Effective Date: January 1, 2025
Last Updated: January 1, 2025
1. Introduction
MCTech Computers ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or purchase our products and services. This policy complies with the Personal Data Protection Act No. 9 of 2022 of Sri Lanka and other applicable laws.
2. Information We Collect
We collect the following types of personal information:
- Personal Identification Information: Name, email address, phone number, postal address, national identity card number (when required for warranty registration)
- Financial Information: Payment details, billing information (processed securely through authorized payment gateways)
- Purchase Information: Products purchased, warranty information, service history
- Website Usage Data: IP address, browser type, pages visited, time spent on site, cookies
- Communication Records: Customer service interactions, support tickets, feedback
3. How We Collect Information
We collect information through:
- Direct interactions when you create an account, make purchases, or contact us
- Automated technologies including cookies, web beacons, and similar technologies
- Third parties such as payment processors and delivery services
- Public sources when necessary for business verification
4. Legal Basis for Processing
We process your personal data based on:
- Contract Performance: To fulfill orders and provide services
- Legal Compliance: To comply with tax, accounting, and regulatory requirements
- Legitimate Interest: For business operations, fraud prevention, and marketing
- Consent: For marketing communications and non-essential cookies
5. How We Use Your Information
We use your personal information to:
- Process and fulfill your orders
- Provide customer support and technical assistance
- Manage warranties and repairs
- Send order confirmations and shipping notifications
- Improve our products and services
- Prevent fraud and ensure security
- Comply with legal obligations
- Send promotional materials (with your consent)
6. Information Sharing and Disclosure
We may share your information with:
- Service Providers: Payment processors, shipping companies, IT service providers
- Business Partners: Manufacturers for warranty claims and technical support
- Legal Authorities: When required by law or to protect our rights
- Professional Advisors: Lawyers, auditors, and consultants
We do not sell your personal information to third parties.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- SSL encryption for data transmission
- Secure data storage with access controls
- Regular security assessments and updates
- Employee training on data protection
- Incident response procedures
8. Your Rights
Under Sri Lankan law, you have the right to:
- Access: Request information about your personal data we hold
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data (subject to legal requirements)
- Portability: Receive your data in a structured, machine-readable format
- Restriction: Limit the processing of your personal data
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent for marketing communications
9. Data Retention
We retain your personal data for:
- Account information: Until account closure plus 7 years
- Transaction records: 7 years from transaction date
- Warranty information: Duration of warranty plus 2 years
- Marketing data: Until consent is withdrawn
- Website analytics: 2 years
10. Cookies and Tracking Technologies
We use cookies to enhance your browsing experience. You can control cookie settings through your browser. Essential cookies cannot be disabled as they are necessary for website functionality.
11. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information.
12. Children's Privacy
Our services are not intended for children under 16. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.
13. International Data Transfers
If we transfer your data outside Sri Lanka, we ensure appropriate safeguards are in place to protect your information in accordance with applicable laws.
14. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or website notice. The updated policy will be effective from the date specified.
15. Data Protection Officer
We have appointed a Data Protection Officer (DPO) to oversee compliance with data protection laws. You can contact our DPO for privacy-related inquiries.
17. Complaints
If you believe your privacy rights have been violated, you can file a complaint with:
- Our Data Protection Officer at [email protected]
- The Data Protection Authority of Sri Lanka (once established)
- Consumer Affairs Authority of Sri Lanka
