Operated by: EasyFinder (Pvt) Ltd, a company incorporated under the Companies Act No. 07 of 2007 of the Democratic Socialist Republic of Sri Lanka, having its registered office at 1038/4, School Road, Kirindiwela. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use easyfinder.lk (the “Platform”).
Who This Policy Applies To
This Policy applies to:
- Buyers who browse or purchase services on the Platform;
- Free Tier Sellers listed on our directory;
- Verified Sellers who complete our verification process;
- Any other visitor to the Platform or app.
Data We Collect
2.1 Data You Provide Directly
| Category | Examples | Who it applies to |
|---|---|---|
| Account details | Name, email, phone number, password, address | All Users |
| Identity verification | NIC number/copy, date of birth | Verified Sellers |
| Background checks | Police Clearance Report / Certificate of Good Conduct | Verified Sellers |
| Professional documentation | Trade licences, insurance certificates (for High-Risk Services) | Verified Sellers |
| Payment details | Card details or bank details (processed via our payment gateway; EasyFinder does not store full card numbers) | Buyers, Verified Sellers |
| Listings and content | Service descriptions, photos, portfolio items, reviews | Sellers, Buyers |
| Communications | Messages sent through the Platform, support tickets | All Users |
2.2 Data Collected Automatically
- Device information (device type, operating system, browser);
- IP address and approximate location derived from it;
- Usage data (pages visited, searches made, time spent, click patterns);
- Cookies and similar technologies, as described in our Cookie Policy.
2.3 Data From Third Parties
- Payment confirmation and fraud-risk signals from our payment gateway provider;
- Where legally permitted, verification confirmation from government or law-enforcement sources used to validate submitted documents (e.g. confirming a Police Clearance Report is genuine).
Why We Use Your Data
| Purpose | Data used | Legal basis under PDPA |
|---|---|---|
| Creating and managing your account | Account details | Performance of contract |
| Processing Orders and payments | Payment details, Order history | Performance of contract |
| Verifying Sellers (identity, background, insurance) | NIC, Police Clearance Report, insurance documents | Performance of contract; legal obligation; legitimate interest in platform safety |
| Facilitating dispute resolution | Order details, messages, submitted evidence | Performance of contract; legitimate interest |
| Preventing fraud and abuse | Device/usage data, payment risk signals | Legitimate interest; legal obligation |
| Customer support | Communications, account details | Performance of contract |
| Improving the Platform | Aggregated usage/analytics data | Legitimate interest |
| Marketing communications | Contact details, preferences | Consent (opt-out available) |
| Complying with law (tax, regulatory reporting) | Transaction records, identity data | Legal obligation |
Sensitive Personal Data
NIC details, Police Clearance Reports, and insurance documentation submitted by Verified Sellers may constitute sensitive personal data under the PDPA. We collect this only where necessary for verification purposes described in our Terms and Conditions, apply additional access restrictions internally, and retain it only as long as necessary for that purpose or as required by law.
International Data Transfers
Where any of our service providers (e.g. cloud hosting or payment infrastructure) store or process data outside Sri Lanka, we take steps required under the PDPA to ensure such transfers are subject to adequate safeguards, such as contractual data protection commitments with the receiving party.
Data Retention
Account & Transaction Data
Retained for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and dispute-resolution requirements.
Verification Documents
NIC, Police Clearance Reports, insurance — retained only as long as necessary to maintain your Verified status and for the period required by applicable law, after which they are securely deleted or anonymized.
Marketing Data
Retained until you withdraw consent or unsubscribe.
Data Security
We apply technical and organizational measures appropriate to the sensitivity of the data involved, including:
Access Controls
Restricting who within EasyFinder can view identity and background-check documents.
Encryption in Transit
All data transferred between your device and our servers is encrypted.
PCI-Compliant Payments
Secure storage of payment information through our PCI-compliant payment gateway partner.
No system is completely secure, and we encourage Users to use strong passwords and safeguard their own account credentials.
Your Rights Under the PDPA
Subject to the PDPA and its implementing regulations, you have the right to:
Access
The personal data we hold about you.
Correct
Inaccurate or incomplete data.
Erasure
Request deletion of your data, subject to our legal retention obligations.
Object or Restrict
Certain processing, including direct marketing.
Withdraw Consent
At any time where processing is based on consent (e.g. marketing, non-essential cookies), without affecting the lawfulness of prior processing.
Lodge a Complaint
With the Data Protection Authority of Sri Lanka if you believe your data has been mishandled.
To exercise any of these rights, contact us using the details in Clause 12.
Children's Privacy
The Platform is not directed at individuals under 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected such data, we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be notified via the Platform or by email. The “Last updated” date at the top of this page reflects the most recent revision.
Contact Us
For questions about this Privacy Policy, to exercise your data rights, or to raise a concern, please reach out: