PRIVACY POLICY

Welcome to Bestoffer.lk.

Bestoffer.lk is an online marketplace and deals platform operated from Sri Lanka that enables users to discover products, compare prices, find local stores, view offers and deals, communicate with sellers where available, and place or track orders through participating deal providers.

We respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how Bestoffer.lk collects, uses, stores, discloses and protects personal data when you visit or use our website, create an account, browse products or stores, register as a deal provider, contact us, subscribe to communications, place an order, or otherwise interact with our services.

This Privacy Policy should be read together with our Terms and Conditions, Cookie Policy, and any other notices presented to you when you use particular features of Bestoffer.lk.

1 WHO WE ARE

Bestoffer.lk is a Sri Lankan digital marketplace connecting customers with local stores, businesses and deal providers.

For matters relating to personal data and privacy, you may contact us using the above details.

Where applicable under data-protection law, Bestoffer.lk acts as a data controller or equivalent responsible party for personal data that we determine the purposes and means of processing.

Where we process personal data on behalf of a merchant, delivery provider, payment provider or other organisation, we may act as a data processor/service provider or equivalent, depending on the circumstances.

2 OUR COMMITMENT TO PRIVACY

We aim to process personal data in a lawful, fair, transparent and responsible manner. We seek to:

• Collect only information that is reasonably necessary for legitimate business and service purposes.
• Explain how and why personal data is used.
• Protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
• Keep personal data only for as long as reasonably necessary.
• Respect applicable rights of individuals concerning their personal data.
• Use appropriate technical and organisational security measures.
• Require appropriate privacy and security safeguards from relevant service providers.
• Comply with applicable Sri Lankan data-protection requirements and other applicable privacy laws.

Bestoffer.lk does not sell or rent personal information as a commercial data-broker service.

3 LAWS AND REGULATORY FRAMEWORK

Bestoffer.lk is primarily operated in Sri Lanka and seeks to comply with applicable Sri Lankan laws and regulations concerning privacy, electronic transactions, cybersecurity, consumer protection and data protection. These may include, where applicable:

• The Personal Data Protection Act, No. 9 of 2022, as amended from time to time.
• Applicable regulations, rules, directions and guidance issued under Sri Lankan data-protection legislation.
• The Electronic Transactions Act, No. 19 of 2006, as amended.
• The Computer Crimes Act, No. 24 of 2007, where applicable.
• Other applicable Sri Lankan laws and regulations governing electronic commerce, consumer transactions and business operations.

Sri Lanka's Personal Data Protection Act establishes a data-protection framework covering processing of personal data and includes principles and rights broadly consistent with modern international privacy frameworks. The Data Protection Authority states that the PDPA has both territorial and certain extraterritorial application.

Where Bestoffer.lk is legally required to comply with another privacy law because of the location of a user, the services offered, or the nature of processing, we may apply additional protections required by that law. This may include, where applicable:

• The European Union General Data Protection Regulation (GDPR).
• The UK General Data Protection Regulation (UK GDPR).
• The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
• Other applicable state, national or international privacy legislation.

The applicability of these laws depends on the particular circumstances and applicable legal thresholds. Their mention in this Privacy Policy does not mean that every provision necessarily applies to every user or transaction.

4 INFORMATION WE COLLECT

Depending on how you use Bestoffer.lk, we may collect different categories of personal data.

4.1 Information You Provide Directly

When you create an account, contact us, place an order, register as a deal provider or use other services, we may collect information such as:

• Full name, Username, Email address
• Telephone/mobile number
• Billing address, Delivery address, City, district and postal information
• Account login information
• Business name and business information, Store information
• Product and listing information, Order information
• Customer-service communications
• Reviews, ratings and feedback
• Information submitted through contact forms or when registering as a deal provider
• Images or other content uploaded to the platform
• Other information you voluntarily provide

You should provide accurate and current information and should not provide another person's personal information without an appropriate lawful basis or permission.

5 ORDER AND TRANSACTION INFORMATION

If you place an order or otherwise conduct a transaction through Bestoffer.lk, we may process information required to facilitate the transaction, including:

• Customer name, Contact number, Email address
• Billing information, Delivery information
• Products ordered, Quantity and order details, Order amount
• Transaction status, Order history
• Delivery or fulfilment information
• Communications relating to the transaction

Payment information may be processed by third-party payment service providers. Where a third-party payment gateway processes your card or banking information, that payment provider may collect and process payment information under its own privacy policy and terms.

