Privacy Policy
Last updated: 25 August 2026
This Privacy Policy explains how SAZEE.LK collects, uses, stores, and protects your personal data, in accordance with Sri Lanka's Personal Data Protection Act (PDPA).
1. What We Collect
We collect only the data fields needed for the stated purpose:
- Mobile number - for account creation, OTP verification, and owner-customer contact
- Name - to identify you on the platform
- Email and password - owners only, for account recovery and receipts
- NIC (optional) - only if you apply for the Founding 200 campaign, to prevent duplicate claims
- Listing content and photos - property details you choose to publish
- Payment and transaction records - amount, status, and provider transaction ID (we do not store card details; payments are processed by our payment provider)
We do not collect data beyond what is needed for registration, OTP verification, campaign eligibility, listings, and payments.
2. Why We Collect It
Your data is used to operate your account, verify your identity via OTP, process payments, enforce free-view and Founding 200 eligibility rules, moderate listings, send transactional notifications, and respond to support requests.
3. Consent
We record your explicit consent at registration - a checkbox you actively select, together with a timestamp - before your account is created. Consent is never implied or pre-selected.
4. Data Retention
Active account data is retained for as long as your account exists. Data for a rejected or unclaimed Founding 200 application is retained for 12 months from the decision date, after which it is deleted, unless retention is required to resolve an active dispute or by law. Payment transaction records are retained for 5 years to meet standard financial record-keeping obligations.
5. Your Rights
You may request a copy of the personal data we hold about you, or request its deletion, by contacting our support channel. We will respond within a reasonable timeframe. Deletion requests may be limited where retention is required for legal, financial, or fraud-prevention purposes (e.g. an active Founding 200 duplicate-fraud investigation).
6. Security
Personal data - mobile numbers, NIC, email - is encrypted at rest in our database, and all data in transit is protected with TLS. Access to personal data is restricted to systems and staff that need it to operate the platform.
7. Sharing
Your contact details are shared with another user only when you explicitly reveal them (an owner's phone number to a logged-in customer who taps "Contact Owner"). We share data with our payment provider and SMS/OTP provider only as needed to process a transaction or deliver a verification code. We do not sell personal data.
8. Contact
For any privacy request, reach us via our support channel.