Last updated on: 15.30 hrs at 26th December 2019 Sri Lanka Telecom PLC (herein after referred to as SLT) has created this privacy policy in order to demonstrate its firm commitment to privacy. Personal Information Collected SLT collect, store and process user data only for the purpose of processing services related to the app and any possible later claims, and to provide users with SLT services. SLT may collect personal information including, but not limited to, title, name, gender, date of birth, email address, postal address, SLT account number, telephone number, mobile number, IP address, fax number, payment details, payment card details or bank account details of the user. SLT will use the information provided by users to process orders and to provide with the services and information offered through this App. Further, SLT will use the information provided by users to verify and carry out financial transactions in relation to payments; audit the downloading of data from the App; improve the layout and/or content of the pages of the App and customize or to personalize them for users; identify visitors on the website; carry out research on users' demographics; send useful information, provided that users have marked “I have read and agree to the privacy policy” in this App to being contacted for these purposes. Subject to obtaining user consent, SLT may contact users by email, SMS or any other consented means with details of other products and services. If user does not prefer to receive any marketing communications from SLT, they can opt out at any time by clicking unsubscribe link in the emails, through the self-care portal or by directly emailing to 1212@slt.com.lk. Information Shared with third parties In general, the third-party providers used by SLT will only collect, use and disclose user information to the extent necessary to allow third parties to perform the services they provide to SLT. However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the purchase-related transactions. Further, subjected to a non-disclosure agreement, SLT may pass user’s name, telephone number and address to third parties in order to assist with delivering products to users and to help SLT to collect payments from users. (eg. courier or supplier). If SLT store is acquired or merged with another company, information of users may be transferred to the new owners so that SLT may continue to sell products to users. Other than as set out in this Privacy Policy, SLT shall NOT sell or disclose personal data to third parties without obtaining user’s prior consent unless this is necessary for the purposes set out in this Privacy Policy or unless it is required to do so by law. Cookies Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to browser from the App/web site and stored on user device’s hard drive when using this service. SLT and selected third parties use "cookies" to provide users with a better, faster and safer user experience or to show personalized advertising. Cookies and similar technologies have different functions: They may be technically necessary for the provision of the service They help to optimize our Services (e.g. monitoring of error messages and loading times) They help us improve user experience (e.g. save font size and form data entered) They allow us to show users more relevant advertisements Where possible, SLT take appropriate security measures to prevent unauthorized access to cookies and similar technologies. A unique ID ensures that only SLT and/or selected third parties have access to cookie data. Retention of data User’s personal data will be stored by SLT and other service providers as long as SLT has an ongoing legitimate business need to do so, for example to provide services or products to users, or as required or permitted by applicable laws. Subsequently, SLT will delete personal data in accordance with the data retention and deletion policy or take steps to properly render the data anonymous. Security of data SLT is committed to protect user’s personal data through technical and organizational security measures to minimize risks associated with data loss, misuse, unauthorized access, unauthorized disclosure, unauthorized destruction and alteration. Also, users are responsible for protecting passwords and their devices against unauthorized access. If a user attempts to change the password, User ID, update any other account information or attempt other account activity beyond those listed above, user may be required to enter their current password. Users can typically end the signed in session by either signing out and/or clearing the cookies. If a user has certain browser privacy settings enabled, simply closing the browser may also end signed in session. When using a public or shared computer, user should sign out and/or clear cookies to protect their account and personal data. Consent of the user When a user provides SLT with personal information to complete a transaction, verify the credit card, place an order, arrange for a delivery or return a purchase, it implies that user consent is only to using it for that specific purpose only. If SLT requests for a user’s personal information for a secondary reason, such as marketing, SLT will request directly for user’s expressed consent with an opportunity for them to decline. If user provides personal data relating to another person, they must obtain consent of the relevant person or the disclosure of the data to SLT must be otherwise legally permissible. User must inform the relevant person of how SLT process personal data in accordance with this User Privacy Policy. Children's Privacy This service is not intended for the use by children. SLT does not knowingly collect personal data from users who are considered children. According to our policy, children are not permitted to use this service. User Rights If a user is concerned about their data, they have the right to request access to their personal data which SLT may hold or process about user. User has the right to require SLT to correct any inaccuracies in the provided data. At any stage, user can withdraw their consent to the processing of personal data by SLT that does not required to provide the intended service at any time. As a result, SLT may no longer process user’s personal data based on this consent in the future. Users are free to disable the use of cookies, if this is supported by the device. Users may refuse the use of cookies by selecting the appropriate settings on their browser, however please note that if a user does this, they may not be able to use the full functionality of this website. In addition, users can decide whether SLT may use cookies to show personalized advertisements. If a user decides not to have his/ her personal data processed for advertising purposes, this does not mean that SLT will not show advertisements. It simply means that these advertisements will not be personalized using cookies. Information Correction or Removal If a user wishes to correct, update or remove any information that may be in SLT’s records, they can do so by sending an e-mail with the details of the request to 1212@slt.com.lk or through the self-care portal by on her/his own. If a user wishes to contact us further, they can find complete contact information on the www.slt.lk web page Exceptions to this Policy The country’s law on data and other related terms will be superseded the privacy policy. The App may contain advertising of third parties and links to other sites or frames of other sites. Once user leaves SLT store's website or are redirected to a third-party website or application, they are no longer governed by this Privacy Policy and SLT is not responsible for the privacy practices or content of those third parties or other sites and SLT encourage users to read their privacy policies. Changes to this Privacy Policy Sri Lanka Telecom PLC may update this Privacy Policy from time to time in response to changes in legal, technical or business environment. Changes to this policy will take effect immediately upon their posting on the platform. User can view when this Privacy Notice was last updated by checking the “last updated date and time” displayed at the top of this Privacy Policy