Bestoffer.lk does not intend to store complete payment-card information such as full card numbers, CVV/security codes or PINs on our servers unless expressly stated otherwise and lawfully required.

6 DEAL PROVIDER AND SELLER INFORMATION

If you register as a merchant, seller, store or deal provider, we may collect additional information such as:

• Business name, Business contact details, Business address, Store location
• Contact person's name, Telephone number, Email address
• Business description, Product information, Product images
• Pricing information, Offers and promotional information
• Business registration or verification information where required
• Payment/settlement information, Account and transaction records
• Communications with Bestoffer.lk

Some business information may be displayed publicly on Bestoffer.lk as part of a store or seller profile. Deal providers are responsible for ensuring that personal information they provide to Bestoffer.lk is collected and disclosed lawfully.

7 INFORMATION COLLECTED AUTOMATICALLY

When you visit Bestoffer.lk, certain technical information may automatically be collected. This may include:

• IP address, Browser type, Device type, Operating system
• Language settings, Approximate geographic information derived from technical data
• Referring website, Pages visited, Date and time of visits
• Website interactions, Search and navigation activity
• Device identifiers where applicable
• Error and diagnostic information, Security and fraud-related information

This information helps us operate, secure and improve the website. An IP address may be considered personal data where it can reasonably be associated with an identifiable individual.

8 LOCATION INFORMATION

Certain Bestoffer.lk features may allow you to search for stores or offers based on location. Depending on the feature you use, location information may be:

• Entered manually by you;
• Derived approximately from your IP address; or
• Obtained from your device if you expressly enable a location-based feature.

We do not require precise device location merely to browse the general website unless a particular feature requires it. You may disable location permissions through your browser or device settings. Some location-based features may not function correctly if location permissions are disabled.

9 COOKIES AND SIMILAR TECHNOLOGIES

Bestoffer.lk uses cookies and similar technologies. Cookies may be used to:

• Keep users logged in; Remember preferences; Maintain shopping-cart functionality;
• Enable website functionality; Improve website performance;
• Understand website usage; Detect fraud and abuse; Improve security;
• Measure marketing performance; Provide relevant content where legally permitted.

Strictly Necessary Cookies: Required for essential website functionality, security, authentication and transactions.

Functional Cookies: Remember preferences and improve your experience.

Analytics Cookies: Help us understand how visitors use our website and improve performance.

Marketing or Advertising Cookies: Where used, these may help measure advertising effectiveness or deliver more relevant advertising, subject to applicable consent and privacy requirements.

You may control cookies through your browser settings and, where applicable, our cookie-consent mechanism. Disabling certain cookies may affect website functionality.

10 COMMENTS, REVIEWS AND PUBLIC CONTENT

If you post a review, rating, comment, question, image or other content on a publicly accessible area of Bestoffer.lk, that content may be visible to other users.

You should not publish: Passwords; Payment-card information; National identity numbers; Private contact information belonging to another person; Sensitive personal information; Other information that you do not want to become publicly accessible.

Public content may remain visible after an account is closed where there is a legitimate reason to retain it or where removal is not technically or legally required.

11 HOW WE USE PERSONAL DATA

We may process personal data for the following purposes:

Providing Our Services

• Create and manage accounts; Display products and stores; Process orders;
• Facilitate transactions; Provide price-comparison functionality;
• Facilitate communications between users and sellers; Provide delivery or fulfilment information;
• Provide customer support; Manage deal-provider accounts.

Security and Fraud Prevention

• Detect suspicious activity; Prevent fraud; Detect spam; Protect accounts;
• Prevent unauthorised access; Investigate security incidents;
• Protect our website, users and business.

Communications

• Respond to enquiries; Send order-related communications; Send account notifications;
• Send service announcements; Provide customer support;
• Send newsletters or promotional communications where permitted.

Website Improvement

• Analyse website usage; Improve functionality; Identify technical problems;
• Develop new services; Improve user experience.

Legal and Compliance Purposes

• Comply with applicable laws; Respond to lawful requests from authorities;
• Establish, exercise or defend legal claims; Maintain accounting and business records; Prevent unlawful activity.

