Privacy Policy

How we collect, use and protect your information.

1. Introduction

PROEDGE ("we", "us", "our") operates the website legitlk.com and related services (the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and the rights you have under applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, and Sri Lanka's Personal Data Protection Act No. 9 of 2022. By using the Service you confirm that you have read and understood this Privacy Policy.

2. Data Controller

PROEDGE is the data controller responsible for your personal data. If you have any questions about this policy or wish to exercise your rights, contact us through the contact page on legitlk.com or via the WhatsApp number listed there.

3. Information We Collect

We collect the following categories of personal data: • Identity & contact data — name, WhatsApp number, email address, and any information you provide when you place an order, contact support, submit a review, or sign up for an account. • Order & transaction data — the products you order, delivery details you share, and communications relating to your order (mainly via WhatsApp). • Account data — if you create an account, your login credentials (stored securely), profile details, wishlist, saved addresses and order history. • User-generated content — reviews, ratings, questions, images you upload, and messages you send us. • Technical data — IP address, device type, browser type and version, operating system, referring URLs, and pages visited. This is collected automatically when you use the Service. • Usage data — how you interact with the Service, such as clicks, searches, wishlist activity and pages viewed. • Cookies & local storage — see our Cookie Policy for details. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

4. How We Use Your Information (Purposes & Legal Bases)

We use your personal data only where we have a lawful basis to do so: • To process and deliver your orders and provide customer support — necessary for the performance of a contract with you. • To create and manage your account — necessary for the performance of a contract. • To respond to enquiries, reviews and questions — legitimate interests (running our business) or consent where required. • To send transactional messages (order confirmations, delivery updates) via WhatsApp/email — performance of a contract. • To send marketing messages, offers and newsletters — only with your consent, which you can withdraw at any time. • To improve, secure and analyse the Service, prevent fraud and misuse — legitimate interests. • To comply with legal, tax and regulatory obligations — legal obligation.

5. Sharing Your Information

We do not sell your personal data. We share personal data only with: • Service providers that help us run the Service — hosting, database and authentication providers, email/WhatsApp messaging providers, analytics providers, payment/manual-checkout facilitators, and customer support tools. These processors act on our instructions and are bound by confidentiality and data protection obligations. • Professional advisers — lawyers, accountants and auditors, where necessary. • Authorities — if required by law, court order, or to protect our rights, users or the public. • Business transfers — if PROEDGE is involved in a merger, acquisition or sale of assets, personal data may be transferred, subject to the same protections described here.

6. International Data Transfers

Some of our providers may be located outside Sri Lanka, the EU or the UK. Where personal data is transferred outside your country of residence, we rely on appropriate safeguards such as European Commission adequacy decisions or Standard Contractual Clauses, and we take reasonable steps to ensure your data receives an equivalent level of protection.

7. Data Retention

We keep personal data only for as long as necessary for the purposes described in this policy: • Order and transaction data — for as long as needed to fulfil the order and then for the period required by tax, accounting and consumer-protection laws (typically up to 7 years). • Account data — for as long as your account is active; we delete or anonymise it after prolonged inactivity or upon request. • Marketing data — until you withdraw consent or object. • Technical logs — for a short period for security and troubleshooting.

8. Data Security

We use technical and organisational measures to protect your personal data, including encryption in transit (HTTPS/TLS), access controls, row-level security on our database, and staff access on a need-to-know basis. No method of transmission or storage is 100% secure, but we work continuously to protect your data and will notify you and the relevant authority of any breach where required by law.

9. Your Rights

Subject to applicable law, you have the right to: • Access — request a copy of the personal data we hold about you. • Rectification — ask us to correct inaccurate or incomplete data. • Erasure — ask us to delete your data ("right to be forgotten"). • Restriction — ask us to limit how we use your data. • Portability — receive your data in a portable, machine-readable format. • Objection — object to processing based on our legitimate interests, including direct marketing. • Withdraw consent — where processing is based on consent, at any time, without affecting prior lawful processing. • Lodge a complaint — with your local data protection authority (e.g. Sri Lanka's Data Protection Authority, or an EU/UK supervisory authority). To exercise any of these rights, contact us through the contact page. We will respond within one month.

10. Cookies & Tracking

We use cookies and similar technologies (including localStorage) to keep you signed in, remember your wishlist and theme preference, and understand how the Service is used. You can control cookies through your browser settings. See our Cookie Policy for full details.

11. Third-Party Links

The Service may link to third-party websites (for example WhatsApp, social media, YouTube). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

12. Automated Decision-Making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date. Material changes will be highlighted or notified to you where required by law. Please review this page periodically.

14. Contact Us

If you have any questions, requests or complaints about this Privacy Policy or how we handle your data, please reach us through the contact page on legitlk.com or via the WhatsApp number listed there.

Last updated: 2026