Privacy Policy

Effective date: 9 June 2026 · Last updated: 9 June 2026

IT Gallery Computers Pvt Ltd ("IT Gallery", "we", "us" or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect when you visit itgallery.lk, place an order, contact our support team, or otherwise interact with our website and services (the "Services"), how we use it, and the rights you have over it.

This policy is prepared having regard to the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (the "PDPA"), which is administered by the Data Protection Authority of Sri Lanka. By using our Services, you agree to the practices described here.

1. Who we are

IT Gallery Computers Pvt Ltd is the data controller responsible for your personal data. You can reach us at:

• Email: info@itgallery.lk
• Head Office: No. 08B St. Xavier Road, Ja-Ela, Sri Lanka
• Hotline: 0750 900 900

2. Information we collect

We collect information in three ways:

Information you provide

• Account and contact details — name, email address, phone number, and delivery and billing address.
• Order information — the products you buy and your order history. Payments are processed securely by our payment service providers; we do not store full card details on our servers.
• Support communications — the contents of emails, calls, chats, and any information you share when you contact us.
• Marketing preferences — your choices about receiving promotional messages.

Information collected automatically

• Device and connection data — IP address, browser type, device type, and operating system.
• Usage data — pages viewed, items browsed, links clicked, and timestamps.
• Cookies and similar technologies — see Section 6.

Information from third parties

• Our e-commerce platform, payment providers, delivery partners, and analytics providers who help us run the store.

3. How we use your information

• To create and manage your account and process and deliver your orders.
• To provide customer support and respond to your enquiries.
• To send order updates, service notices, and security alerts.
• To send marketing messages where you have agreed to receive them; you can opt out at any time.
• To operate, secure, and improve our website and services.
• To detect and prevent fraud and misuse.
• To comply with our legal and regulatory obligations.

4. Legal bases for processing

In line with the PDPA, we process personal data only where we have a lawful basis to do so, including:

• Performance of a contract — to fulfil orders and provide the Services you request.
• Consent — for example, for marketing communications or non-essential cookies, which you may withdraw at any time.
• Legitimate interests — to run, protect, and improve our business, where these are not overridden by your rights.
• Legal obligation — to meet accounting, tax, and other legal requirements.

5. How we share your information

We do not sell your personal data. We share it only where necessary, with:

• Service providers — our e-commerce platform, payment processors, delivery and courier partners, and analytics and IT providers, who process data on our behalf under appropriate safeguards.
• Legal and safety — authorities or third parties where required by law or to protect the rights, property, or safety of IT Gallery, our customers, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets.
• With your consent — where you ask us to share your information.

6. Cookies and tracking technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, measure traffic, and improve your experience. These include essential cookies (needed for the site to work), analytics cookies, and functional cookies. You can manage cookies through your browser settings; blocking some cookies may affect how the site works.

7. Data retention

We keep personal data only for as long as necessary for the purposes set out in this policy, including to provide the Services, comply with legal and accounting obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.

8. Data security

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls, and regular reviews. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal data, we will notify you and the relevant authorities as required by law.

9. Your rights

Subject to the PDPA, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your personal data in certain circumstances ("right to be forgotten").
• Object to or restrict certain processing, including direct marketing.
• Withdraw consent at any time, without affecting earlier processing.
• Request a review of decisions based solely on automated processing.

To exercise any of these rights, email us at info@itgallery.lk. We will respond within the time required by law. You also have the right to complain to the Data Protection Authority of Sri Lanka.

10. International data transfers

Some of our service providers may process data outside Sri Lanka. Where personal data is transferred across borders, we take steps to ensure it remains protected in accordance with the PDPA.

11. Children's privacy

Our Services are not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Services after an update means you accept the revised policy.

13. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

• IT Gallery Computers Pvt Ltd
• Email: info@itgallery.lk
• Head Office: No. 08B St. Xavier Road, Ja-Ela, Sri Lanka
• Hotline: 0750 900 900