12 LEGAL BASES FOR PROCESSING

Where a law such as the GDPR requires a lawful basis for processing, we may rely on one or more of the following:

• Consent: Where you have given valid consent for a particular purpose. You may withdraw consent where applicable.
• Contract: Where processing is necessary to provide services, process an order, operate an account or perform obligations arising from a contract.
• Legal Obligation: Where processing is necessary to comply with a legal or regulatory requirement.
• Legitimate Interests: Where processing is necessary for legitimate business interests, security, fraud prevention, service improvement or other legitimate purposes, provided those interests are not overridden by applicable privacy rights.
• Vital Interests: Where processing is necessary to protect someone's vital interests in circumstances recognised by applicable law.
• Public Interest: Where applicable law permits or requires processing for a public-interest purpose.

The appropriate legal basis depends on the specific processing activity and applicable law.

13 NEWSLETTERS AND MARKETING

If you subscribe to our newsletter or promotional communications, we may use your email address and other relevant information to send: New deals; Product updates; Store offers; Promotional campaigns; Marketplace announcements; Newsletters; Other marketing communications.

Where consent is required, we will obtain consent before sending marketing communications.

You may unsubscribe from marketing emails at any time by: Using the unsubscribe link in the relevant email; or Contacting us at info@bestoffer.lk.

Even after opting out of marketing communications, we may continue sending essential transactional or service-related communications, such as order confirmations, security notices and account notifications.

14 WHO WE SHARE PERSONAL DATA WITH

We do not sell or rent personal information to third parties as a data-broker business. However, we may disclose personal data where reasonably necessary to operate Bestoffer.lk. These parties may include:

• Deal Providers and Sellers: Where necessary to fulfil an order, enquiry or transaction, relevant customer information may be provided to the applicable seller or merchant.
• Delivery and Logistics Providers: Where required to deliver an order, relevant information may be shared with delivery or logistics providers.
• Payment Service Providers: Payment information may be processed by payment gateways, banks or payment-service providers.
• Hosting and Infrastructure Providers: We may use third-party providers for website hosting, cloud infrastructure, backups, databases, security and related services.
• Email and Communication Providers: We may use service providers to send transactional emails, newsletters, notifications or customer-service communications.
• Analytics and Security Providers: We may use analytics, monitoring, anti-spam, fraud-prevention and security services.
• Professional Advisers: Information may be disclosed to lawyers, accountants, auditors, insurers or other professional advisers where reasonably necessary.
• Government and Law-Enforcement Authorities: We may disclose information where required or authorised by applicable law, court order, regulatory requirement or lawful governmental request.
• Business Transfers: If Bestoffer.lk or substantially all of its assets are sold, transferred, merged, reorganised or acquired, personal data may be transferred as part of that transaction, subject to applicable legal requirements.

15 INFORMATION SHARED WITH SELLERS

Bestoffer.lk is a marketplace platform. When you purchase a product or request fulfilment from a particular deal provider, certain personal information may need to be shared with that provider. This may include: Name; Telephone number; Email address; Delivery address; Order details; Relevant customer instructions.

The seller may separately process your personal information in accordance with its own privacy practices and applicable law. Bestoffer.lk is not responsible for a seller's independent processing of personal data outside the services and systems controlled by Bestoffer.lk. We encourage users to review the privacy practices of individual sellers where applicable.

16 THIRD-PARTY SERVICES AND EMBEDDED CONTENT

Bestoffer.lk may contain links, integrations, plugins, maps, videos, social-media content, payment services, analytics tools or other functionality provided by third parties. Examples may include: Payment gateways; Google services; Social-media platforms; Mapping services; Analytics services; Anti-spam services; Security services; Email services; Delivery services.

When you interact with third-party services, those providers may independently collect and process information under their own privacy policies. We do not control the privacy practices of independent third parties. You should review the privacy policies of third-party services before using them where appropriate.

17 GRAVATAR AND EXTERNAL COMMENT SERVICES

Where website functionality uses services such as Gravatar or similar third-party services, information associated with a comment or profile may be transmitted to that service. Third-party services may process information according to their own terms and privacy policies. Where possible, Bestoffer.lk will limit such integrations to information reasonably required for the relevant functionality.

18 INTERNATIONAL DATA TRANSFERS

Although Bestoffer.lk operates in Sri Lanka, some service providers used to operate the website may store or process information outside Sri Lanka. For example, hosting, cloud, email, analytics, payment, security or other technology providers may operate infrastructure in different countries.

Where personal data is transferred internationally, we will seek to use appropriate safeguards required by applicable law. Depending on the applicable legal framework, these safeguards may include: Adequacy decisions; Contractual protections; Data-processing agreements; Standard contractual clauses or equivalent mechanisms; Other legally recognised transfer mechanisms.

