Privacy Policy

PRIVACY POLICY Last Updated: August 2026 This Privacy Policy explains how **Kasthuri Mobile Solutions (Pvt) Ltd**, trading as **Kasthuri Mobile** (“Kasthuri Mobile”, “we”, “us”, or “our”), collects, uses, stores, discloses and protects personal data when customers and visitors access or use our website **[www.kasthurimobile.lk](http://www.kasthurimobile.lk)**, create a customer account, purchase products, make reservations or pre-orders, request warranty or repair services, communicate with us, or otherwise use our services. Kasthuri Mobile is committed to handling personal data responsibly and in accordance with applicable laws and regulations of **Sri Lanka**, including the **Personal Data Protection Act, No. 9 of 2022**, as amended from time to time. This Privacy Policy applies to our **e-commerce website, online mobile phone store, customer accounts, orders, warranty services, mobile phone repair services, customer support services and related digital services**. ## 1. Personal Data We May Collect We collect only personal data that is reasonably necessary for our legitimate business operations, transactions, customer services and applicable legal obligations. Depending on your interaction with **Kasthuri Mobile**, we may collect the following categories of information: ### 1.1 Customer and Account Information This may include: * Full name * Email address * Mobile or telephone number * Customer account information * Billing address * Delivery address * Profile information voluntarily provided by the customer * Communication preferences ### 1.2 Order and Transaction Information When you purchase or reserve products through our **online mobile phone store in Sri Lanka**, we may process information including: * Products purchased or reserved * Order number * Invoice information * Transaction details * Payment status * Delivery information * Pre-order or reservation information * Returns, exchanges and warranty claim information ### 1.3 Device, Warranty and Repair Information For **mobile phone warranty, iPhone repair, smartphone repair and after-sales services**, we may collect and maintain: * Device brand and model * IMEI number * Serial number * Storage capacity * Device colour * Purchase date * Warranty commencement and expiry dates * Warranty status * Repair or service job number * Reported faults * Repair history * Inspection and diagnostic information * Service status * Relevant customer contact information Such information may be required to verify ownership or purchase records, administer warranties, manage repair services and provide **online warranty and repair tracking services**. ## 2. Information Collected Automatically When you access **[www.kasthurimobile.lk](http://www.kasthurimobile.lk)**, certain technical information may be collected automatically through our website, hosting infrastructure, security systems, analytics technologies or similar services. This may include: * IP address * Browser type * Device type * Operating system * Pages visited * Date and time of access * Website interaction information * Referral information * Cookies and similar identifiers We may use this information for **website security, fraud prevention, technical troubleshooting, analytics, performance monitoring and improving the Kasthuri Mobile online shopping experience**. ## 3. How We Use Personal Data Kasthuri Mobile may process personal data where reasonably necessary to operate our business, fulfil transactions, provide requested services, comply with legal obligations, protect our legitimate interests, or where another lawful basis applies. Personal data may be used to: * Create and manage **Kasthuri Mobile customer accounts** * Process **online mobile phone orders** * Process reservations and pre-orders * Issue invoices and transaction records * Verify and process payments * Arrange delivery, collection or fulfilment of orders * Communicate order and delivery status * Provide **customer support and after-sales services** * Register and administer product warranties * Process warranty claims * Manage **mobile phone and iPhone repair services** * Maintain repair and service histories * Provide repair status notifications * Verify devices through IMEI or serial numbers * Respond to customer enquiries and complaints * Prevent fraud, misuse and unauthorized transactions * Protect the security of our customers, systems and website * Maintain accounting and business records * Improve our products, services and website * Comply with applicable legal and regulatory requirements We will not intentionally process personal data for purposes incompatible with the purpose for which it was collected, except where permitted or required by applicable law. ## 4. Payment Information Payments made through the **Kasthuri Mobile online store** may be processed through banks, payment gateways, card processors or other authorized financial service providers. Where payment information is entered directly into a third-party payment gateway, the relevant provider may process that information in accordance with its own terms and privacy practices. Kasthuri Mobile does not intentionally store complete debit or credit card details where those details are processed directly and securely by an authorized third-party payment provider. ## 5. Disclosure of Personal Data **Kasthuri Mobile does not sell personal data to third parties.** We do not intentionally publish or publicly disclose customers' private information. However, personal data may be disclosed where reasonably necessary to trusted third parties involved in providing our services, including: * Banks and payment service providers * Payment gateways * Courier and delivery service providers * Website hosting and cloud service providers * SMS, email and communication service providers * IT and cybersecurity service providers * Professional advisers * Warranty or authorized service partners * Government, regulatory, judicial or law-enforcement authorities where disclosure is required or permitted by law Where appropriate, we seek to limit disclosure to information reasonably necessary for the relevant purpose. ## 6. Cookies and Similar Technologies The **Kasthuri Mobile website** may use cookies and similar technologies to operate essential website functions, maintain customer sessions, remember preferences, improve performance, analyse website usage and enhance the customer experience. Certain cookies may be necessary for functionality such as: * Customer login * Shopping cart * Checkout * Security * Session management * Website preferences Other technologies may be used for analytics or performance purposes where appropriate. Users may be able to control certain cookies through their browser or available website settings. Disabling essential cookies may affect the functionality of the website. ## 7. Data Security Kasthuri Mobile takes reasonable and appropriate technical and organizational measures designed to protect personal data from: * Unauthorized access * Accidental loss * Unauthorized disclosure * Alteration * Misuse * Destruction * Other unauthorized processing Such measures may include access controls, authentication mechanisms, secure hosting, restricted administrative access and other appropriate security practices. However, no internet transmission or electronic storage system can be guaranteed to be completely secure. ## 8. Data Retention Kasthuri Mobile will retain personal data only for as long as reasonably necessary for the purpose for which it was collected or as required or permitted by applicable law. Retention periods may depend on the nature of the information and may include requirements relating to: * Orders and transactions * Accounting and taxation * Product warranties * Repair and service history * Fraud prevention * Customer disputes * Legal claims * Regulatory compliance When personal data is no longer reasonably required, we may securely delete, anonymize or otherwise dispose of it in accordance with applicable requirements and our data-retention practices. ## 9. Rights Relating to Personal Data Subject to the **Personal Data Protection Act, No. 9 of 2022**, applicable amendments, regulations and any limitations provided by law, individuals may have rights relating to their personal data. Depending on the circumstances, these may include rights to request access to relevant personal data and to request correction of inaccurate or incomplete personal data, and other rights available under applicable Sri Lankan data-protection law. Requests relating to personal data may be submitted to Kasthuri Mobile using the contact information provided below. We may request reasonable information to verify the identity of the person making a request before providing access to or making changes to personal data. ## 10. Children's Privacy Our products and e-commerce services are not specifically designed to collect personal data from children. Where the processing of a child's personal data requires the authorization or involvement of a parent, guardian or other person under applicable law, we will seek to handle such information in accordance with applicable legal requirements. ## 11. Third-Party Websites and Services Our website may contain links to third-party websites or integrate with external services such as: * Payment gateways * Banks * Courier services * Social media platforms * Maps * Analytics services * Other technology providers Kasthuri Mobile does not control the privacy practices of independent third parties. Their processing of personal data may be governed by their respective privacy policies and terms. Users are encouraged to review the privacy policies of relevant third-party services before providing personal information directly to them. ## 12. International Processing and Service Providers Some technology, hosting, cloud, communication or other service providers used by Kasthuri Mobile may operate infrastructure or process information outside Sri Lanka. Where personal data is processed or transferred outside Sri Lanka, Kasthuri Mobile will seek to handle such processing or transfers in accordance with applicable requirements under Sri Lankan data-protection law. ## 13. Marketing Communications Where permitted by applicable law, Kasthuri Mobile may communicate information about products, services, promotions, new arrivals or offers to customers who have provided the appropriate permission or where another lawful basis applies. Where an unsubscribe or opt-out mechanism is provided, customers may use that mechanism to stop receiving relevant promotional communications. Operational communications relating to existing orders, payments, warranties, repairs, security or customer-service matters may still be sent where necessary. ## 14. Changes to This Privacy Policy Kasthuri Mobile may revise this Privacy Policy from time to time to reflect changes in: * Applicable laws or regulations * Our business operations * E-commerce services * Payment methods * Delivery services * Warranty and repair services * Website functionality * Security practices * Technology and service providers The latest version will be published on **[www.kasthurimobile.lk](http://www.kasthurimobile.lk)** together with the applicable “Last Updated” date. Customers and website visitors are encouraged to review this Privacy Policy periodically. ## 15. Contact Us For questions, concerns or requests relating to this Privacy Policy or the processing of personal data, please contact: **Kasthuri Mobile Solutions (Pvt) Ltd** Trading as **Kasthuri Mobile** **Sri Lanka** Website:** [www.kasthurimobile.lk](http://www.kasthurimobile.lk) Email:** [contact-info@kasthurimobile.lk](mailto:contact-info@kasthurimobile.lk) Customer Support:** +94 74 100 1000