Privacy Policy

Sellers.lk provides the online-store platform. For your own account data we are the data controller. For your customers’ data (orders, delivery details) you are the controller and we act as your processor, handling it only to provide the service to you.

• Account data: your name, email address and a securely hashed password.
• Store data: store name, products, images, pages, settings, team members and subscription details.
• Your customers’ data: names, contact and delivery details and order history that buyers give your store.
• Verification data: your name and an identity (KYC) document, only if you submit them to verify your store.
• Usage and device data: logs, IP address, browser type and security events, used to run and protect the service.

• To create and run your account and store, process orders, and bill your subscription.
• To keep the platform secure, prevent fraud and abuse, and meet legal obligations.
• To send you essential service emails (confirmation codes, security and billing notices).
• To send you marketing and announcement emails about Sellers.lk, as agreed in our Terms and Conditions. You can unsubscribe at any time.
• To improve and support the product.

We store sensitive data in a secure way and follow established security practices, including:

• Encryption in transit: all traffic between you and the platform is encrypted with TLS.
• Encryption at rest: our database and file storage are encrypted at rest by our infrastructure providers.
• Passwords: never stored in plain text; they are salted and hashed by our authentication provider.
• Sensitive secrets: such as two-factor authentication secrets and third-party credentials, are kept encrypted and are never exposed to the browser.
• Access control: database access is locked down with row-level security, role-based permissions, and least-privilege access for staff and systems.
• Account protection: email confirmation, optional two-factor authentication, rate limiting, bot protection and lockouts against guessing.
• Private documents: identity documents are held in private storage and only accessible to authorised reviewers.

No method of transmission or storage is perfectly secure, but we continuously review and improve our safeguards. If a breach affecting you occurs we will notify you as the law requires.

We honour the trust store owners place in us. Your store data and your customers’ data belong to you. We do not sell it, we do not use your customer lists to market to your customers, and we do not access it except to run the service, provide support you request, prevent abuse, or comply with the law.

We share data only with service providers that help us run Sellers.lk, under confidentiality and security commitments, for example:

• hosting, database and file storage providers;
• payment and billing providers;
• email delivery providers;
• bot-protection and security services;
• delivery or courier services you choose to use.

We may also disclose data when required by law or to protect rights, safety and the security of the service. We never sell personal data.

We use only what is needed to keep you signed in, remember preferences (such as theme and cart) and protect against abuse. We do not use cookies to sell your data to advertisers.

We keep data while your account is active and afterwards only as long as needed to meet legal, tax, accounting and dispute obligations, then delete or anonymise it. You can ask us to delete your account.

• Access, correct or update the personal data we hold about you (most of it is editable in your dashboard).
• Request a copy or deletion of your data, or object to certain processing. See how to delete your data, including data received through Facebook, Instagram and WhatsApp.
• Unsubscribe from marketing and announcement emails at any time.
• Withdraw consent where processing is based on it.

Our providers may process data in other countries. Where this happens we rely on providers that apply appropriate safeguards to protect it.

Sellers.lk is not intended for anyone under 18, and we do not knowingly collect their data.

We may update this policy and will notify you of material changes by email or in the dashboard. For any privacy question or request, contact support@sellers.lk.