Supplier Privacy Policy

01. Introduction and Relationship with Customer Privacy

Effective Date: [Insert effective date before publication] This Policy explains how Kelin (Pvt) Ltd processes personal data relating to individuals who apply to, register with or participate in the Kelin Supplier Network. It supplements the Customer Privacy Policy at https://www.kelin.lk/policies?audience=customer&category=policies&doc=customer_privacy. Both policies apply according to the person's role and activity; this Policy does not remove any legal rights.

02. Supplier Information We Collect

We may collect identity and contact information; business names and registration documents; service areas and availability; qualifications, certifications, licences and insurance evidence where required; service requests, quotations, schedules and completion records; customer feedback, complaints and dispute information; bank or payout details; commission, settlement and tax records; and relevant technical or security logs.

03. How We Collect Information

Information may be collected from the Supplier during registration, onboarding, service delivery, profile updates, verification, payment administration and support. Where appropriate and lawful, it may also be obtained from authorized representatives, issuing authorities, professional bodies, verification providers or references.

04. How We Use Supplier Information

• Manage Supplier applications, accounts and profiles.
• Verify identity, business details, qualifications and service eligibility.
• Match Suppliers with requests and coordinate service delivery.
• Manage quotations, appointments, communications and completion records.
• Collect customer payments and administer Supplier settlements.
• Calculate commission, fees and adjustments.
• Respond to complaints, payment disputes and service issues.
• Prevent fraud and protect platform systems.
• Improve operations and meet applicable legal or record-keeping obligations.

05. Legal Grounds for Processing

Kelin will process personal data on a legal basis applicable to the purpose and circumstances, which may include steps requested before an agreement, performance of an agreement, legal obligations, consent where required, legitimate interests where lawfully available or another lawful basis. Requests to withdraw consent will be handled as permitted by law.

06. Sharing Supplier Information

Relevant information may be shared with customers to coordinate services, authorized Kelin personnel, payment service providers, verification providers, technology providers, professional advisers and authorities where required or permitted by law. Bank details and confidential verification documents are not intended to be publicly displayed.

07. Customer Information Accessed by Suppliers

Kelin may provide Suppliers with customer details needed for a service. Suppliers must use this data only for the authorized service, protect it, avoid unrelated marketing or disclosure, retain it only as necessary and notify Kelin promptly of suspected unauthorized access, loss or disclosure.

08. Security

Kelin takes reasonable measures appropriate to the information and risks involved. Suppliers should protect their credentials and devices. No electronic system can be guaranteed completely secure. Suspected incidents will be assessed and handled according to applicable procedures and law.

09. Retention

Supplier data is retained as reasonably necessary for the Supplier relationship, services, payments, complaints, disputes, security, fraud prevention and lawful record-keeping. Some financial, settlement, verification, complaint, dispute, acceptance or audit records may be retained after closure where required or permitted by law. No unsupported fixed retention period is promised.

10. International Processing

Some service providers may process or store information outside Sri Lanka. Where this occurs, Kelin will assess and address legal requirements and safeguards applicable at the relevant time. General information is available in the Customer Privacy Policy.

11. Rights and Requests

Subject to applicable law and its commencement provisions, Suppliers may have rights relating to access, correction, erasure, consent withdrawal, objection or other data-subject matters. Submit requests to support@kelin.lk. Kelin may verify identity and apply lawful exceptions or retention requirements.

12. Cookies and Technical Information

Kelin may use essential cookies, logs and similar technologies for functionality, authentication, security, preferences, troubleshooting and analytics where enabled. Browser controls can manage certain cookies, although disabling essential technologies may affect functionality.

13. Changes to This Policy

Kelin may update this Policy to reflect changes to services, systems, data practices or applicable law. Material changes may be communicated through the website, Supplier app, email or another appropriate channel.

14. Contact

Kelin (Pvt) Ltd, Privacy Contact: Kelin Support Team. Email: support@kelin.lk. Website: https://www.kelin.lk. Kelin may request reasonable verification before acting on a formal personal-data request.