Privacy Policy
How Price Drops (Pvt) Ltd handles personal information when you use PriceDrops.lk.
Privacy Commitments
We want this Privacy Policy to be understandable and practical. We describe below what information PriceDrops may collect, why it is needed, and what choices you have.
PriceDrops does not sell your personal information as a product. Our business model is primarily based on business advertising and promotional services, not on selling consumer personal data.
We aim to collect the minimum information reasonably needed for the function you choose to use. Many basic browsing activities can be used without creating an account or giving us your name or email address.
We do not use your contact details to send spam. Where promotional communications require consent under applicable law, we will seek it and provide a practical way to withdraw it.
Paid or sponsored placements may be part of the Platform. We will not represent sponsored content as independent editorial content where applicable disclosure is required, and we will provide clear commercial disclosures where appropriate.
How Basic Browsing Works
You may generally visit and browse public deal, flyer and business pages without creating an account. Technical information such as an IP address may still be processed by our systems or service providers for security, reliability and basic operation.
Where we use location information to make deals more relevant to you, we will request the relevant permission where required. Where a location is manually provided, we will use it for the selected location-based functionality. We will not require precise GPS location merely to browse the Platform unless a particular feature genuinely needs it.
If you choose optional features such as saved deals, saved searches, alerts, subscriptions, personalization or account-based services, we may need additional information to provide those features. You may stop using optional features and, where applicable, withdraw consent or delete your account.
1. About PriceDrops.lk
PriceDrops.lk is a digital deal-discovery and promotional advertising platform operated by Price Drops (Pvt) Ltd. The Platform helps consumers discover discounts, promotions, special offers, flyers and advertising content from businesses, and provides businesses with a channel to publish promotional content.
2. Who Is Responsible for Your Personal Data
The entity responsible for the processing described in this Privacy Policy is:
- Legal name: Price Drops (Pvt) Ltd
- Platform: PriceDrops.lk
- Privacy contact email: info@pricedrops.lk
Depending on the processing activity, Price Drops (Pvt) Ltd may act as a data controller or may process personal information on behalf of another organization as a processor, where applicable under law and contractual arrangements.
3. Scope
This Policy applies to personal information processed through the PriceDrops.lk website, webpages, forms, user or business account functions (where available), promotional submissions, customer support communications, cookies and similar technologies, analytics, advertising functions and other services that expressly adopt this Policy.
It does not govern the privacy practices of independent third-party websites, merchants, advertisers, payment providers, social media services or other external services linked from the Platform.
4. What Personal Information We Collect
4.1 Information You Provide
Depending on how you use the Platform, we may collect:
- Name and contact information, such as email address and telephone number.
- Business information, including business name, address, category, contact details, website and social-media information.
- Account information, where accounts are offered, such as login credentials, profile information and account preferences.
- Information in messages, enquiries, feedback, complaints and support requests.
- Promotional or advertising content submitted by businesses, including text, images, logos, offers and campaign details.
- Transaction or billing information where paid advertising or other commercial services are introduced.
- Information you voluntarily provide through surveys, promotions, competitions or other activities.
4.2 Information Collected Automatically
When you access the Platform, we may automatically collect technical and usage information, including:
- IP address and approximate network information.
- Browser type, operating system, device type and technical identifiers.
- Pages, offers and businesses viewed; searches performed; links clicked; and other interactions.
- Dates, times, session duration, referring pages and general navigation information.
- Approximate location information derived from technical information where reasonably necessary for security, analytics or relevant features.
- Cookie identifiers and similar technology data, subject to applicable consent requirements.
4.3 Information from Third Parties
We may receive information from service providers, business partners, publicly available sources, advertising or analytics providers, or other third parties where the collection and disclosure are lawful and relevant to operating or improving the Platform.
5. Sensitive or Special Categories of Personal Data
PriceDrops is not designed to routinely collect highly sensitive personal information. Please do not submit health information, government identification numbers, financial credentials, passwords, biometric information, precise location history or other sensitive information unless the Platform specifically requests it for a legitimate and lawful purpose.
Where the law imposes additional requirements for sensitive or special categories of personal data, we will apply the protections and lawful basis required by applicable law.
Information-to-Purpose Overview
Contact details: Used to respond to enquiries, manage accounts where offered, provide requested communications, support business relationships and send selected alerts or service messages.
Account and preference information: Used to maintain login, saved deals, saved searches, subscriptions, alert settings, personalization choices and other optional features.
Location information: Used, where enabled and permitted, to show relevant nearby or selected-location promotions and improve local deal discovery.
Technical and usage information: Used for website security, troubleshooting, performance measurement, analytics, fraud prevention and improving the Platform.
Business and promotional information: Used to publish, manage, moderate and measure business listings, flyers, offers and advertisements.
6. Why We Use Personal Information
- Operate, maintain and secure the Website and Platform.
- Create, administer and support user or business accounts, where offered.
- Respond to enquiries, complaints, support requests and other communications.
- Review, publish, manage and moderate business listings, flyers, promotions and advertisements.
- Deliver requested services and administer paid advertising or commercial relationships.
- Measure website traffic, campaign performance, views, clicks, impressions, engagement and user experience.
- Improve Website functionality, content, search, categories, recommendations and future services.
- Detect, prevent and investigate fraud, abuse, security incidents and other unlawful or harmful activity.
- Comply with legal, regulatory, tax, accounting and other applicable obligations.
- Enforce our Terms and Conditions, contracts and other policies.
- Communicate important service, security, policy or operational information.
- Develop future features such as alerts, saved deals, location-based offers, mobile applications, analytics, APIs, affiliate partnerships and personalization where lawfully implemented.
7. Lawful Bases for Processing
Where applicable law requires a lawful basis for processing, we may rely on one or more of the following, depending on the circumstances:
- Consent, where you have given valid consent for a defined purpose.
- Performance of a contract or steps taken at your request before entering a contract.
- Compliance with a legal or regulatory obligation.
- A legitimate interest that is permitted by law and appropriately balanced against your rights and interests.
- Protection of vital interests, where applicable.
- Another lawful ground permitted by applicable data-protection law.
Where processing is based on consent, you may withdraw consent where applicable. Withdrawal does not affect processing already carried out lawfully before withdrawal.
8. Cookies and Similar Technologies
PriceDrops.lk may use cookies, pixels, local storage, tags and similar technologies to operate the Platform, remember preferences, support login or saved features, understand traffic, maintain security, measure advertising performance and improve the user experience. Some information may be stored locally on your device rather than in our central database, where that design is sufficient for the feature.
8.1 Categories of Cookies
- Strictly necessary cookies: required for core Website operation, security or requested functionality.
- Preference/functionality cookies: remember choices and settings.
- Analytics cookies: help us understand traffic, performance and engagement.
- Advertising/measurement cookies: may help measure or support advertising and promotional activity where used and permitted.
Where consent is legally required for non-essential cookies or similar technologies, we will request it through an appropriate consent mechanism. You may also adjust browser controls, although disabling certain cookies may affect Website functionality.
Where practical, we prefer to use aggregated, statistical or de-identified information for business reporting rather than identifying individual consumers. This may include aggregate counts of searches, page views, popular deals, clicks and engagement patterns.
9. Analytics and Performance Measurement
We may use analytics services to understand how people use PriceDrops.lk, diagnose technical problems, improve content and navigation, and evaluate the performance of promotional campaigns. Depending on the services implemented, analytics providers may process identifiers, device information, page views, event data and approximate location or similar technical information.
We will configure and use analytics services in accordance with applicable law and, where required, consent choices.
10. Advertising, Promotions and Sponsored Content
PriceDrops.lk is an advertising-supported platform. Businesses may pay for featured listings, banner placements, sponsored deals, promotional boosts, advertising packages or other visibility products as the Platform develops.
We may process information about impressions, views, clicks, engagement and campaign performance to provide and measure advertising services.
Where personalized or interest-based advertising is used, the applicable provider disclosures, consent mechanisms and opt-out controls will apply as required by law.
PriceDrops does not represent that every third-party promotion, price, offer, product or service displayed on the Platform is provided directly by PriceDrops. Businesses generally remain responsible for the accuracy, validity, availability and conditions of their own promotional content.
Optional Personalization
If PriceDrops introduces personalization, we may process information about the searches, deals, categories, businesses, flyers or other content you interact with to make recommendations more relevant to you.
Personalization will be treated as an optional feature where consent is required. We will provide controls to enable, disable or otherwise manage the feature where appropriate.
