1. Who We Are (Data Controller)
This website is operated by LCD.LK Mobile Technologies (Pvt) Ltd (Business Registration No: PV 00294815), located at No. 42, Galle Road, Bambalapitiya, Colombo 04, Sri Lanka (“LCD.LK”, “we”, “our”, or “us”). For all privacy and personal data inquiries under Sri Lankan law, you may contact our Data Protection Desk at [email protected] or call 077 712 3456.
2. Personal Data We Collect
- Order & Delivery Details: Full name, Sri Lankan mobile phone number, WhatsApp number, email address, district, town/city, street delivery address, and device model notes required to ship your order accurately.
- Payment Confirmation Records: Gateway payment reference IDs, status codes, masked payment method type (PayHere, Koko, Mintpay), or uploaded bank transfer deposit slips when you choose Direct Bank Transfer.
- B2B Wholesale Partner KYC Data: When mobile repair shops apply for wholesale pricing at /wholesale, we collect owner name, NIC number, Business Registration (BR) number, shop signboard/workbench photo, and shop address strictly for manual trade verification.
- Technical & Security Logs: Essential `HttpOnly` session cookies, IP address, and browser user-agent logs used to prevent unauthorized access, automated abuse, and fraudulent transactions.
3. Payment Gateway Security & PCI-DSS Compliance
LCD.LK never collects, views, processes, or stores your Credit/Debit Card number, CVV security code, card expiry date, or mobile wallet PIN on our servers.
When you select PayHere (Central Bank of Sri Lanka approved payment aggregator supporting Visa, Mastercard, American Express, LankaQR, Genie, Frimi & HelaPay), Koko (3-installment BNPL), or Mintpay (3-installment BNPL), you are securely redirected to the respective payment provider's 256-bit SSL/TLS encrypted, PCI-DSS Level 1 certified payment environment. LCD.LK receives only a cryptographically signed webhook confirmation (`md5sig` / HMAC) verifying whether the payment in Sri Lankan Rupees (LKR) succeeded.
4. How We Use Your Information
- Processing, packing, and dispatching your replacement displays and mobile accessories across all 25 districts of Sri Lanka.
- Sending one-time login codes (OTPs), instant order confirmations, bank slip approvals, courier tracking numbers, and requested back-in-stock alerts via Text.lk SMS Gateway.
- Verifying B2B Wholesale Repair Shop applications and maintaining wholesale account security.
- Handling 7-day pre-installation testing warranty (RMA) claims, replacements, and refunds.
- Complying with Sri Lankan tax, accounting, anti-fraud, and statutory record-keeping obligations.
5. Information Sharing & Third-Party Service Providers
We never sell, rent, or trade customer personal data or wholesale client lists. Data is shared strictly on a need-to-know basis with:
- Licensed Payment Processors: PayHere (PayHere (Pvt) Ltd), Koko, and Mintpay solely to authorize and settle your chosen payment or process approved refunds.
- Domestic Courier Partners: Prompt Xpress, Domex, Certis Lanka, or Pronto Lanka (name, delivery address, and contact phone printed on the parcel waybill).
- SMS Gateway Provider: Text.lk solely to deliver transactional SMS notifications and OTP verification codes to your Sri Lankan mobile number.
6. Cookies, File Upload Validation & Data Security
We use essential `HttpOnly` encrypted session cookies for authentication and local browser storage for your shopping bag. Uploaded bank transfer receipts and RMA test photos undergo strict binary file-signature validation (accepting genuine JPG, PNG, WEBP, and safe PDF documents only) and are served with `X-Content-Type-Options: nosniff` and sandboxed security headers.
7. Your Rights Under Sri Lanka PDPA (Act No. 9 of 2022)
You have the right to request access to your personal data, correct inaccurate profile or delivery details, withdraw optional marketing SMS consent at any time, or request deletion of your account data (subject to statutory invoice retention periods required under Sri Lankan law). Submit any request via [email protected] or our Contact Merchant Desk.