Privacy Policy

Welcome to All.lk ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

By using our platform at https://www.all.lk, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Personal Information

When you register an account or use our services, we may collect:

• Name and email address
• Profile information (avatar, phone number)
• Business information (name, address, contact details)
• Payment and transaction data related to POS usage

Information from Social Login

If you sign in using Google, GitHub, or Facebook, we receive your name, email address, and profile picture from the respective provider. We do not receive or store your social media passwords.

Automatically Collected Information

• IP address and browser type
• Device information and operating system
• Pages visited, time spent, and referring URLs
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Provide and maintain our platform services
• Process transactions through the POS system
• Display your business profile and product listings
• Send important service notifications and updates
• Improve our platform and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

3. Information Sharing & Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

• Public Business Profiles: Business name, address, ratings, products, and events are publicly visible on the platform.
• Service Providers: Trusted third-party services that help us operate the platform (hosting, analytics, email).
• Legal Requirements: When required by law, regulation, or legal process.
• Safety: To protect the rights, safety, and property of our users and the public.

4. Cookies & Tracking

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences and settings
• Understand how you interact with our platform
• Improve performance and user experience

You can control cookies through your browser settings. Disabling cookies may affect some functionality of the platform.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS/SSL)
• Secure password hashing (bcrypt)
• Regular security reviews and updates
• Access controls and authentication mechanisms

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you delete your account, we will remove your personal data within a reasonable timeframe, except where retention is required by law.

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information via your profile settings.
• Deletion: Request deletion of your account and personal data.
• Objection: Object to certain processing of your data.
• Portability: Request your data in a portable format.

To exercise any of these rights, please contact us using the details below.

8. Third-Party Services

Our platform may integrate with third-party services including:

• Google OAuth - for social login authentication
• GitHub OAuth - for social login authentication
• Facebook OAuth - for social login authentication

Each third-party service has its own privacy policy. We encourage you to review their policies before using social login features.

9. Children's Privacy

Our platform is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: