Official Privacy Policy

Privacy Policy

At Construction.lk, we take the confidentiality and privacy of our visitors, business owners, and authenticated members seriously. This document outlines how your data is collected, processed, and safeguarded when interacting with our construction directory and B2B marketplace platform.

Effective Date: October 17, 2026

•

Last Updated: October 17, 2026

1. Overview & Scope

This Privacy Policy applies to all services, features, mobile web views, and web properties offered under Construction.lk (accessible at https://construction.lk), operated in Sri Lanka.

Whether you are a casual browser looking for verified construction contractors, a vendor submitting catalog listings and quotation requests (RFQs), or an advertiser managing billboard sponsorships, this policy explains how your personal and company information is processed and preserved in accordance with standard global privacy regulations and Sri Lanka Personal Data Protection legislation.

2. Information We Collect

We gather information in three main categories to provide and secure our platform:

A. Information You Provide Voluntarily

Account Credentials: Name, email address, password hash, and Sri Lankan phone number (+94) used during registration or SMS OTP verification.
Company & Business Profiles: Business registration numbers, company titles, addresses, district, branch locations, authorized contact details, logos, product catalogs, and service descriptions.
Quotations & Inquiries (RFQs): Project requirements, bill of quantity specifications, and contact coordinates transmitted to listed vendors.
Billing Information: Billing names, contact emails, order identifiers, and settlement receipts generated via our payment gateway (PayHere).

B. Information Collected Automatically

Device & Usage Telemetry: Browser user agent, operating system, IP address, referral sources, and search navigation telemetry.
Session & Security Cookies: Authentication tokens and state variables stored securely in encrypted HTTP-only cookies and local session storage.

3. Google Authentication & Limited Use Disclosure

Construction.lk provides authentication via Sign in with Google (powered by Google Identity Services and Firebase Authentication).

When you sign in using your Google Account, we only request the basic profile scopes:

Your verified Google email address (to create and link your platform account).
Your display name (to personalize your account dashboard and communications).
Your public avatar URL (to optionally display your profile thumbnail).

Google API Services User Data Policy Compliance:
Construction.lk does not access, read, or process your personal Google Drive files, Google Contacts, Gmail messages, or search history. Our use and transfer of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Your Information

Your information is used strictly to fulfill legitimate business objectives:

Account & Identity ManagementAuthenticate authorized users, verify business representatives, and restrict unauthorized portal access.
Marketplace OperationsDeliver search results, connect clients with verified building suppliers, and forward RFQ inquiries.
Transaction ProcessingFacilitate invoice generation, sponsor bookings, subscription tiers, and billing receipts.
Platform Security & Fraud PreventionMonitor automated abuse, spam RFQs, and maintain directory integrity.

5. Data Storage, Security & Retention

All data transmitted across Construction.lk is encrypted in transit using industry-standard TLS 1.3 cryptographic protocols.

Database & Persistence: Managed in cloud relational instances with Row-Level Security (RLS) policies enforcing strict access permissions per user ID and organizational profile.
Payment Security: Construction.lk does not store raw credit card numbers or debit card CVVs. All electronic transactions are redirected through Central Bank of Sri Lanka-authorized and PCI-DSS compliant payment gateways (PayHere).
Data Retention: Account data is retained for the active lifetime of your profile. Inactive accounts or users who request termination have their personal identifiers scrubbed within 30 days, subject to legal record retention requirements.

7. Cookies & Session Storage

We use strictly necessary and functional cookies to authenticate users, remember region and district preferences, and maintain dashboard state. You can manage or block cookies through your browser settings, though doing so may limit your ability to access authenticated portal areas.

8. Your Data Protection Rights & Account Deletion

You retain full authority over your personal information. You have the right to:

Access & Portability: Request an export of personal and business listing information held in our records.
Correction: Update incorrect phone numbers, business addresses, or profile descriptions directly via your user dashboard.
Account Deletion: You may request complete deletion of your account, company profiles, and associated data by emailing info@construction.lk with the subject line “Data Deletion Request”. Your request will be processed within 14 business days.

9. Children's Privacy

Construction.lk is a commercial B2B directory and marketplace designed for adult industry professionals and property builders. We do not knowingly solicit or collect personal information from individuals under 18 years of age.

10. Changes to This Policy

We may revise this Privacy Policy periodically to reflect technological advancements, platform features, or regulatory updates. Any material updates will be signaled by updating the “Last Updated” timestamp at the top of this document. Continued usage of Construction.lk following modifications denotes your acceptance of the revised terms.