Privacy Policy

1. Who is responsible for your data

BLOOOW (PVT) LTD (registration 260824388692) operates BLOOOW and is responsible for the personal data described in this policy, subject to applicable Sri Lankan law.

2. Information we collect

Depending on how you use BLOOOW, we may process:

• advertiser and business details such as business name, contact name, phone number, WhatsApp number, email, location and address;
• advertisement content including titles, descriptions, prices, categories, photographs and other submitted media;
• payment information needed to verify a listing fee, including payment references and uploaded bank/payment receipts;
• agent and operational records associated with the submission, review, publication and commission workflow;
• anonymous or pseudonymous marketplace analytics including a first-party visitor identifier stored in your browser, a hashed version of that identifier, a hashed session identifier, pages viewed, search/category interactions, device class, referrer category and listing interactions;
• technical information necessary for security, fraud prevention, diagnostics and operation of the service.

3. How we use information

We use information to receive and review advertisements; verify payments; publish and manage listings; allow customers to contact advertisers; operate BLOOOW Agents and BLOOOW-BOT; prevent abuse; maintain security; resolve support or moderation issues; measure marketplace performance; improve search, categories and user experience; and meet accounting, legal or regulatory obligations.

4. Public listing information

Information intentionally included in a published advertisement may become publicly visible, including business name, listing content, location, images and the contact methods selected for the ad. Do not submit information for publication that you are not authorised or comfortable to make public.

5. Payment receipts

Payment receipts are collected for payment verification and administrative records. They are not intended to be public marketplace content. BLOOOW restricts receipt viewing to authorised staff in the application, and production hosting must also prevent direct public access to the payment-proof media directory.

6. Analytics and first-party identifiers

BLOOOW uses first-party identifiers to understand anonymous marketplace behaviour such as visits, categories, searches, views, likes and contact actions. The raw persistent visitor identifier remains in an HTTP-only browser cookie; the analytics database stores an HMAC hash rather than the raw identifier. The current visitor cookie is configured for up to one year unless removed earlier by the user or browser.

7. Legal basis and fairness

We process personal data only where there is an appropriate purpose and legal basis under applicable Sri Lankan law, which may include steps requested by an advertiser, performance of the advertising service, consent where required, legitimate operational purposes, legal obligations, or protection against fraud and abuse. We aim to collect only information reasonably necessary for those purposes.

8. Sharing

We may make published listing information available to the public. We may also disclose information to authorised staff, service providers that host or support BLOOOW, payment/accounting or professional advisers where necessary, or authorities where disclosure is legally required. We do not sell personal data to advertisers or unrelated data brokers.

9. Retention

We retain information only for as long as reasonably necessary for the purpose for which it was collected, including publication, payment/accounting records, dispute handling, security, abuse prevention and legal obligations. Different records may require different retention periods. BLOOOW should document and implement specific production retention schedules as operations mature.

10. Security

We use technical and organisational safeguards appropriate to the service, including controlled admin access, hashed analytics identifiers, secure production cookies, HTTPS configuration and restricted payment-receipt access. No internet service can guarantee absolute security.

11. Your choices and rights

Where applicable under Sri Lankan data-protection law, you may request access to or correction of personal data and exercise other rights available to you. You may also request updates to inaccurate public listing information. Identity verification may be required before acting on a request.

12. External services

BLOOOW listings may link or hand off to third-party services such as telephone networks or WhatsApp. Their own privacy terms apply once you use those services.

13. Children

BLOOOW is a business advertising and local-discovery service and is not designed to collect advertising submissions from children. If we learn that personal data was submitted unlawfully by or about a child, we may restrict or remove it as appropriate.

14. Changes to this policy

We may update this policy as our services, vendors or legal obligations change. The current effective date will appear at the top of this page.

15. Contact

Privacy questions or requests can be sent to support@blooow.lk.