Supplier Verification Policy

Introduction and Relationship with Customer Privacy

Kelin (Pvt) Ltd ("Kelin", "we", "our" or "us") operates https://www.kelin.lk and related service-coordination platforms. This Policy explains how Kelin processes personal data relating to individuals and authorized representatives who apply to, register with or participate in the Kelin Supplier Network. It supplements the Customer Privacy Policy. A person acting as both a customer and a Supplier may be subject to both policies according to the relevant activity.

Supplier Information We Collect

Kelin seeks to collect information reasonably necessary for the relevant purpose. Depending on the Supplier relationship, Kelin may collect:

• Identity and contact information.
• Business names, addresses and registration details.
• Service categories, areas, availability and profile information.
• Identification, qualification, certification, licence and insurance evidence where relevant.
• Verification results and information needed to assess service eligibility.
• Quotations, bookings, schedules, service completion records and communications.
• Customer feedback, complaints, investigations and dispute records.
• Bank or payout details and transaction references
• Commission, settlement, fee, invoice and tax-related records.
• Account activity, technical logs and security information.

How We Collect Information

Information may be collected during application, registration, onboarding, profile updates, verification, service delivery, settlement, complaint handling and support. Where appropriate and lawful, information may also be obtained from authorized representatives, issuing authorities, professional bodies, verification providers or references.

How We Use Supplier Information

We may use Supplier information to:

• Assess and manage Supplier applications.
• Create and maintain Supplier accounts and profiles.
• Verify identity, business details, qualifications and service eligibility.
• Match Suppliers with customer requests.
• Coordinate appointments, quotations and service delivery.
• Maintain service and completion records.
• Collect payments and administer Supplier settlements.
• Calculate commissions, fees and lawful adjustments.
• Investigate complaints and payment disputes.
• Prevent fraud, abuse and unauthorized access.
• Maintain platform security and operational records.
• Meet applicable legal and record-keeping requirements.

Lawful Processing

Kelin will process Supplier personal data only where an applicable lawful basis and any required conditions are satisfied. Depending on the circumstances, this may include steps requested before an agreement, contractual necessity, legal obligations, consent where required or another lawful basis permitted by applicable law. Consent withdrawal and other privacy requests will be handled subject to applicable legal conditions and retention obligations.

Sharing Supplier Information

Relevant information may be shared with: (Bank details and confidential verification documents are not intended for public display.)

• Customers where reasonably necessary to arrange or deliver a service.
• Authorized Kelin personnel and relevant operational teams.
• Payment providers and financial institutions involved in settlements.
• Verification providers and relevant professional or issuing bodies where appropriate and lawful.
• Hosting, authentication, database, storage and communications providers.
• Professional advisers and authorized business service providers.
• Authorities where disclosure is required or permitted by law.

Customer Information Accessed by Suppliers

Kelin may provide Suppliers with customer information needed to fulfil an accepted service request. Suppliers must use such information only for authorized service purposes, protect it against unauthorized access, avoid unrelated marketing or disclosure, retain it only as necessary and notify Kelin promptly of suspected loss, unauthorized access or disclosure.

Security

Kelin implements appropriate technical and organizational measures designed to protect personal data. Suppliers must protect their credentials, devices and any customer information they receive. No electronic system can be guaranteed completely secure. Suspected security incidents will be assessed and handled under applicable procedures and law.

Retention

Kelin retains Supplier data for as long as reasonably necessary for the Supplier relationship, service delivery, settlements, complaints, disputes, security, fraud prevention and lawful record-keeping. Certain financial, verification, complaint, dispute, agreement-acceptance or audit records may be retained after the Supplier relationship ends where required or permitted by law.

International Processing

Some service providers may process or store information outside Sri Lanka. Kelin will assess and apply the requirements and safeguards applicable under Sri Lankan law at the relevant time.

Supplier Privacy Rights

Subject to applicable law and its conditions, Suppliers may have rights relating to access, correction or completion, erasure, consent withdrawal, objection or other data-subject matters. Requests may be submitted to support@kelin.lk. Kelin may verify identity and apply lawful exceptions or retention requirements.

Cookies and Technical Information

Kelin may use essential cookies, logs and similar technologies for functionality, authentication, security, preferences, troubleshooting and analytics where enabled and permitted. Browser controls can manage certain cookies, although disabling essential technologies may affect functionality.

Changes to This Policy

Kelin may update this Policy to reflect changes to services, systems, data practices or applicable law. Material changes may be communicated through the website, Supplier application, email or another appropriate channel.

Contact

Kelin (Pvt) Ltd Privacy Contact: Kelin Support Team Email: support@kelin.lk Website: https://www.kelin.lk