Privacy Policy

This Privacy Policy explains how Ewedd360 ("Ewedd360", "we", "us", "our"), an online wedding-vendor marketplace operating at ewedd360.com, collects, uses, discloses and protects your personal data. We are committed to handling your personal data in accordance with the Personal Data Protection Act No. 9 of 2022 of Sri Lanka (the "PDPA") and other applicable Sri Lankan law.

By creating an account or using Ewedd360, you acknowledge that you have read and understood this Policy.

1. Who we are (the Data Controller)

Ewedd360 is the controller responsible for your personal data. For any privacy question or to exercise your rights, contact us at info@ewedd360.com.

2. The personal data we collect

• Account data — your name, email address, phone number, password (stored encrypted) and account role (couple or vendor).
• Profile data — for couples: wedding details you choose to add; for vendors: business name, description, location, services, packages, pricing, portfolio images and contact details.
• Transaction data — subscription and booking records. Card/bank details are handled by our licensed payment partners and are not stored by us.
• Communications — inquiries, messages, reviews and support tickets you send through the platform.
• Technical data — IP address, device and browser information, and usage data collected via cookies (see our Cookie Policy).

3. Lawful basis for processing (PDPA)

We process your personal data only where we have a lawful basis under the PDPA, namely: (a) your consent; (b) performance of a contract with you (providing the service); (c) compliance with a legal obligation; or (d) our legitimate interests in operating, securing and improving the platform, where these are not overridden by your rights.

4. How we use your personal data

• To create and manage your account and provide the marketplace service.
• To connect couples with vendors and enable inquiries, quotes, bookings and reviews.
• To process vendor subscriptions and platform payments through our payment partners.
• To send service emails (verification, welcome, notifications, support replies).
• To keep the platform safe, prevent fraud and abuse, and enforce our Terms.
• To comply with our legal obligations in Sri Lanka.

5. Sharing and disclosure

We share personal data only as necessary:

• Between users — when a couple sends an inquiry, the relevant vendor receives the information needed to respond, and vice versa.
• Payment partners — licensed payment service providers (such as PayHere) to process payments securely.
• Service providers — hosting, email delivery and analytics providers acting on our instructions under appropriate safeguards.
• Legal — where required by Sri Lankan law, a court order, or a lawful request by a public authority, and to protect our rights and the safety of users.

We do not sell your personal data.

6. Your rights under the PDPA

Subject to the PDPA, you have the right to: be informed about the processing of your data; access your data; have inaccurate data corrected; withdraw consent; request erasure; and object to or restrict certain processing. To exercise any right, email info@ewedd360.com. You also have the right to lodge a complaint with the Data Protection Authority of Sri Lanka if you believe your data has been mishandled.

7. Data security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), password hashing, access controls and optional two-factor authentication. No method of transmission or storage is completely secure, but we work to protect your information.

8. Data retention

We retain personal data for as long as your account is active and as needed to provide the service, then for the period required to comply with our legal obligations, resolve disputes and enforce our agreements. You may request deletion of your account at any time.

9. International transfers

Our service may be hosted on, or use providers with, infrastructure outside Sri Lanka. Where personal data is transferred abroad, we take steps consistent with the PDPA to ensure it remains protected.

10. Children

Ewedd360 is intended for users aged 18 and over. We do not knowingly collect personal data from children.

11. Changes to this Policy

We may update this Policy from time to time. The "last updated" date shows when it was last revised. Material changes will be notified through the platform where appropriate.

12. Contact us

Questions about your privacy? Email info@ewedd360.com.