International transfers may therefore occur where reasonably necessary to provide and operate Bestoffer.lk.

19 DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods may depend on: The type of information; The purpose for which it was collected; Whether an account remains active; Transaction requirements; Legal obligations; Accounting requirements; Fraud-prevention requirements; Dispute resolution; Security requirements; Legal claims.

For example, transaction and accounting information may need to be retained for longer than ordinary browsing information because of legal, financial or regulatory requirements. When information is no longer required, we may delete, anonymise or securely dispose of it.

20 ACCOUNT DELETION

Registered users may request deletion of their account. Upon receiving a valid request, we may delete or anonymise personal data that is no longer required.

However, we may retain certain information where necessary for: Legal compliance; Accounting or tax requirements; Fraud prevention; Security; Dispute resolution; Establishing or defending legal claims; Enforcement of agreements; Other purposes permitted by law.

Deleting an account may not automatically remove information that has already been lawfully provided to independent sellers or third parties where those parties have their own legal obligations to retain it.

21 YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have rights concerning your personal data. These may include:

• Right to Information: The right to receive information about how your personal data is processed.
• Right of Access: The right to request access to personal data held about you.
• Right to Correction: The right to request correction of inaccurate or incomplete personal information.
• Right to Deletion: The right to request deletion of personal information, subject to applicable legal exceptions.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent.
• Right to Object: Where applicable, you may object to certain processing activities.
• Right to Restriction: Where applicable, you may request restriction of processing in circumstances recognised by law.
• Right to Data Portability: Where applicable, you may request personal information in a structured, commonly used and machine-readable format.
• Right to Complain: You may have the right to lodge a complaint with the relevant data-protection authority.

These rights are not absolute and may be subject to statutory exceptions, identity verification requirements, legal obligations and other lawful limitations.

22 RIGHTS UNDER SRI LANKAN DATA-PROTECTION LAW

Bestoffer.lk recognises the importance of rights provided under applicable Sri Lankan data-protection legislation, including the Personal Data Protection Act No. 9 of 2022, as amended.

Depending on the circumstances and applicable provisions, individuals may have rights concerning access, correction, deletion, objection, withdrawal of consent and other matters relating to their personal data. The exercise of a particular right may be subject to conditions, exceptions, procedures and limitations imposed by applicable Sri Lankan law.

The Sri Lankan Data Protection Authority is the regulatory authority responsible for the country's personal-data protection framework.

23 GDPR RIGHTS FOR ELIGIBLE INDIVIDUALS

Where the GDPR or UK GDPR applies to our processing, eligible individuals may have rights including: Right to be informed; Right of access; Right to rectification; Right to erasure; Right to restrict processing; Right to data portability; Right to object; Rights relating to automated decision-making and profiling; Right to withdraw consent where consent is the legal basis; Right to lodge a complaint with a competent supervisory authority.

The GDPR's territorial scope can extend to organisations outside the European Union in specified circumstances, including where they offer goods or services to individuals in the EU or monitor behaviour occurring in the EU. If you believe GDPR applies to your relationship with Bestoffer.lk, you may contact us using the details provided in this Privacy Policy.

24 CALIFORNIA PRIVACY RIGHTS

If the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), applies to Bestoffer.lk and you are an eligible California resident, you may have additional rights under California law.

Depending on applicability and legal exceptions, these may include rights to: Know what personal information is collected; Know how personal information is used; Know how personal information is disclosed; Request deletion; Request correction; Opt out of the sale or sharing of personal information; Limit certain uses of sensitive personal information; Receive equal treatment for exercising privacy rights.

The CCPA applies only to businesses meeting applicable statutory requirements and thresholds; therefore, inclusion of this section does not itself mean Bestoffer.lk is subject to all CCPA obligations. Bestoffer.lk does not sell personal information in the ordinary meaning of a data-broker or personal-information-selling business.

If you believe you have rights under California privacy law, contact us at: info@bestoffer.lk. We may take reasonable steps to verify requests before providing or deleting personal information.

25 SENSITIVE PERSONAL DATA

We generally do not seek to collect sensitive personal information unless it is necessary for a lawful and legitimate purpose. Users should not voluntarily submit sensitive information through public reviews, comments, product enquiries or other public areas of the website.

Sensitive or special-category information may include information relating to matters such as: Health; Biometric information; Genetic information; Religious beliefs; Political opinions; Sexual orientation; Criminal allegations or offences; National identification information; Financial information; Other categories recognised as sensitive under applicable law.

If we need to process sensitive personal data, we will seek to do so only where permitted or required by applicable law and with appropriate safeguards.

26 CHILDREN'S PRIVACY

Bestoffer.lk is intended primarily for general consumers and businesses and is not specifically directed toward young children. We do not knowingly seek to collect personal information from children where such collection is prohibited by applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us without appropriate authorisation, please contact us. If we become aware that personal information has been collected from a child in circumstances where collection is not permitted, we may take reasonable steps to delete the information. Where applicable law imposes a specific minimum age or parental-consent requirement, we will follow those requirements.

27 DATA SECURITY

We take reasonable technical and organisational measures to protect personal data. Security measures may include: HTTPS/TLS encryption; Access controls; Authentication mechanisms; Password protection; Security monitoring; Malware and spam protection; Backup procedures; Server security; Administrative controls; Restricted access to personal information; Security updates and maintenance.

However, no internet transmission, website, database or electronic storage system can be guaranteed to be completely secure. Therefore, while we take reasonable precautions, we cannot guarantee absolute security.

Users are responsible for keeping their account credentials confidential and should immediately notify us if they believe their account has been compromised.

28 DATA BREACHES AND SECURITY INCIDENTS

If Bestoffer.lk becomes aware of a personal-data breach, we will assess and respond to the incident in accordance with applicable law. Where legally required, we may: Investigate the incident; Contain and remediate the breach; Preserve relevant evidence; Notify applicable regulatory authorities; Notify affected individuals; Require third-party service providers to assist with remediation; Take measures to prevent recurrence.

Notification requirements and timeframes depend on the nature of the incident and the applicable law.

29 PASSWORDS AND ACCOUNT SECURITY

If you create an account, you are responsible for maintaining the confidentiality of your password and login credentials. You should: Use a strong and unique password; Avoid sharing your password; Log out from shared devices; Keep your email account secure; Notify us of suspected unauthorised access.

Bestoffer.lk will never intentionally request your password through an unsolicited email or message.

30 AUTOMATED DECISION-MAKING AND PROFILING

Bestoffer.lk may use automated technologies for purposes such as: Spam detection; Fraud prevention; Security monitoring; Website analytics; Product or content recommendations; Search ranking; Personalisation.

Where applicable law provides rights relating to solely automated decision-making or profiling that produces legal or similarly significant effects, we will provide applicable safeguards and rights. We do not intend to make decisions producing significant legal effects about users solely through automated processing unless permitted or required by applicable law.

31 USER-GENERATED CONTENT

If you upload products, images, reviews, store information, comments or other content, you are responsible for ensuring that you have the legal right to submit that content. You must not upload personal information belonging to another person unless you have a lawful basis or appropriate permission.

Publicly visible content may be viewed, copied or redistributed by other users. Bestoffer.lk cannot guarantee that information voluntarily made public by a user will remain private.

32 THIRD-PARTY LINKS

Bestoffer.lk may contain links to third-party websites. These websites are not controlled by Bestoffer.lk. If you follow a third-party link, your interaction with that website will be governed by the third party's terms and privacy policy. We are not responsible for the privacy, security or content practices of independent third-party websites.

33 BUSINESS AND SELLER RESPONSIBILITIES

Deal providers and sellers using Bestoffer.lk may receive customer information necessary to fulfil orders or provide requested services. Sellers must: Use customer information only for lawful purposes; Protect customer information; Not misuse customer information; Not sell customer information unlawfully; Not use customer information for unrelated marketing where prohibited; Comply with applicable privacy and data-protection laws; Delete or retain customer information in accordance with applicable legal requirements.

A seller may have separate legal responsibilities as a data controller or equivalent for information it receives through the marketplace. Bestoffer.lk may suspend or terminate sellers that misuse personal data or violate applicable privacy or platform requirements.

34 DATA MINIMISATION

We seek to collect and process information that is reasonably necessary for the purposes described in this Privacy Policy. You should not provide unnecessary personal information when using Bestoffer.lk.

For example, do not submit payment-card numbers, passwords, national identity numbers or other sensitive information through public contact forms or reviews unless specifically requested through an appropriate secure process.

35 ACCURACY OF PERSONAL DATA

We seek to maintain accurate and reasonably current personal information. You may contact us to request correction of inaccurate or incomplete information. Registered users may also be able to update certain information directly through their account.

