Privacy Policy

Introduction & Data Controller

Kelin Services ("we", "our", or "us") operates the Kelin.lk platform. We are committed to protecting your personal data in accordance with the Personal Data Protection Act, No. 9 of 2022 (PDPA) of the Democratic Socialist Republic of Sri Lanka.

Applicable Legal Framework

This privacy policy complies with the following Sri Lankan legislation:

• Personal Data Protection Act, No. 9 of 2022 (PDPA) - Primary data protection legislation
• Electronic Transactions Act, No. 19 of 2006 - Electronic commerce and digital signatures
• Computer Crimes Act, No. 24 of 2007 - Cybersecurity and data integrity

Information We Collect

We collect and process the following categories of personal data:

• Personal Details: Name, email address, phone number, date of birth, gender, NIC number
• Service Requests: Request descriptions, categories, scheduling information, addresses
• Device Metadata: IP address, browser type, device type, operating system
• Cookies & Tracking: Session cookies, authentication tokens, analytics data

Legal Bases for Processing

We process your personal data under the following legal bases as defined by the PDPA:

• Performance of Contract: Processing necessary to provide our services
• Explicit Consent: Processing based on your explicit consent for specific purposes
• Legitimate Interest: Processing necessary for our legitimate business interests
• Legal Obligation: Processing required by law or regulatory compliance

Data Sharing & Third Parties

We share your data with trusted third-party service providers:

• Supabase: Database hosting and authentication services
• Vercel: Cloud hosting and deployment platform
• Service Providers: Third-party service professionals assigned to fulfill your requests

Cross-Border Data Transfers

Your personal data may be transferred to and processed in countries outside Sri Lanka. We ensure that all cross-border data transfers comply with the PDPA requirements and that appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses with third-party processors
• Adequacy decisions by relevant authorities
• Your explicit consent for specific transfers

Account & Data Deletion Policy

You have the right to request deletion of your account and personal data at any time. We provide two methods for account deletion:

Alternatively, you can request deletion via email at support@kelin.lk or visit https://www.kelin.lk/delete-account.

Data Subject Rights under Sri Lanka PDPA

As a data subject under the PDPA, you have the following rights:

• Right of Access: Request confirmation of data processing and obtain a copy of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data under certain circumstances
• Right to Withdraw Consent: Withdraw previously given consent at any time without affecting the lawfulness of processing prior to withdrawal

To exercise any of these rights, please contact us at support@kelin.lk.

Cookie Management

We use cookies and similar technologies to improve your browsing experience and ensure the proper functioning of our platform.

You can manage cookie preferences through:

• Browser Settings: Configure cookie preferences in your browser settings

Data Security Measures

We implement industry-standard security measures to protect your personal data:

• HTTPS/TLS Encryption: All data transmissions are encrypted using SSL/TLS protocols
• Data Encryption at Rest: Personal data is encrypted when stored in our databases
• Access Controls: Strict authentication and authorization mechanisms
• Regular Security Audits: Periodic assessment of security controls and vulnerabilities

Contact Details

For any privacy-related inquiries, data subject requests, or concerns about this privacy policy, please contact us: