How we collect, use, and protect your data

1. Introduction

eUNLOCK Solutions (“eUNLOCK”, “we”, “our”, “us”) is committed to protecting the privacy of visitors to our website (eunlock.lk) and users of our products and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or otherwise interact with us.

If you do not agree with this policy, please discontinue use of the site and services.

2. What personal data we collect

• Contact information — name, email address, phone number, address.
• Account information — username, password, profile details.
• Payment information — billing address and payment details (processed by our payment partners; we do not store full card numbers).
• Usage data — IP address, browser type, pages viewed, referring/exit pages, timestamps.
• Device & technical data — device type, operating system, browser version.
• Communication data — messages or support requests you send us.

3. How we use your data

• Provide, operate, maintain, and improve the website, products, and services.
• Process transactions, manage accounts, and fulfill requests.
• Communicate with you (e.g., service updates, newsletters, marketing if you agree).
• Respond to comments, questions, and support tickets.
• Monitor and protect the security and integrity of our systems.
• Comply with legal obligations and enforce agreements.

4. Legal basis for processing

We rely on one or more lawful grounds to process personal data, including:

• Your consent.
• Performance of a contract with you.
• Compliance with legal obligations.
• Our legitimate interests, provided they do not override your rights and freedoms.

Note for Sri Lanka (PDPA): We will align our practices with the Personal Data Protection Act, No. 9 of 2022, including consent, purpose limitation, and data subject rights.

5. Data sharing and disclosure

We may share personal data:

• With service providers and processors (hosting, payments, analytics, marketing, support) under confidentiality and data protection obligations.
• To comply with laws, legal process, or regulatory requests.
• To protect our rights, property, safety, or that of users and the public.
• In connection with a merger, acquisition, financing, or sale of assets.

6. Data security

We employ reasonable technical, administrative, and physical safeguards designed to protect personal data. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

7. Data retention

We retain personal data only as long as necessary for the purposes described in this policy, to comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer needed, we will delete or anonymize it securely.

8. Cookies & tracking technologies

We use cookies and similar technologies to analyze usage, enhance experience, and support advertising or analytics. You may manage cookies via your browser settings; some features may not function properly without cookies.

9. Your rights

Depending on applicable law, you may have the right to access, correct, delete, or restrict processing of your personal data; object to certain processing; withdraw consent; and request data portability.

To exercise your rights, contact us using the details below. We may need to verify your identity before fulfilling your request.

10. Cross‑border transfers

Where personal data is transferred outside Sri Lanka or your country of residence, we implement appropriate safeguards consistent with applicable data protection laws.

11. Children’s privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us so we can take appropriate action.

12. Changes to this policy

We may update this Privacy Policy periodically. We will post the updated version on this page with a new effective date. Please review this page from time to time.

13. Contact us