Data Policy
This Data Policy explains how Adtop.lk collects, uses, and protects your personal data when you use our platform. This policy is specifically designed to comply with Facebook's data usage requirements and applicable privacy laws including GDPR.
Last Updated: January 2025
Data Controller
Company: Mangoban Private Limited
Address: Nupe, Matara, Sri Lanka
Email: [email protected]
Phone: +94 76 992 77 66
Personal Data We Collect
Account Information
- Name and email address (required for account creation)
- Phone number (for account verification and security)
- Profile picture (from Facebook/Google or uploaded directly)
- Account preferences and settings
Social Media Data (Facebook/Google)
- Email address: Used for account identification and communication
- Public profile information: Name and profile picture for display purposes
- Account linking data: To enable seamless login across platforms
Usage Data
- IP address and device information
- Browser type and version
- Pages visited and time spent on our platform
- Search queries and ad interactions
- Location data (if you choose to share it)
Content Data
- Advertisements you post
- Messages sent through our platform
- Images and files you upload
- Reviews and ratings you provide
How We Use Your Personal Data
Service Provision
- Create and manage your user account
- Enable you to post and manage advertisements
- Facilitate communication between buyers and sellers
- Provide customer support and respond to inquiries
Authentication & Security
- Verify your identity and prevent fraud
- Enable secure login through social media platforms
- Protect against unauthorized access to your account
- Monitor for suspicious activities
Platform Improvement
- Analyze usage patterns to improve our services
- Develop new features and functionality
- Personalize your experience on our platform
- Conduct research and analytics
Communication
- Send important updates about your account
- Notify you about relevant advertisements
- Provide marketing communications (with your consent)
- Respond to your inquiries and support requests
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: To provide our services and fulfill our obligations to you
- Legitimate Interest: To improve our platform, prevent fraud, and ensure security
- Consent: For marketing communications and optional features
- Legal Obligation: To comply with applicable laws and regulations
Data Sharing and Third Parties
We may share your personal data with:
- Service Providers: Third-party companies that help us operate our platform (hosting, analytics, email services)
- Social Media Platforms: Facebook and Google for authentication purposes only
- Legal Authorities: When required by law or to protect our rights
- Business Partners: Only with your explicit consent
We do not sell your personal data to third parties.
Data Retention
We retain your personal data for the following periods:
- Account Data: Until you delete your account or request deletion
- Advertisement Data: Until the ad expires or is deleted by you
- Usage Data: Up to 2 years for analytics and improvement purposes
- Communication Data: Up to 3 years for customer support purposes
- Legal Compliance Data: As required by applicable laws
Your Data Protection Rights
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a structured format
- Restriction: Limit how we process your data
- Objection: Object to certain types of processing
- Withdraw Consent: Withdraw consent for consent-based processing
To exercise these rights, contact us at [email protected]
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure.
International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable.
Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.
Data Breach Notification
In the event of a data breach that may result in a high risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable laws.
Changes to This Data Policy
We may update this Data Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Data Policy or our data practices, please contact us at:
Email: [email protected]
Phone: +94 76 992 77 66
Address: Mangoban Private Limited, Nupe, Matara, Sri Lanka
You can also visit our Contact Us page for general inquiries.