Privacy Policy

Introduction

Ran Lanka Gem and Jewellery (Pvt) Ltd ("RanLanka", "we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (ranlankagold.com) or use our gold buying and selling services at any of our branches.

By using our website or services, you agree to the practices described in this Privacy Policy. Please read it carefully.

Information We Collect

We may collect the following categories of personal information:

• Identity Information: Full name, National Identity Card (NIC) number, passport number, or other government-issued identification as required by law.
• Contact Information: Phone number, email address, and residential or business address.
• Transaction Information: Details of gold items sold or purchased, weights, purity levels, transaction values, and payment details.
• Communication Data: Messages you send us via contact forms, email, WhatsApp, or telephone calls.
• Technical Data: IP address, browser type, device information, pages visited, and time spent on our website (collected via cookies and similar technologies).
• CCTV Footage: Images or video captured for security purposes at our branch premises.

How We Use Your Information

We use the information we collect for the following purposes:

• To process and complete gold buying and selling transactions.
• To verify your identity and comply with anti-money laundering (AML) and Know Your Customer (KYC) regulations under Sri Lankan law.
• To communicate with you about your transactions, inquiries, or service updates.
• To improve our website, services, and customer experience.
• To send promotional offers or updates (only where you have consented).
• To comply with legal obligations, including reporting to regulatory authorities where required.
• To detect and prevent fraud, security incidents, and unlawful activity.

Sharing Your Information

We do not sell, rent, or trade your personal information. We may share it only in the following limited circumstances:

• Regulatory Authorities: We are legally required to report certain transactions to the Financial Intelligence Unit (FIU) of Sri Lanka and other government bodies under applicable laws.
• Service Providers: Trusted third-party vendors who assist us in operating our website, processing payments, or providing IT support, bound by strict confidentiality obligations.
• Legal Compliance: When required by a court order, law enforcement request, or other legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include:

• Secure, encrypted connections (HTTPS) on our website.
• Restricted access to personal data — only authorised personnel can access transaction records.
• Physical security measures at all branch locations, including CCTV surveillance.
• Regular review of our data handling practices.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, comply with legal and regulatory requirements, resolve disputes, and enforce our agreements. Transaction records are typically retained for a minimum of seven (7) years as required by financial regulations in Sri Lanka.

Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and understand user behaviour. You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of certain parts of our website.

Types of cookies we use:

• Essential Cookies: Necessary for the website to function properly.
• Analytics Cookies: Help us understand how visitors interact with our website.
• Preference Cookies: Remember your settings and preferences.

Your Rights

Subject to applicable Sri Lankan law, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time.

To exercise any of these rights, please contact us using the details provided below.

Third-Party Links

Our website may contain links to third-party websites such as Facebook, WhatsApp, and Google Maps. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any personal information.

Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with a revised "Last updated" date. Your continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.