Personalization data may also be used to improve the Platform and evaluate which content is useful or relevant. We will not use personalization as a reason to sell your personal information to third parties.
Saved Searches, Deals, Favourites and Alerts
If these features are available, you may save deals, businesses, searches or other preferences. This information is used to provide the feature you selected and may be linked to an account where an account is required.
You can manage or remove saved items through available controls. You can also request deletion of associated personal information subject to applicable law and legitimate retention requirements.
11. Business Listings and User-Submitted Content
Businesses may submit promotional flyers, advertisements, logos, images, contact information, offers and related content. By submitting content, the submitting party is responsible for ensuring that it has the required authority and rights to provide the information and permit publication or processing.
Information intended for publication may become publicly accessible and may be viewed, copied or shared by others. Do not submit personal information for public display unless you are authorized to do so and understand the consequences of publication.
We may review, edit, reject, suspend or remove content where reasonably necessary for compliance, security, accuracy, user protection, complaints, operational requirements or enforcement of our policies.
12. Data Minimization and Purpose Limitation
We aim to collect and use personal information that is relevant and reasonably necessary for specified, lawful purposes. We do not intend to collect information merely because it may be useful in the future.
14. Third-Party Service Providers and Processors
Third parties may process personal information on our behalf. We expect such parties to apply appropriate security and confidentiality measures and to process information only for authorized purposes, subject to applicable law and contractual controls.
A current vendor list may be maintained internally and may change as the Platform develops. Where legally required, we will provide additional information about relevant recipients or processing activities.
15. External Links and Third-Party Websites
The Platform may contain links, advertisements, social-media integrations, merchant links or other connections to third-party services. These services have their own privacy practices. PriceDrops is not responsible for the privacy, security or content practices of third parties outside our control.
16. International and Cross-Border Processing
Some hosting, cloud, analytics, advertising, communications or other technology providers may process or store information outside Sri Lanka. Where personal information is transferred or otherwise processed across borders, we will apply the safeguards and legal requirements applicable to the relevant transfer, including any requirements concerning the processing of personal data outside Sri Lanka.
17. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to legal, accounting, tax, security, dispute-resolution and other legitimate requirements.
Retention periods may vary by data type and purpose. When information is no longer required, we will take reasonable steps to delete, destroy or anonymize it, subject to lawful retention obligations and technical limitations.
18. Data Security
We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure or destruction. Measures may include access controls, authentication, secure hosting and storage, backups, monitoring, security controls, staff procedures and restricted access.
No Internet service or electronic storage method can be guaranteed to be completely secure. Users should also protect their passwords and devices and promptly report suspected account misuse or security incidents.
19. Personal Data Breaches and Security Incidents
If we become aware of a personal-data breach or security incident, we will assess it and take appropriate steps required by applicable law and our internal incident-response procedures. Where notification to affected individuals, regulators or other parties is legally required, we will make such notifications in accordance with the applicable requirements.
20. Children and Minors
The Platform is intended for a general audience. We do not knowingly seek to collect personal information from children in circumstances where applicable law requires parental or guardian authorization. Where additional protections are required for children or minors, we will apply those requirements.
If you believe a child has provided personal information to us in circumstances that should not have occurred, please contact us so we can investigate and take appropriate action.
21. Direct Marketing and Communications
We may send service-related communications that are necessary to operate an account, respond to a request, maintain security, or communicate important changes. We may also send promotional communications where permitted by law and, where required, based on your consent.
You may opt out of promotional email communications using the unsubscribe mechanism provided or by contacting us. Opting out of marketing does not necessarily stop essential service communications.
22. User Privacy Rights
Subject to applicable law and any relevant exemptions or restrictions, you may have rights concerning your personal information, which may include:
- Right to request access to personal information held about you.
- Right to request correction of inaccurate, incomplete or outdated information.
- Right to request deletion or erasure where legally available.
- Right to request restriction of certain processing where legally available.
- Right to object to certain processing where the law provides that right.
- Right to withdraw consent where processing is based on consent.
- Right to request information about relevant processing activities.
- Any other rights available under applicable data-protection law.
Requests should be submitted using the contact details in Section 31. We may need to verify your identity before responding. We may also lawfully refuse, limit or defer a request where permitted by law.
23. Complaints
If you have concerns about our handling of personal information, please contact us first so that we can investigate and attempt to resolve the issue.
