for packages/boosts are processed using a third-party payment gateway (currently Marx Payments).

  • Payment credentials (such as card details) are handled by the payment gateway and are not stored on our Platform.
  • We store only transaction metadata (see Section 2.4) to confirm payment, deliver services, support users, and handle disputes.
Important: Idamkadam.lk does not store full card numbers or CVV on our servers.

We do not sell your personal data. We may share data only when necessary:

6.1 Payment Gateway

We share required transaction information with the gateway to process payments and confirm outcomes.

6.2 Service Providers

We may share data with trusted service providers who help operate the Platform, such as:

  • Hosting and infrastructure providers,
  • Email/SMS/notification providers,
  • Analytics tools (if used),
  • Security monitoring tools (if used).

These providers are permitted to use data only to provide services to us.

6.3 Legal and Regulatory Requirements

We may disclose information when required by law, court order, lawful request, or to protect rights and prevent fraud.

6.4 Business Changes

If the Platform is involved in a merger, acquisition, restructuring, or transfer of assets, data may be transferred as part of that process, subject to appropriate protection.

7.1 Retention Periods

We retain personal data only as long as needed for the purposes in this Policy and for legal/operational requirements.

Transaction records, audit logs, and related evidence may be retained for up to 5 years to support:

  • Legal compliance and accounting recordkeeping,
  • Dispute handling and chargeback evidence,
  • Fraud prevention investigations.
7.2 What Happens When You Delete Your Account

If you delete your account (or request deletion):

  • Your Ads may be removed from public display and/or deleted,
  • Your bookmarks/favorites may be removed,
  • Your profile may become inaccessible.

However, certain records may remain for compliance and legitimate purposes, such as:

  • Transaction metadata,
  • Audit and security logs,
  • Dispute/chargeback evidence.
8.1 Access and Update

You can access and update most profile information through your account settings (where available).

8.2 Account Deletion

You can delete your account using the Platform’s account options (where available). Deletion effects are described in Section 7.

8.3 Withdraw Consent (If Applicable)

If we rely on consent (e.g., some cookies or marketing if introduced), you can withdraw consent by:

  • Adjusting browser/cookie settings,
  • Using opt-out methods provided (if marketing is introduced),
  • Contacting us (Section 13).
8.4 Privacy Requests

You may request:

  • Clarification about what data we hold,
  • Correction of inaccurate data,
  • Deletion requests (where feasible and lawful),
  • Restriction or objection (where applicable).
Data export: We may introduce data export in a future version (V2). Until then, requests may be handled manually depending on feasibility.
9.1 What Cookies We Use
  • Session and login management,
  • Security and fraud prevention,
  • Saving preferences,
  • Analytics (to understand usage patterns).
9.2 Managing Cookies

You can control cookies via your browser settings (block, delete, or warn before storing cookies).

Some Platform features may not function properly if cookies are disabled.

9.3 Third-Party Cookies

If third-party services are used (such as analytics tools or embedded content), they may set their own cookies. Where applicable, review the third-party policies.

We use reasonable safeguards to protect personal information, including (where applicable):

  • Password hashing (we do not store plain passwords),
  • Access controls and least-privilege internal access,
  • Encrypted transport (HTTPS) where configured,
  • Security monitoring and audit logs,
  • Fraud detection checks and transaction logging.

No system is 100% secure. You are responsible for protecting your login credentials and notifying us if you suspect unauthorized access.

The Platform is not intended for users under 18, and users under 18 are not permitted to register or use paid services. If we become aware that personal data of a minor has been collected, we may take steps to delete it and restrict the account.

We may update this Policy from time to time due to legal, operational, or service changes.

  • Updated versions will be published on the Platform and/or communicated via email or other electronic means.
  • The “Last Updated” date will indicate when changes become effective.

This Privacy Policy is effective from: 1 February 2026

For privacy questions, data requests, complaints, or policy inquiries:

Related legal pages: Terms & Conditions • Refund/Return Policy

© 2026 idamkadam.lk • This page explains how we handle personal information on the Platform.