pola.lk

Privacy Policy

How pola.lk collects, uses and protects your personal information.

Last updated: 15th of October, 2026

We take your privacy very seriously and are committed to protecting the privacy of all visitors and users of the pola.lk website and the pola.lk mobile applications (together, the “Platform”), and the corresponding services available through the Platform (the “Services”).

This privacy policy is provided by Binary Digital Labs (Private) Limited, which owns and operates pola.lk (“we”, “us”, “our”, the “Company”, as applicable), to you (“you” or the “User”). We are responsible for the personal information collected through the Platform.

Below we set out our privacy policy, which will govern the way in which we process any personal information that you provide to us.

Please read this privacy policy carefully as it contains important information on who we are and how we collect, store, use and share your information. By accessing the Platform or using our Services or otherwise indicating your consent, you agree to, and where required, consent to the collection, use and transfer of your information as set out in this policy. If you do not accept the terms of this policy, you must not use the Platform and/or the Services. This privacy policy supplements other notices and privacy policies and is not intended to override them.

This privacy policy: (i) applies only to the Platform and not to websites or applications of any other companies or organisations; and (ii) specifically addresses our obligations pursuant to local law.

1. Information we collect

When you visit our Platform or sign in to use the Services, you may be asked to provide information about yourself. We collect:

  • Account information: your name, mobile number and/or email address. You sign in with a one-time code sent to your mobile number or email, or with your Google, Facebook or Apple account. We do not use passwords. When you sign in with Google, Facebook or Apple, we receive your name, email address and profile picture from that service.
  • Ads and profile content: the ads you post (including text, images, price, location and category details) and your public profile (such as your name, profile picture and, for businesses, business details). Information you post on pola.lk is publicly available. The contact details you choose to show on an ad, such as your mobile number and WhatsApp, can be seen by anyone viewing the ad.
  • Messages: chat messages you send to and receive from other users through the Platform, and messages you send to us.
  • Verification information: if you choose to verify your account as a seller, the identity documents and photo (selfie) you submit, which we use only to check your identity.
  • AI assistant conversations: the messages you send to the pola.lk AI assistant and its replies.
  • Usage and device information: your IP address, device and browser type, app version, pages and ads you view, searches you make, your responses to ads, and standard web log information. If you allow notifications, we also store a push notification token for your device.
  • Calls with us: calls between you and us (for example, when we call you to verify your details) may be recorded or monitored for quality assurance and customer service purposes.

This information is required to provide the Services to you. If you do not provide such information, it may delay or prevent us from providing the Services.

This privacy policy also applies when accessing the Platform and/or the Services from mobile technology (such as mobile phones, tablets or other devices). Unless you have chosen to remain anonymous through your device and/or platform settings, this information may be collected and used by us automatically if you use the Services and access the Platform from mobile technology.

2. Purpose of processing

Your information will allow us to provide you with access to the particular parts of the Platform relevant to you and allow us to supply the Services you require.

We will use your information for the purpose of publishing and managing your ads, enabling buyers and sellers to contact each other, fulfilling service orders placed by you (such as ad boosts and memberships), processing any other transactions authorised or made by you with us, verifying identities, keeping the Platform safe and preventing fraud, spam and misuse, improving our search and Services, informing you of special offers and providing other marketing information to you which we think you may find of interest, and undertaking services or customer research/development.

Your information may be used by us to contact you for your opinions on the Platform, the Services and our business, and to notify you of changes or developments to the Platform, the Services and our business.

3. Cookies and analytics

The pola.lk website uses cookies and similar technologies (such as local storage):

  • Essential cookies keep you signed in and remember your settings. They are always on, because the website cannot work properly without them.
  • Analytics cookies help us understand how the Platform is used so we can improve it, using services such as Google Analytics, Vercel Speed Insights (page speed) and Algolia search analytics. These are only used if you accept them in the cookie banner. If you reject them, we only use a temporary identifier for the current page visit to measure search quality, and it is not linked to you.

You can change your choice at any time by clearing the cookies for pola.lk in your browser. The pola.lk mobile apps collect similar usage information to improve the Services.

4. Service providers and disclosure

We don’t sell or rent users’ personal information to third parties for their marketing purposes without users’ explicit consent.

We share personal information with service providers who help us run the Platform, only as needed for them to perform their services for us, including:

  • Google Firebase (sign-in, chat messages and push notifications)
  • Cloudinary (storing and serving images)
  • Algolia (search)
  • OpenAI (powering the AI assistant; your AI assistant messages are sent to OpenAI to generate replies)
  • SendGrid, Meta (WhatsApp) and SMS providers (sending one-time codes, notifications and messages)
  • PayHere (processing payments, see Section 5)
  • Google Analytics and Vercel (website analytics, page speed measurement and hosting)

We may also disclose personal information to respond to legal requirements, enforce our policies, respond to claims that a posting or other content violates others’ rights, or protect anyone’s rights, property, or safety.

In the unlikely event that a liquidator, administrator or receiver is appointed over us or all or any part of our assets, that insolvency practitioner may transfer your information to a third party purchaser of the business provided that purchaser undertakes to use your information for the same purposes as set out in this policy. We undertake not to provide your personal information to third parties save in accordance with this policy.

5. Payment data

We employ a third-party provider (PayHere) for processing payments. They have access to personal information needed to perform their functions, but may not use it for other purposes. We do not have access to or retain your card or bank account details.

6. Data retention

We keep your information for as long as your account is active or as needed to provide the Services. After your account is deleted, or when information is no longer needed, we delete it or make it anonymous, except where we must keep it for longer to meet legal, tax or accounting obligations, resolve disputes, prevent fraud or enforce our terms.

7. Access to information

You may ask us whether we are storing personal information about you by emailing us at support@pola.lk and, if you wish, we will provide you with a copy of the personal data we hold about you by email, free of charge. We may ask for proof of your identity before providing any information and reserve the right to refuse to provide information requested if identity is not established.

8. Data deletion request

We respect your privacy and your right to request the deletion of your personal data. You can delete your data from our systems in any of the following ways:

How to delete your account and data

  • In the pola.lk app or on the pola.lk website, go to your profile and choose Delete account.
  • Send an email to support@pola.lk with the subject "Data Deletion Request".

Verification

Upon receiving an email request, we may ask for additional information to verify your identity to ensure the security of your data.

Processing time

We will process your request within 30 days and notify you once your personal data has been deleted, subject to Section 6.

9. Inquiries

If you have any enquiry or concern about our privacy policy or the way in which we are handling personal data, please contact us at support@pola.lk. If at any time you do not wish to receive marketing messages from us, please email support@pola.lk with “unsubscribe” as the subject heading.

10. Updates to policy

We reserve the right to vary this policy from time to time. Our updated policy will be displayed on our Platform, with the “Last updated” date at the top changed. Where the changes are significant, we will also notify you through the Platform or by email. By continuing to use and access the Platform following such changes, you agree to be bound by any variation made by us.