Introduction
This Privacy Policy explains how Scan Lanka Trading Co. ("Scan Lanka", "we", "us") collects, uses, and protects personal information when you use https://www.canvasboards.lk and related services (orders, quotes, support, and payments).
We handle personal data in line with applicable Sri Lankan law, including the Personal Data Protection Act, No. 9 of 2022 (PDPA), where it applies to us.
Who we are
- Business: Scan Lanka Trading Co. / Scan Lanka Group
- Website: https://www.canvasboards.lk
- Email: scanlankagroup.info@gmail.com
- Phone / WhatsApp: 071 781 7447
Information we collect
Depending on how you use the site, we may collect:
- Identity & contact: name, email, phone number, delivery address, postal code
- Account data: login email, password (stored hashed), order history
- Order & payment data: items ordered, amounts, payment method chosen (COD, bank transfer, or card via PayHere), transaction references
- Support messages: content you send via contact forms, chat, or email
- Technical data: IP address, browser type, device information, and basic usage logs for security and performance
We do not store full card numbers on our servers. Card payments are processed by PayHere on their secure payment pages.
How we use your information
- Process and deliver orders; send order confirmations and updates
- Provide quotes, after-sales support, returns, and refunds
- Process payments and prevent fraud (including with PayHere and banks)
- Improve our website, products, and customer service
- Comply with legal, tax, and accounting obligations
- Send important service messages; marketing only where permitted and you have not opted out
Legal bases (where PDPA applies)
We process personal data where necessary to perform a contract with you (your order), to comply with law, for our legitimate interests (security, improving services), or with your consent where required.
Sharing your information
We may share data with:
- Payment providers: PayHere (card payments) and banks (transfers)
- Delivery partners: couriers or transport providers fulfilling your order
- IT / hosting providers: securely hosting our website and email
- Authorities: when required by law or to protect our rights
We do not sell your personal data.
Cookies
We use cookies and similar technologies for essential site functions (for example login sessions and cart) and, where applicable, analytics or preferences. You can control cookies through your browser settings. See also our on-site cookie notice.
Data retention
We keep order and account records for as long as needed to fulfil orders, provide support, and meet legal/accounting requirements, then delete or anonymise them when no longer required.
Security
We use reasonable technical and organisational measures to protect personal data (including HTTPS and access controls). No method of transmission over the internet is 100% secure.
Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, or object to certain processing. Contact us using the details above. You may also lodge a complaint with the relevant data protection authority in Sri Lanka where applicable.
Children
Our site is intended for purchasing by adults / organisations. We do not knowingly collect personal data from children for marketing purposes.
Changes
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised date.
Last updated: July 2026