Privacy Policy

Effective Date: October 1, 2022

This Privacy Policy describes how the “Service Provider” (hereinafter referred to as “” or “” or “ App”) collects and uses the personal information you provide to the Service Provider through this website accessible at: (the “Website”) or by other means. It also describes the choices available to you regarding our use of your personal information and how you can access and update this information. By accessing or using the Website or other service provided by the service provider, you signify that you have read this Privacy Policy, and you expressly consent to our collection, use, disclosure, storage, and protection of your personal information as described in this Privacy Policy.

We have defined some terms that we use throughout the Privacy Statement. You can find the meaning of a capitalized term in the Definitions section.

1. What Personal Data Do We Collect?

We collect Personal Data about you when you visit our Sites or use our Services, including the following:

2. Why Do We Retain Personal Data?

We retain Personal Data in an identifiable format for the least amount of time necessary to fulfill our legal or regulatory obligations and for our business purposes. We may retain Personal Data for longer periods than required by law if it is in our legitimate business interests and not prohibited by law. If your Account is closed, we may take steps to mask Personal Data and other information, but we reserve our ability to retain and access the data for so long as required to comply with applicable laws. We will continue to use and disclose such Personal data in accordance with this Privacy Statement.

The cookies we use have defined expiration times; unless you visit our Sites or use our Services within that time, the cookies are automatically disabled and retained data is deleted. Please consult our Statement on Cookies and Tracking Technologies for more information.

3. How Do We Process Personal Data?

We may Process your Personal Data for a variety of reasons that are justified under data protection laws in Sri Lanka.

You can withdraw your consent at any time and free of charge. Please refer to the section on “Your Privacy Choices” for more information on how to do that.

4. Authorization for Usage of Third-Party Data

Notwithstanding anything to the contrary in this Privacy Policy or the Terms and Conditions of the website, you acknowledge, consent, and agree that:

You acknowledge, consent and agree that Service Provider, its employees, or agents shall not be held liable for the collection, use, storage, processing, and disclosure of all such personal information provided by you under this paragraph.

5. Do We Share Personal Data?

We may share your Personal Data or other information about you with others in a variety of ways as described in this section of the Privacy Statement. We may share your Personal Data or other information for the following reasons:

In addition, may provide aggregated statistical data to third-parties, including other businesses and members of the public, about how, when, and why Users visit our Sites and use our Services. This data will not personally identify you or provide information about your use of the Sites or Services. We do not share your Personal Data with third parties for their marketing purposes without your consent.

6. No sale of personal information

Service Provider will not rent or sell your personal information to third parties.

7. How Do We Work with Other Services and Platforms?

A significant benefit and innovation of’s Services is that you can connect your Account with a third-party account or platform. For the purposes of this Privacy Statement, an “account connection” with such a third-party is a connection you authorise or enable between your Account and a account, payment instrument, or platform that you lawfully control or own. When you authorise such a connection, and the third-party will exchange your Personal Data and other information directly. Examples of account connections include:

If you choose to create an account connection, we may receive information from the third-party about you and your use of the third-party’s service. For example, if you connect your Account to a social media account, we will receive Personal Data from the social media provider via the account connection. If you connect your Account to other financial accounts, directly or through a third-party service provider, we may have access to your account balance and transactional information, such as purchases and funds transfers. We will use all such information that we receive from a third-party via an account connection in a manner consistent with this Privacy Statement.

Information that we share with a third-party based on an account connection will be used and disclosed in accordance with the third-party’s privacy practices. Before authorising an account connection, you should review the privacy notice of any third-party that you authorised to have an account connection that will gain access to your Personal Data as part of the account connection. For example, Personal Data that shares with a third-party account or platform such as a social media account may in turn be shared with certain other parties, including the general public, depending on the account’s or platform’s privacy practices.

8. Information from cookies and web beacons

Cookies are small text files created by a website that store information on your computer, such as your preferences when visiting that website. Similar to many websites, if you have enabled cookies in your browser, Service Provider, independently and through enabled third party tools and programs, collects certain technical information using cookies, such as the path of users to the Website, pages visited, originating IP address, browser type, browser language and the date and time of the user’s visit. This information helps Service Provider track trends and improve areas of the Website and Program, and are common analytics used by most websites. If you have disabled cookies, the Website may not work as it is intended because the Service Provider uses cookies when you sign in to keep track of your personal session.

Web beacons are tiny graphics with a unique identifier that are similar in function to cookies but, instead of being stored on your computer, are embedded invisibly on web pages and are about the size of the period at the end of this sentence. Web beacons are used to track the online movements of internet users. Service Provider uses them to better understand User interaction and engagement with the Website (including without limitation, in electronic Communications), such as by learning whether certain users have accessed the Website via links from other websites. Service Provider can use this information to tailor its audience for advertisements promoting Service Provider. You may set your browser preferences to opt out of the collection and use of this tracking information for ad targeting purposes.

Service Provider also uses cookies for remarketing, by placing a cookie in your browser to signal that you’ve visited the Website. This gives us the option to show you ads for Service Provider when you visit other websites that host advertisements. Service Provider supports the Do Not Track preference available on most internet browsers. The use of cookies by third parties on the Website is for the purpose of making the Website easier to use and to enable certain features of the Website and is not covered by this Privacy Policy. We do not have control over these cookies.

9. Electronic communications

From time to time you will receive disclosures, notices, documents and information based on your current loan status (“Communications”) from Service Provider (for example, confirmations of Loans obtained by you, confirmation of email address or password changes, or customer service inquiries regarding the status of or activity). By creating an account with Service Provider on the Website or other service, you agree that all Communications from Service Provider relating to your use of the Website or service and participation in the Program may be provided or made available to you electronically by mobile SMS, by e-mail or at the Website.

By registering on the Website or other service, you acknowledge that you can access the electronic Communications, and you consent to having all Communications provided or made available to you in electronic form and to obtain a loan utilizing the online service provided by Service Provider. We may also provide you with Communications through physical mail.

Assuring the privacy of all the contact details you have provided us while completing the loan application, with due approval from the users we will use them as modes of promoting our marketing campaigns. Nevertheless, these users will have the option to approve and disapprove the request.

10. What Privacy Choices Are Available To You?

You have choices when it comes to the privacy practices and communications described in this Privacy Statement. Many of your choices may be explained at the time you sign up for or use a Service or in the context of your use of a Site. You may be provided with instructions and prompts within the experiences as you navigate the Services.

11. How Do We Protect Your Personal Data?

We maintain technical, physical, and administrative security measures designed to provide reasonable protection for your Personal Data against loss, misuse, unauthorised access, disclosure, and alteration. The security measures include firewalls, data encryption, physical access controls to our data centres, and information access authorisation controls. While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s) and Account/profile registration information and verifying that the Personal Data we maintain about you is accurate and current. We are not responsible for protecting any Personal Data that we share with a third-party based on an account connection that you have authorised.

12. Can Children Use Our Services?

The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information, including Personal Data, from children or other individuals who are not legally able to use our Sites and Services. If we obtain actual knowledge that we have collected Personal Data from a child under the age of 18, we will promptly delete it, unless we are legally obligated to retain such data. contact us if you believe that we have mistakenly or unintentionally collected information from a child under the age of 18.

13. Links to other websites

If you follow any links which remove you from the Website or other service (for example, the independently operated Facebook, Twitter, Blogger, WordPress, Salesforce and any other websites), this Privacy Policy no longer applies – i.e., the privacy policies and practices of other websites and other parties are governed by their respective terms of use and privacy policies.

14. Security

Service Provider takes reasonable steps to maintain appropriate physical, technical information such as encrypting transmission of information using SSL and administrative security to help prevent loss, misuse and unauthorized access, disclosure and modification of personal information. While we take these reasonable efforts to safeguard your personal information, no system or transmission of data over the Internet or any other public network can be guaranteed to be 100% secure.

15. Modifications; Interpretation

Service Provider may update or modify this Privacy Policy from time to time. If any changes are made, the Service Provider will reflect the date on which any such changes are made and posted by updating the “last updated” date at the top of the page. If we make any material changes we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on this Website prior to the change becoming effective. Please be sure to check this page periodically for changes.

16. Definitions

17. Requests & Complaints

If you believe that any of your personal data may have been misused or abused or otherwise compromised, or if you wish to withdraw your consent for processing of your personal data, you may lodge your inquiries and complaints to the Service Provider in accordance with the contact details as outlined below and discuss such matter, together with your contact details for reference. All such complaints will be resolved within 30 (Thirty) calendar days.

Filing such complaints shall not affect the lawfulness of any processing carried out before you withdraw your consent.

For Complaints please e-mail –