Privacy Policy

Effective Date: February 11, 2026 · Last Updated: February 11, 2026

1. Introduction

Idakadam ("we", "our", "us") is a Sri Lanka-based real estate transaction platform committed to protecting your personal data in compliance with:

  • Sri Lanka Personal Data Protection Act No. 9 of 2022
  • Applicable international data protection standards
  • Industry best practices for digital platforms

This Privacy Policy applies to all users, including Sri Lankan residents and Sri Lankan expatriates accessing our services globally.

2. Information We Collect

We collect information necessary to operate a secure, trust-first property marketplace.

2.1 Personal Information

  • Full name
  • National ID / Passport details
  • Contact details (email, phone)
  • Residential address
  • Date of birth
  • KYC verification documents

2.2 Account Information

  • Login credentials
  • Account tier status
  • Credit purchase records
  • Booking history

2.3 Transaction Data

  • Property viewing requests
  • Messaging records
  • Payment confirmations
  • Escrow-related data (if applicable)

2.4 Technical Information

  • IP address
  • Device type
  • Browser type
  • Location data (approximate)
  • Cookies and tracking data

3. Purpose of Data Collection

We process your data for:

  • Identity verification (KYC/KYB compliance)
  • Fraud prevention and risk monitoring
  • Enabling secure property transactions
  • Managing credits and bookings
  • Improving platform functionality
  • Legal and regulatory compliance

4. Data Sharing

We do NOT sell personal data.

Data may be shared with:

  • Verified property agents or sellers (when booking/viewing initiated)
  • Payment processors
  • Identity verification providers
  • Legal or regulatory authorities (if required by law)
  • Law enforcement authorities in cases of fraud or misuse

5. Cross-Border Data Transfers

For Sri Lankan expatriates, your data may be processed on secure servers located outside Sri Lanka where necessary. We ensure adequate data protection safeguards are implemented.

6. Data Security

We implement:

  • Encrypted data transmission (SSL)
  • Secure database architecture
  • Access controls
  • Monitoring for unauthorized access
  • Regular security audits

7. Data Retention

We retain personal data:

  • For as long as your account is active
  • As required for legal compliance
  • For fraud prevention and dispute resolution

You may request account closure, subject to regulatory retention requirements.

8. Your Rights

Under Sri Lanka's Personal Data Protection Act, you may:

  • Request access to your data
  • Request correction of inaccurate data
  • Request data deletion (subject to legal requirements)
  • Withdraw consent (where applicable)

Requests can be submitted via official contact channels listed on the platform.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age.

10. Changes to This Policy

We may update this policy periodically. Continued use of the platform constitutes acceptance of any revisions.