PRIVACY POLICY

Last Updated: July 2026

DRIP.LK (PVT) LTD respects the privacy of our customers and is committed to handling personal information responsibly.

Sri Lanka's Data Protection Authority currently lists the Personal Data Protection Act No. 9 of 2022 and the Personal Data Protection (Amendment) Act No. 22 of 2025 as the applicable statutory framework.

Information We May Collect

Depending on how you interact with DRIP.LK, we may collect:

• Name
• Telephone number
• Email address
• Service address or location
• Vehicle information
• Booking and service history
• Customer communications
• Transaction and payment-related information
• Vehicle photographs associated with a service or concern
• Website and booking information where applicable

DRIP.LK does not need to store complete card details where payments are processed directly by an independent payment provider.

How We Use Information

We may use personal information to:

• Process and manage bookings
• Provide mobile car care services
• Contact customers regarding appointments
• Confirm service locations
• Manage payments and transactions
• Maintain appropriate service records
• Review customer concerns
• Improve our services and operations
• Protect our legitimate business and operational interests
• Meet applicable legal and regulatory obligations

Service Location Information

As DRIP.LK provides mobile services, customers may provide a home, office or other service location.

Location information will be used for legitimate booking, travel and service-related purposes.

Vehicle Photographs

DRIP.LK may take reasonable vehicle photographs for condition documentation, quality control, service records or complaint review.

We will not intentionally use clearly identifiable personal information for public marketing without an appropriate basis or permission where required.

Sharing Information

DRIP.LK may share necessary information with service providers supporting our operations, including payment, booking, website, communication and technology providers.

Only information reasonably necessary for the relevant purpose should be shared.

DRIP.LK does not sell customer personal information.

Data Retention

Personal information will be retained only for as long as reasonably necessary for the purposes for which it was collected, legitimate business record requirements, dispute handling and applicable legal obligations.

Data Security

DRIP.LK will take reasonable organisational and technical measures to protect personal information under our control.

However, no electronic storage or communication system can be guaranteed to be completely secure.

Customer Requests

Customers may contact DRIP.LK with questions or applicable requests concerning their personal information.

Requests will be considered in accordance with applicable Sri Lankan data protection requirements.

Changes to This Policy

DRIP.LK may update this Privacy Policy where our services, operational practices or applicable requirements change.

The latest version will be published on our website with an updated revision date.

For official information on Sri Lanka's data-protection framework, see the Data Protection Authority of Sri Lanka