Privacy Policy

Privacy Policy Last Updated: July 27, 2026 1. Introduction Key Lanka (trading as KeyLanka.lk) ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website, make a purchase or interact with us. By using KeyLanka.lk, you consent to the practices described in this policy. If you do not agree, please do not use our website. 2. Who We Are KeyLanka.lk is an online retailer specialising in: Automotive smart keys & remote keys Key shells & transponder chips Locksmith tools & key programming devices Diagnostic equipment & automotive security accessories Key Lanka Address: No. 620, Highlevel Road, Wijerama, Nugegoda, Sri Lanka. Email: info@keylanka.lk Phone: 011 2 812 789 , 076 5 662 666 , and 077 7 777 678 We do not have a designated Data Protection Officer (DPO); however, all privacy-related queries should be directed to info@keylanka.lk. 3. Information We Collect We may collect and process the following categories of personal data: a) Identity Data Full name Company name (if applicable) Business registration number (for B2B customers) b) Contact Data Billing and shipping addresses Email address Telephone/mobile number c) Order & Transaction Data Products purchased Order history & invoices Delivery tracking details Warranty claims & technical support records d) Payment Data Payments are processed through secure third-party gateways. We do not store your full debit/credit card numbers, CVV or banking credentials on our servers. e) Technical & Usage Data IP address Browser type and version Operating system Referring/exit pages Time zone setting Clickstream data (via cookies) f) Marketing & Communications Data Your preferences for receiving marketing emails Your communication history with us 4. How We Collect Your Information We collect data through: Direct interactions: when you register, place an order, contact support or subscribe to our newsletter. Automated technologies: essential cookies and server logs used to operate and secure the website. Third-party sources: payment gateways, shipping partners and manufacturers (for warranty/activation). 5. Legal Basis for Processing (Under PDPA & GDPR) We process your personal data only when we have a lawful basis, including: Lawful Basis Explanation Contract Performance To process and deliver your orders, provide after-sales support and manage warranties. Consent For sending marketing communications, non-essential cookies and optional data sharing. Legal Obligation To comply with tax, customs, anti-fraud and regulatory requirements. Legitimate Interests To improve our website, prevent fraud and analyse customer trends, provided your rights are not overridden. 6. How We Use Your Information We use your data to: Process, fulfil and deliver orders Verify transactions and prevent fraud Provide customer service, technical support and warranty assistance Send order confirmations and shipping updates Improve our website, products and user experience Personalise your shopping experience Send promotional offers (only with your explicit consent) Comply with legal and regulatory obligations 7. Marketing Communications With your explicit opt-in consent, we may send you: Product announcements and special offers New locksmith tools and software updates Technical guides and company news You may withdraw consent at any time by: Clicking the "Unsubscribe" link in any email Contacting us at info@keylanka.lk We will never share your contact details with third parties for their own marketing purposes. 8. Sharing Your Information We share your data only when necessary with: Recipient Type Purpose Payment Providers To process transactions securely through OnePay Courier & Logistics To deliver your orders (e.g., Sri Lanka Post, private couriers) Manufacturers For product activation, warranty registration or technical support (only where required) Software Providers For diagnostic tool licensing and updates Legal/Regulatory Authorities When required by law, court order or government request We never sell, rent or trade your personal information to third parties. 9. Cookies & Tracking Technologies We currently use essential and functional cookies needed to operate the store: Cookie Type Purpose Essential Enable core functionality (shopping cart, checkout, security) Functional Remember your preferences and login status You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect website functionality. If we add analytics, advertising or other non-essential cookies in the future, we will request consent before activating them. 10. Data Security We implement appropriate administrative, technical and physical safeguards to protect your personal data against: Unauthorised access or disclosure Accidental loss, alteration or destruction Misuse or fraud These include: SSL encryption for all data transmissions Access controls restricting employee access to customer data Regular security audits and vulnerability scans While we strive to protect your data, no internet transmission or electronic storage is 100% secure. You share data at your own risk. 11. Data Retention We retain your personal data only for as long as necessary to: Fulfil the purposes for which it was collected (including order processing and warranty support) Comply with legal, tax and accounting obligations (typically 5-7 years for financial records) Resolve disputes and enforce our terms and conditions When data is no longer required, we will securely delete or anonymise it. 12. Your Rights (Under PDPA & GDPR) Under Sri Lanka's PDPA and applicable international laws, you have the following rights: Right Description Right to Access Request a copy of the personal data we hold about you Right to Rectification Correct inaccurate or incomplete data Right to Erasure ("Right to be Forgotten") Request deletion of your data, subject to legal obligations Right to Restrict Processing Limit how we use your data in certain circumstances Right to Data Portability Receive your data in a structured, machine-readable format Right to Object Object to processing based on legitimate interests or direct marketing Right to Withdraw Consent Withdraw consent at any time (where processing is based on consent) To exercise any of these rights, contact us at info@keylanka.lk or call 011 2 812 789 , 076 5 662 666 , or 077 7 777 678 . We will respond within 30 days as required by law. 13. Children's Privacy Our website and services are not intended for children under 16 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it. 14. Third-Party Links Our website may contain links to third-party websites (e.g., manufacturers, payment gateways). We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal data. 15. International Data Transfers We may transfer your data to third-party service providers located outside Sri Lanka (e.g., cloud hosting, payment processors). Where such transfers occur, we ensure that: Adequate safeguards are in place (e.g., Standard Contractual Clauses) The receiving country provides an adequate level of data protection, or We obtain your explicit consent for the transfer 16. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect legal, operational or regulatory changes. Any revisions will be posted on this page with a revised "Last Updated" date. Your continued use of our website after changes are posted constitutes acceptance of the updated policy. We encourage you to review this page periodically. 17. Contact Us For any questions, concerns or to exercise your privacy rights, please reach out: Key Lanka Website: www.KeyLanka.lk Email: info@keylanka.lk Phone: 011 2 812 789 , 076 5 662 666 , and 077 7 777 678 Address: No. 620, Highlevel Road, Wijerama, Nugegoda, Sri Lanka.