Privacy Policy

1. Who We Are

peta.lk is owned and operated by 1xtec, a technology company based in Sri Lanka. All platform operations, data management, and business decisions are the sole responsibility of 1xtec. References to "we", "us", or "our" in this policy refer to 1xtec.

2. Information We Collect

We collect the following information when you use peta.lk:

• Account information — name, email address, phone number, and password (stored as a secure hash).
• Listing information — ad titles, descriptions, photos, prices, and location data you provide when posting ads.
• Order information — delivery addresses, order preferences, and transaction records.
• Usage data — pages visited, search queries, and device/browser information (collected for analytics and platform improvement).
• Payment slips — images uploaded to verify bank transfer payments (stored securely and accessible only to authorised staff).

3. How We Use Your Information

• To create and manage your account.
• To display your listings to other users.
• To process and track orders between buyers and sellers.
• To send transactional notifications (order updates, payment confirmations).
• To improve platform features and user experience.
• To detect and prevent fraud, abuse, or policy violations.

4. Information Sharing

We do not sell your personal information to third parties. Your data may be shared only in the following limited circumstances:

• Between buyers and shop owners — to facilitate order fulfilment (e.g., your name and phone number may be visible to the shop owner you place an order with).
• Service providers — trusted third-party services we use to operate the platform (e.g., email delivery, hosting). These parties are bound by confidentiality obligations.
• Legal obligations — if required by Sri Lankan law, court order, or to protect the rights and safety of our users.

5. Data Storage & Security

All data is stored on secured servers. We use industry-standard encryption and access controls to protect your information. Passwords are never stored in plain text — they are hashed using bcrypt.

Despite our best efforts, no system is completely immune to security risks. We encourage you to use a strong, unique password and to log out when using shared devices.

6. Cookies & Sessions

peta.lk uses session cookies to keep you logged in and to maintain your cart between visits. These cookies are essential for the platform to function. We do not use advertising or tracking cookies from third parties.

7. Your Rights

• You may update your personal information from your profile page at any time.
• You may request deletion of your account and associated data by contacting us.
• You may request a copy of the personal data we hold about you.

8. Children's Privacy

peta.lk is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us so we can remove it.

9. Changes to This Policy

1xtec may update this Privacy Policy from time to time. We will notify users of significant changes by posting a notice on the platform. Continued use of peta.lk after changes are posted constitutes acceptance of the updated policy.