This policy explains what personal data A2Z Dropshipping (“A2Z”, “we”, “us”) collects when you visit this site and register as a seller, why we need it, who we share it with, and your rights under Sri Lanka's Personal Data Protection Act, No. 9 of 2022.
1. What we collect
When you register as a seller we collect:
- Identity: your first and last name, and photos of your National Identity Card (front and back) or driving licence (front).
- Contact: your mobile number, your postal address and, if you choose to give it, your email address.
- Business: your business or page name, if you give one.
- Verification: a record that your mobile number was verified with a one-time code, and how many codes were requested.
- Technical: your IP address, browser type and the time of your visit, which our server records automatically.
Once your account is open, we also hold the orders you place, your commission and payment history, and the bank details you add for payouts.
2. Why we use it
- To check your identity and decide whether to approve your application. This protects our sellers, customers and business from fraud.
- To create and run your seller account, process your orders and pay your commission.
- To contact you by SMS, phone or email about your application, your account and your orders.
- To keep the site secure, for example by limiting how many verification codes one number can request.
- To meet our legal, tax and accounting obligations.
We rely on your consent when you submit the form, on the need to carry out our agreement with you, on our legal obligations, and on our legitimate interest in preventing fraud. We do not sell your personal data and we do not use it for third-party advertising.
4. Where it is kept, and for how long
Your application and ID document photos are sent straight to our seller account system and stored there, in a location that cannot be reached from the web. This registration site does not keep a copy of your documents once they have been passed on.
We keep your data while your account is open. After it closes, we keep it only as long as we need to settle remaining orders, payments or disputes and to meet legal record-keeping requirements. If your application is rejected, we keep it only as long as we need it to stop the same details being used to apply again fraudulently.
5. Security
Data you send through this site travels over an encrypted connection. Only authorised staff who review applications can see applications and ID documents. No system is completely secure, but we take reasonable technical and organisational steps to protect your data from loss, misuse and unauthorised access.
6. Your rights
Under the Personal Data Protection Act you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, where we no longer have a legal reason to keep it;
- stop using your data for a particular purpose, or withdraw a consent you gave.
Contact us using the details below. We may need to confirm your identity before acting on a request. If you are not satisfied with our answer, you can complain to the Data Protection Authority of Sri Lanka.
8. Your customers' data
When you place an order, you give us your customer's name, address and phone number. We use them only to deliver the order and handle any return. You must have your customer's permission to share these details with us, and you must not use them for anything other than their order.
9. Changes and contact
We may update this policy. The date at the top shows the latest version, and we will tell registered sellers about important changes.
To ask about this policy or your data, call 076 726 7087, email hello@a2zdropshipping.lk, or write to us at Colombo, Sri Lanka. See also our Terms of Service.