Privacy Policy

At evmart.lk, we are committed to protecting the privacy of the Sri Lankan EV community. This policy details our data practices in strict compliance with the Sri Lankan Personal Data Protection Act (PDPA) No. 9 of 2022. By using our platform, you consent to the collection and use of information in accordance with this policy.

1. Information We Collect

To facilitate secure transactions and high-quality listings, we collect:

• Account Data: Display name, verified email address, and phone number (collected via Supabase Auth).
• Listing & Vehicle Data: Vehicle Make/Model, Year, Battery Health (SOH), Range (km), Charging port types, and high-resolution vehicle imagery.
• Location Data: District and Town information provided by you to show buyers "EVs near me."
• Communication Data: Records of inquiries made through our platform or WhatsApp integration.

2. How We Use Your Data

We process your personal data for the following legitimate purposes:

• Marketplace Operations: To display your vehicle listings to potential buyers in Sri Lanka.
• Verification: To minimize fraudulent listings and ensure "Verified Seller" status where applicable.
• Analytics: To track listing views and performance metrics (stored in our PostgreSQL database).
• Communication: To send automated notifications regarding listing approvals or account security.

3. Data Storage & Security

We employ enterprise-grade security via Supabase (PostgreSQL). All vehicle images are stored in secure Supabase Storage Buckets with Row-Level Security (RLS) policies to prevent unauthorized data manipulation.

Your authentication is handled through encrypted tokens, ensuring your password never enters our local databases.

4. Your Rights (PDPA Compliance)

Under the Sri Lankan PDPA, you possess the following rights:

• Right of Access: Request a copy of all data evmart.lk holds about you.
• Right to Rectification: Instantly update your profile and listing details through your Dashboard.
• Right to Erasure: Delete your account and all associated listings permanently.
• Right to Withdraw Consent: Opt-out of any non-essential communications or data processing.

Contact Our Data Protection Team

If you have any questions regarding your data or wish to exercise your rights: