Effective Date: 05-07-2026
Last Updated: 10-07-2026

This Privacy Policy explains how Code Innovator Private Limited, operating under the brand ShopQ ("Company," "we," "us," or "our"), collects, uses, discloses, and safeguards information when you visit or make a purchase from shopq.lk (the "Site") or use our mobile applications and related services (collectively, the "Service").

By using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Service.

1. Information We Collect

1.1 Information You Provide Directly

• Account details: name, email address, phone number, delivery address, billing address
• Order and payment information (processed via our payment gateway/COD partners; we do not store full card numbers)
• Communications with customer support
• Reviews, ratings, and other user-generated content

1.2 Information Collected via Social Login (Facebook / Google)

When you choose to register or log in using Facebook Login or Google Sign-In, we collect only the information you authorize the platform to share with us, which typically includes:

• Your name
• Your email address
• Your public profile picture
• A unique identifier issued by Facebook or Google to link your account to our Service

We do not request or store your social media password. Authentication is handled entirely by Facebook/Meta and Google via their respective OAuth 2.0 protocols; we never have access to your login credentials.

Facebook Platform Compliance: Our use of data obtained through Facebook Login complies with the Meta Platform Terms and Developer Policies (developers.facebook.com/policy). We do not sell Facebook-derived data, use it for unrelated purposes, or transfer it except as necessary to operate the Service or as required by law.

Google API Services Compliance: Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Google user data obtained through sign-in is used only to provide and improve user-facing features directly relevant to the Service, and is never used for advertising purposes or sold to third parties.

1.3 Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Usage data (pages viewed, time on site, referral source, clicks)
• Location data (approximate, derived from IP address, for delivery estimation)
• Cookies and similar tracking technologies (see Section 6)

2. How We Use Your Information

We use collected information to:

• Create and manage your account (including social login accounts)
• Process, fulfill, and deliver orders (including via our courier/last-mile partners)
• Communicate order confirmations, delivery updates, and customer support responses
• Personalize product recommendations and improve the shopping experience
• Prevent fraud, abuse, and unauthorized transactions
• Comply with legal obligations
• Send marketing communications, where you have opted in (you may opt out at any time)

We do not use data obtained through Facebook or Google login for purposes beyond those disclosed here, and we do not use it to build advertising profiles on third-party ad networks.

3. How We Share Your Information

We may share information with:

• Delivery and logistics partners (including affiliated courier services) to fulfill orders
• Payment processors to complete transactions
• Service providers who support hosting, analytics, and customer communication, under confidentiality obligations
• Legal authorities, where required by law, court order, or to protect the rights and safety of the Company or its users
• Business transfers, in connection with a merger, acquisition, or sale of assets, subject to continued protection under this Policy

We do not sell your personal information to third parties for their own marketing purposes.

4. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Social login profile data is retained only as long as necessary to maintain your account; you may disconnect social login at any time (see Section 5).

5. Your Rights and Choices

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information
• Withdraw consent for marketing communications
• Disconnect Facebook or Google login from your account (this will not delete your ShopQ account unless requested)
• Request a copy of the data we hold about you
• Revoke app permissions directly from your Facebook settings (facebook.com/settings) or Google account permissions (myaccount.google.com/permissions) at any time — doing so will stop future data sharing with us, though it will not automatically delete data we already hold (you may separately request deletion from us)

To exercise any of these rights, contact us using the details in Section 10.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged in
• Remember cart contents and preferences
• Analyze site traffic and usage patterns
• Support social login session functionality

You can control cookie preferences through your browser settings. Disabling cookies may limit some features of the Service, including social login.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to individuals under the age of 18 (or the age of legal majority in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will take steps to delete it.

9. International Data Transfers

As our Service may be accessed from multiple countries, your information may be transferred to and processed in countries other than your country of residence, including Sri Lanka, which may have different data protection laws. We take reasonable steps to ensure your information receives an adequate level of protection wherever it is processed.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Company: ShopQ Private Limited
Address: No.17 International Buddhist Centre Road, Colombo 6
Email: privacy@shopq.lk
Phone: 076 661 0923

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last Updated" date. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.