36 DATA PROCESSORS AND SERVICE PROVIDERS

We may appoint third-party companies to process information on our behalf. Such providers may include: Hosting providers; Cloud providers; Database providers; Payment providers; Delivery providers; Email providers; Customer-support providers; Analytics providers; Security providers; Anti-spam providers; Backup providers; IT service providers.

Where required by applicable law, we seek to establish appropriate contractual and security protections governing such processing.

37 LEGAL DISCLOSURES

We may disclose personal information when reasonably necessary to: Comply with a court order; Comply with applicable law; Respond to lawful requests from government authorities; Protect our rights; Protect users; Investigate fraud; Investigate security incidents; Prevent unlawful activity; Establish or defend legal claims; Enforce our Terms and Conditions.

We will seek to limit disclosures to information reasonably necessary for the relevant purpose.

38 ACCOUNT AND ORDER HISTORY

We may retain information about accounts and orders to provide customer support, resolve disputes, maintain transaction records, prevent fraud and satisfy legal or accounting obligations. Closing an account does not necessarily result in immediate deletion of every associated record.

39 YOUR RESPONSIBILITY WHEN USING THE PLATFORM

You are responsible for ensuring that information you submit to Bestoffer.lk is accurate and lawful. You must not: Impersonate another person; Create an account using another person's identity; Submit personal data without lawful authority; Upload confidential information belonging to another person; Attempt to obtain unauthorised access to another user's information; Circumvent security controls; Use personal data obtained through Bestoffer.lk for unlawful purposes.

40 CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Changes may be made because of: Changes to our services; New features; Changes in technology; Changes in applicable law; Regulatory guidance; Changes to our data-processing practices; Security requirements.

When we make material changes, we may provide additional notice where required by applicable law. The latest version will always be published on this page with an updated Last Updated date.

Your continued use of Bestoffer.lk after an updated Privacy Policy becomes effective may be subject to the updated policy to the extent permitted by applicable law.

41 HOW TO MAKE A PRIVACY REQUEST

To submit a privacy request, please contact:

Please include: Your name; Email address associated with your account; Nature of your request; Relevant account/order information where necessary.

For security purposes, we may request reasonable information to verify your identity before processing certain requests. We will respond within the timeframe required by applicable law.

42 PRIVACY REQUESTS FROM AUTHORISED REPRESENTATIVES

Where permitted by applicable law, you may authorise another person to submit a privacy request on your behalf. We may require evidence of: Your identity; The representative's identity; The representative's authority to act on your behalf.

This process is intended to protect users from fraudulent requests.

43 COMPLAINTS

If you have concerns about how we handle your personal data, please contact us first so that we have an opportunity to investigate and resolve the issue.

Privacy Complaints: info@bestoffer.lk

Where applicable, you may also have the right to complain to the relevant data-protection or regulatory authority in your jurisdiction. For Sri Lankan matters, the relevant regulatory framework is administered by the Data Protection Authority of Sri Lanka.

44 NO GUARANTEE OF INTERNET SECURITY

Although we implement reasonable security measures, no website, network, database or electronic communication method is completely secure. Accordingly, Bestoffer.lk cannot guarantee that information transmitted over the internet will never be intercepted, lost, altered or accessed by an unauthorised party.

You use the internet and Bestoffer.lk at your own risk.

45 GOVERNING LAW

Unless otherwise required by mandatory applicable law, this Privacy Policy and the processing of personal data by Bestoffer.lk shall be governed primarily by the laws of the Democratic Socialist Republic of Sri Lanka.

Nothing in this section is intended to remove or restrict mandatory rights that you may have under applicable privacy or consumer-protection laws in another jurisdiction. Where another jurisdiction's mandatory privacy law applies to you, those mandatory rights will apply to the extent required by law.

46 SEVERABILITY

If any provision of this Privacy Policy is found to be invalid, unlawful or unenforceable, that provision shall be interpreted or modified to the extent necessary to make it lawful where permitted. The remaining provisions shall continue in full force and effect.

47 ENTIRE PRIVACY NOTICE

This Privacy Policy describes the principal ways in which Bestoffer.lk processes personal information. Additional privacy notices may apply to specific services, applications, promotions, payment services, seller services, employment applications or other activities.

Where an additional privacy notice conflicts with this Privacy Policy, the specific notice will apply to the relevant processing activity to the extent permitted by law.

48 CONTACT INFORMATION

If you have questions about this Privacy Policy or our privacy practices, contact us:

© 2026 Bestoffer.lk. All Rights Reserved.
This Privacy Policy was last updated on 3 September 2026.