Privacy Policy

We collect information you provide directly to us when you: • Create an account (name, email, phone number, location) • Post classifieds, products, or service listings • Make purchases or transactions • Communicate with other users or our support team • Participate in surveys, promotions, or contests • Subscribe to our newsletters or notifications We also automatically collect certain information when you use OKDOI: • Device information (browser type, operating system, device ID) • Log data (IP address, access times, pages viewed) • Location data (with your consent) • Cookies and similar tracking technologies

We use the information we collect to: • Provide, maintain, and improve our marketplace services • Process transactions and send related notifications • Verify user identities and prevent fraud • Connect buyers with sellers and service providers • Send promotional communications (with your consent) • Personalize your experience and show relevant listings • Respond to your comments, questions, and support requests • Monitor and analyze trends, usage, and activities • Detect, investigate, and prevent security incidents • Comply with legal obligations in Sri Lanka

We may share your information in the following circumstances: • With other users: Your public profile, listings, and reviews are visible to other OKDOI users • With service providers: Third parties who perform services on our behalf (payment processing, hosting, analytics) • For legal reasons: When required by law, court order, or government request • Business transfers: In connection with any merger, acquisition, or sale of assets • With your consent: When you explicitly authorize us to share your information We never sell your personal information to third parties for their marketing purposes.

We implement industry-standard security measures to protect your information: • SSL/TLS encryption for all data transmission • Secure password hashing and storage • Regular security audits and vulnerability assessments • Access controls limiting employee access to personal data • Two-factor authentication options for account security • Compliance with Payment Card Industry (PCI) standards While we strive to protect your information, no method of transmission over the Internet is 100% secure. We encourage you to use strong passwords and protect your account credentials.

Under Sri Lankan data protection laws and international best practices, you have the right to: • Access: Request a copy of your personal data • Correction: Update or correct inaccurate information • Deletion: Request deletion of your account and data • Portability: Receive your data in a structured format • Opt-out: Unsubscribe from marketing communications • Withdraw consent: Revoke previously given permissions To exercise these rights, visit your Account Settings or contact our Privacy Team at privacy@okdoi.com.

We may send you: • Transactional emails: Order confirmations, security alerts, account updates • Marketing emails: Promotions, new features, newsletters (with your consent) • Push notifications: Messages, listing updates, price alerts (if enabled) • SMS notifications: Order updates, verification codes (for users in Sri Lanka) You can manage your communication preferences in your Account Settings. Note that you cannot opt out of essential service communications.

We retain your information for as long as: • Your account remains active • Needed to provide our services • Required by law (typically 7 years for financial records in Sri Lanka) • Necessary for legitimate business purposes After account deletion, we may retain certain information in anonymized form for analytics purposes. Backup copies may exist for up to 90 days after deletion.

If you have questions about this Privacy Policy or our data practices, please contact us: OKDOI (Pvt) Ltd Email: privacy@okdoi.com Phone: +94 11 XXX XXXX Address: Colombo, Sri Lanka We aim to respond to all privacy inquiries within 30 days.