Where applicable law provides a right to complain to the Data Protection Authority or another competent authority, you may exercise that right. The Data Protection Authority of Sri Lanka is the statutory regulator established under the Personal Data Protection Act.
24. Data Protection Officer / Privacy Contact
If Price Drops (Pvt) Ltd is required by applicable law to appoint a Data Protection Officer, the relevant contact will be published or otherwise made available to data subjects.
- Privacy email: info@pricedrops.lk
25. Your Responsibilities
- Provide accurate information when dealing with PriceDrops.
- Do not submit unnecessary personal or sensitive information.
- Do not upload personal information of another person without appropriate authority or a lawful basis.
- Keep account credentials confidential where account functionality is provided.
- Notify us promptly if you suspect unauthorized access, misuse or a security problem.
26. Business Users and Merchants
Businesses using PriceDrops to publish offers or advertise must comply with all applicable laws and with our business terms. Businesses should avoid including unnecessary personal information in promotional materials and are responsible for having the necessary permissions, notices and lawful bases for information they provide to PriceDrops.
Where PriceDrops processes personal data on behalf of a business, the parties may enter into additional contractual terms describing responsibilities, instructions, security, confidentiality, retention, deletion and other data-processing requirements.
Content Rights and Publicity Controls
By submitting a flyer, photograph, logo, video, advertisement or other material to PriceDrops, you confirm that you have the authority to provide that material and allow PriceDrops to host, reproduce, display and distribute it for the purpose of operating and promoting the Platform, subject to the terms that apply to the submission.
You should not upload personal information about another person unless you have the appropriate authority or lawful basis. We may remove content that appears unlawful, infringes another person’s rights, exposes unnecessary personal information, or otherwise violates our Platform rules.
27. Payment Information
If PriceDrops introduces paid subscriptions, advertising packages, promotions or other paid services, payments may be processed by third-party payment providers. PriceDrops may receive transaction-related information such as payment status, reference numbers, invoice information and limited payment details. We do not intend to store full payment-card credentials unless a lawful and secure processing arrangement specifically requires it.
Payment Information and Card Security
If you purchase advertising, featured placements, subscriptions or other paid services, payment may be processed by an external payment provider. Where possible, PriceDrops will not store full payment card numbers or security codes on its own systems unless there is a specific lawful and secure reason to do so.
The payment provider may process transaction and payment information under its own privacy policy and applicable contractual and legal requirements. We may receive limited transaction information such as payment status, transaction reference, amount, currency and billing details necessary to provide the service and maintain accounting records.
28. Social Media and Messaging Channels
PriceDrops may use services such as Facebook, Instagram, TikTok, YouTube, WhatsApp, Telegram or other communication and distribution channels. Interactions on those services are also subject to the privacy policies and terms of the respective providers.
29. Automated Decision-Making and Profiling
PriceDrops may in the future use automated analytics, personalization, recommendations or similar technologies to help users discover relevant deals. Where applicable law gives you rights regarding automated decision-making or profiling, we will provide appropriate information and controls at the time such processing is introduced.
30. Changes to the Platform or This Policy
Our services and technology may change over time. We may update this Policy to reflect new services, features, processing activities, legal requirements, security practices or third-party services.
When changes are material, we will provide additional notice where required or appropriate. The latest version will be published on this page with a revised Last Updated date. Your continued use of the Platform after an update is subject to the updated Policy to the extent permitted by law.
31. Contact Us
For privacy questions, access or correction requests, complaints, consent withdrawal requests, security concerns or other privacy matters, contact:
- Price Drops (Pvt) Ltd
- Website: PriceDrops.lk
- Email: info@pricedrops.lk
32. Governing Law and Applicable Requirements
This Policy is intended to operate in accordance with the laws applicable to Price Drops (Pvt) Ltd and PriceDrops.lk, including applicable Sri Lankan personal-data protection, consumer protection, electronic communications and other relevant requirements. Where mandatory law conflicts with a provision of this Policy, the mandatory legal requirement prevails.
33. Regulatory Reference
This Privacy Policy should be read together with the Personal Data Protection Act No. 9 of 2022, the Personal Data Protection (Amendment) Act No. 22 of 2025, applicable regulations, rules, Gazette notifications and guidance issued by the Data Protection Authority or other competent authorities, as applicable to the Platform and its processing activities.