Privacy Policy

Mandiya, also referred to as “we”, “us”, or “our” in this Privacy Policy, operates an online marketplace that allows users in Sri Lanka to publish classified advertisements, browse listings, and contact buyers or sellers.

Mandiya mainly helps users discover advertisements and make contact. Unless clearly stated otherwise, purchases, payments, deliveries, inspections, and other transactions between users usually happen outside the platform.

We may collect the following types of information:

• account details such as name, email address, phone number, password/login information, profile details, and store details,
• advertisement details such as title, description, images, price, category, subcategory, location, condition, and related listing information,
• contact and communication information submitted through forms, reports, seller contact options, support requests, or other platform features,
• payment and promotion information related to paid features such as featured ads, boosted ads, subscriptions, or other advertising services,
• technical and usage information such as IP address, browser type, device information, operating system, cookies, pages visited, search activity, and general platform usage data,
• safety and moderation information such as reports, blocked content, suspicious activity signals, abuse reports, and policy enforcement records.

We may use personal information to:

• create, verify, and manage user accounts,
• publish, display, edit, promote, and manage ads,
• allow buyers and sellers to contact each other through available platform features,
• provide paid promotional services such as featured ads or boosted ads,
• improve search, browsing, category, location, and listing recommendations,
• monitor performance, fix technical issues, and improve the user experience,
• detect, prevent, investigate, and respond to fraud, spam, abuse, security risks, and policy violations,
• respond to user requests, complaints, reports, and support messages,
• send important service notices, account updates, security alerts, and platform-related communications,
• comply with legal obligations, law enforcement requests, regulatory requirements, or dispute resolution needs.

We process personal information where it is necessary to provide our services, operate the marketplace, manage user accounts, publish listings, support user communication, protect the platform, comply with legal obligations, or pursue legitimate business and safety interests.

Where required by applicable law, we may rely on your consent for specific activities such as certain cookies, marketing communications, or optional features. You may be able to withdraw consent where the law allows.

Some information you choose to publish on Mandiya may be visible to other users and the public. This may include ad titles, descriptions, prices, images, locations, seller names, store names, phone numbers, and other contact details included in your advertisement or seller profile.

Do not include sensitive personal information, private documents, financial details, passwords, identification numbers, or unnecessary personal information in public ad descriptions, images, or messages.

If you add a phone number, email address, address, seller name, store name, or other contact detail to an ad or seller profile, that information may be shown to users who view or interact with your listing.

You are responsible for ensuring that the contact details you publish are accurate and that you have permission to publish them.

Mandiya may offer paid features such as featured ads, boosted ads, premium visibility, store features, subscriptions, or other promotional services.

When you use paid services, we may process information needed to provide the service, confirm the payment, prevent fraud, maintain billing records, and manage the promotion. Payment processing may be handled by third-party payment providers. We do not recommend sending payment card details through ad descriptions, public messages, or support messages.

We use cookies and similar technologies in three categories. You choose which of the optional categories to allow when you first visit, and you can change your choice at any time via "Manage Cookie Preferences" in the site footer.

• Necessary — required for the platform to function (keeping you signed in, remembering your session, storing your cookie choice itself). These cannot be switched off.
• Functional — remembers interface preferences, such as whether certain panels are expanded or collapsed. Optional.
• Analytics — helps us understand how the platform is used (pages visited, general traffic patterns) so we can improve it. Only loads if you allow it. We currently use Google Analytics for this.

Third-party services. Some features embed services from Google that you interact with directly and that may set their own cookies under Google's own privacy terms: Google Maps (shown when you view a listing's or store's location), and Google Sign-In (loaded only if you choose to sign in or register with Google). These load as part of using that specific feature, not as background tracking.

You can also control cookies through your browser settings. Some platform features may not work correctly if necessary cookies or storage features are disabled.

We do not sell personal information as our business model. However, we may share information in limited situations, including:

• with service providers who help us operate the platform, such as hosting providers, storage providers, email/SMS providers, analytics providers, payment processors, security tools, and customer support tools,
• with other users where you publish information publicly or choose to contact another user,
• when required by law, court order, legal process, regulatory request, or law enforcement request,
• where necessary to protect Mandiya, our users, the public, platform security, or our legal rights,
• in connection with a business transaction such as a merger, acquisition, restructuring, financing, or transfer of assets.

Ads, messages, seller profiles, or platform pages may contain links, references, or contact methods that lead to third-party websites, payment services, delivery providers, social media pages, messaging apps, or external services.

We are not responsible for the privacy practices, terms, content, payments, deliveries, inspections, or transactions that happen outside Mandiya. You should review the privacy policies and terms of any third-party service you use.

We may review, moderate, restrict, remove, or block ads, accounts, stores, images, messages, or other content if we believe they may violate our policies, harm users, create legal risk, involve fraud, or affect platform security.

If you report an ad, seller, buyer, or user, we may process the information you provide to investigate and take appropriate action.

We retain personal information for as long as reasonably necessary to provide the platform, manage accounts and ads, comply with legal obligations, prevent fraud, resolve disputes, enforce policies, maintain records, and improve our services.

Some information may remain in backups, logs, fraud prevention records, legal records, or archived systems for a limited period, even after an account or ad is removed.

We use reasonable technical, administrative, and organizational measures to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.

However, no website, application, server, database, or online transmission can be guaranteed to be completely secure. You are responsible for keeping your login details confidential and using the platform carefully.

Depending on applicable law, you may have rights relating to your personal information, including the right to request access, correction, completion, deletion, withdrawal of consent, objection to certain processing, or restriction of processing.

Sri Lanka's Personal Data Protection Act, No. 9 of 2019 ("PDPA") identifies and strengthens the rights of data subjects in relation to personal data protection, including the rights listed above, and is overseen by the Data Protection Authority of Sri Lanka.

To exercise any of these rights, or for questions about how your personal information is processed, contact us at info@mandiya.lk. We will respond within a reasonable time as required under the PDPA.

You may be able to update certain account details, edit ads, remove listings, manage store information, or change account settings through available platform features.

If you request deletion of certain information, we may still retain information where needed for legal compliance, fraud prevention, security, dispute resolution, accounting, or legitimate business records.

Some service providers we use may process or store information outside Sri Lanka. Where this happens, we take reasonable steps to protect personal information in accordance with applicable data protection requirements.

Mandiya is not intended for users who are not legally permitted to use online marketplace services. We do not knowingly collect personal information from children where prohibited by applicable law.

If a parent or guardian believes that a child has provided personal information to us, they may contact us to request appropriate action.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, technology, or business practices.

Updated versions will be published on this page. The “Last updated” date shows when this Privacy Policy was most recently revised.

If you have questions about this Privacy Policy, want to make a privacy request, or need to contact us about personal information, please use the contact details provided on Mandiya or contact us through our official support channels.

info@mandiya.lk