Privacy Policy

This policy applies when you visit Lankan Web Directory, create or use an account, build or publish a business page, contact us, or otherwise use our services. In this policy, “we”, “us” and “our” mean Lankan Web Directory.

We aim to process personal data fairly, transparently and in accordance with applicable data-protection law, including Sri Lanka's Personal Data Protection Act, where it applies.

We may collect the following categories of information:

• Account information: your login email, account identifier, account status, plan, trial or subscription dates and account-role information.
• Business-page content: business name, description, services, location, address, phone number, public contact email, social links, images, logos and other content you submit.
• Communications: information in emails or support requests you send to us.
• Technical information: IP address, browser or device information, security events, approximate usage information and pages visited, when collected by our hosting, security, authentication or advertising services.

The purpose of the service is to publish business listings. Content you add to a business page may be visible to anyone on the internet once the page or listing is published or approved. Public information may be indexed by search engines, shared by other people, or retained in third-party caches outside our control.

Only provide business-page content that you are authorised and comfortable to make public. Do not publish private personal information, confidential material, or another person's data without a lawful reason and their permission where required.

We do not display your account login email as part of your public business page unless you separately submit it as public page content. Account information may be available to authorised administrators when reasonably necessary for account support, moderation, security and service administration.

Passwords are handled by our authentication provider and are stored using secure one-way hashing, not as readable plaintext. We and our administrators cannot view or recover your original password. If you forget it, you must reset it. You are responsible for keeping your password and account access secure.

We use information where reasonably necessary to:

• create, authenticate and administer accounts;
• build, review, approve, publish and display business pages;
• provide trials, plans and account features;
• respond to support requests and communicate about the service;
• detect abuse, protect accounts and maintain service security;
• operate, troubleshoot and improve the website; and
• meet legal obligations and enforce our rules.

Depending on the context and applicable law, processing may be based on providing the service you requested, your consent, our legitimate operational and security interests, or a legal obligation.

We do not sell your private account information. We may share or process information with service providers that help us operate the website, including:

• Supabase for authentication, database services and file storage;
• Cloudflare Turnstile for bot and abuse prevention;
• hosting and infrastructure providers that deliver and secure the website; and
• Google advertising services where advertisements are displayed.

These providers may process data in countries outside Sri Lanka under their own terms and privacy practices. We may also disclose information when required by law, to protect rights or safety, to investigate abuse, or as part of a business reorganisation with appropriate safeguards.

Public business-page information is, by its nature, shared with anyone who visits or accesses the published page.

The website and its providers may use cookies, local storage and similar technologies to maintain login sessions, protect forms, remember limited settings, understand performance and support advertising. Google advertising services may use identifiers or cookies subject to Google's settings and policies.

You can control cookies through your browser. Blocking essential storage or security technology may prevent login or other parts of the service from working correctly.

We use reasonable technical and organisational measures intended to protect account information against unauthorised access, alteration, disclosure or loss. These measures include managed authentication, access controls and security checks.

No online system is completely secure. We cannot guarantee absolute security, and public information should be treated as available to anyone. Please contact us promptly if you believe your account or information has been compromised.

We generally retain account and business-page information while your account or listing is active and for as long as reasonably needed to provide the service, resolve disputes, maintain security, comply with legal obligations and keep necessary records. Backup copies may remain for a limited period after deletion before being overwritten.

Removing a listing from our service may not immediately remove copies previously indexed, cached or shared by third parties.

You can review and update much of your business-page information through your account. You may also contact us to request access, correction, deletion or restriction of personal data, withdraw consent where processing relies on consent, or raise a privacy concern. Other rights may apply under relevant law.

We may need to verify your identity before acting on a request. Some information may be retained where required or permitted by law, for security, or to establish or defend legal claims.

Lankan Web Directory is intended for business owners and authorised business representatives, not children. You must not create an account or submit personal information if you are under 18 unless a parent or legal guardian has authorised and supervises your use where permitted by law.

We may update this policy when our service, providers or legal obligations change. We will publish the revised version here and update the date at the top. Material changes may also be communicated through the website or by email where appropriate.

For privacy questions or requests, email info@lankan.org. Please describe your request and include the email associated with your account, but never send us your password.