Last updated: 23 October 2026
Aduwata Gewal Idam is a Sri Lankan property advertising portal operated by EOFFICE INTERNATIONAL (PRIVATE) LIMITED, company registration number PV00267327. This policy explains how we handle personal information when you browse the website, create an account, advertise a property, contact an advertiser, purchase advertising services or contact our support team.
Business location: Piliyandala, Colombo, Sri Lanka. We operate entirely online. Privacy and support: [email protected]. Telephone/WhatsApp: +94 74 296 3837.
We are responsible for the personal information we process to operate this portal. Property owners, agents and other advertisers are responsible for their own use of information they receive from you. Your rights under applicable data-protection law take priority over this policy.
1. Information covered by this policy
Depending on the service you use, information handled by us or our service providers may include:
- Account and contact information: your name, username, email address, telephone number, account credentials, account role and account preferences.
- Property and advertiser information: property descriptions, prices, photographs, floor plans, locations, map coordinates, advertiser details and information you choose to publish in your profile or advertisement. Property information can be personal information when it identifies a person or their home.
- Enquiries and support: messages, contact details, property references, correspondence and information provided to resolve a complaint or support request.
- Order and payment records: the package or promotion purchased, billing details, price, payment reference, transaction status, refund information and relevant payment-provider information.
- Technical and usage information: IP-related information, browser/device information, access times, pages viewed, interactions, cookie identifiers and security or diagnostic records, where collected by the website or enabled services.
- Verification information: evidence we reasonably request to investigate a listing, confirm authority or address suspected fraud. We explain the request and intended use when asking for this evidence.
We receive information directly from you, from an advertiser acting with appropriate authority, from interactions with the website and, where relevant, from payment or other service providers. Where information comes from someone else, we provide any additional notice required by applicable law, subject to lawful exceptions. Please provide accurate information and keep material details up to date.
2. Why we use information
| Purpose | Basis where required by applicable data-protection law |
|---|---|
| Create and manage accounts, publish requested advertisements, deliver purchases and respond to enquiries | Taking steps at your request or performing our service agreement |
| Prevent fraud, investigate misuse, maintain security and resolve disputes | Legitimate interests assessed against individuals' rights, or legal obligations where applicable |
| Keep accounting, transaction and compliance records and respond to lawful requests | Applicable legal obligations |
| Improve the website and understand service performance | Legitimate interests where appropriate; consent where required for the relevant technology or processing |
| Send optional promotional messages or use technologies requiring permission | Your consent where required, subject to your choices and withdrawal rights |
We use information only for a specified, lawful purpose or a compatible purpose permitted by law. If information needed to create an account, publish an advertisement or process a purchase is not supplied, we may be unable to provide that particular service. Optional marketing permission is not a condition of purchasing advertising.
3. Public advertisements, photographs and location information
Information you submit for publication may be visible to any visitor, including search engines and people outside Sri Lanka. This can include the name and contact details selected for an advertisement, photographs, property descriptions and the displayed location. Check the publication fields and preview carefully before submitting.
Include another person's contact details, photographs or property information only when you have authority and any legally required permission. Avoid uploading identity documents, deeds, bank records, faces of unrelated people or other unnecessary private information into public listing fields. Photographs and their embedded metadata can reveal a precise location or other private details; check them before upload. Where a location option permits an approximate location, choose the level of precision appropriate to your advertisement and safety needs.
You can request correction or removal through the available account tools or our support address. Removing a listing from our public website does not automatically erase copies held by search engines, recipients or independent third parties. We will address removal requests within our control and applicable legal obligations; we do not promise complete removal from the Internet.
4. Enquiries and communication with advertisers
When you send an enquiry or request contact about a property, the information needed to deliver that request, including your name, selected contact details and message, may be sent to the relevant advertiser and handled by our support providers. Contacting an advertiser is not permission for unrelated parties to send you marketing.
An advertiser receiving your information must use it lawfully for the enquiry and related dealings, protect it appropriately and respect your communication choices. Ask the advertiser about its own privacy practices where necessary. Report suspected misuse to us. We remain responsible for our own handling of your information.
If you choose telephone, email, WhatsApp or another external communication service, that service and the recipient may also process information under their own terms and privacy policies.
5. Payments and refunds
The payment provider identified at checkout processes the payment. Where PayHere is offered, information needed for the transaction, such as customer/billing details, order reference, amount and currency, is sent to PayHere. Its handling of information is explained in PayHere's Privacy Policy.
We receive transaction information needed to confirm orders, activate benefits, reconcile payments and handle support, refunds and disputes. Depending on the payment method and integration, this may include a payment identifier, status, cardholder name or masked payment details. Enter payment credentials only through the payment provider's authorised checkout. Our support team does not need your full card number, CVV, password, PIN or OTP to handle an enquiry or refund.
If an agreed refund requires verified bank details, we request only information necessary to return funds and handle it as restricted financial information. Our Refund & Cancellation Policy explains the service rules.
6. Other recipients and service providers
Information may be disclosed, where necessary and lawful, to:
- The advertiser you choose to contact, or the public where you deliberately publish information.
- Providers supporting website hosting, email delivery, security, storage/backups, customer support and payment processing.
- Analytics, advertising, map, embedded-content or social-media providers where those services are enabled, subject to relevant choices and legal requirements.
- Our professional advisers, auditors, regulators, courts or law-enforcement bodies where a lawful and proportionate purpose requires disclosure.
- A prospective or actual successor to the business where a lawful transfer is necessary, with appropriate confidentiality and notification arrangements.
Where a provider handles personal information on our behalf, we are responsible for arranging appropriate restrictions on its access, use and security. Some providers also act independently for their own payment, security or advertising purposes; their notices explain those activities. You may contact us for information about material providers involved in your use of the service.
We do not sell or rent customer contact lists for unrelated direct marketing. Advertising-related data sharing is explained below and is not covered by a promise that all third-party information is anonymous.
7. Cookies, analytics, advertising and embedded content
Cookies and similar technologies can support login, security, preferences, analytics and advertising. Essential technologies help provide requested functions. Analytics technologies help measure visits and service performance; advertising technologies help deliver and measure ads. Maps, videos and other embedded content may also involve external providers. Non-essential technologies are subject to consent or other controls where required by applicable law.
Where Google advertising, including AdSense, is enabled, third-party vendors including Google may place and read cookies, use web beacons, and process IP addresses or other identifiers as a result of serving advertisements. Google and its partners may use advertising cookies to serve personalised ads based on your previous visits to this website or other websites, subject to applicable requirements and your choices. Learn more through Google's Privacy Policy and how Google uses information from partner sites.
You can manage Google's personalised advertising through Google's advertising controls and participating vendors' advertising-cookie choices through AboutAds choices. Additional vendor information and choices may be presented in the relevant consent notice or by the provider. These controls have their own scope and may depend on your browser or device. Choosing non-personalised ads does not necessarily disable all cookies or measurement.
Use the consent or privacy controls presented for the service, where applicable, and your browser settings to manage relevant technologies. Where consent is required, including under applicable Google rules for users in the EEA, the UK and Switzerland, the relevant advertising or storage processing must wait for valid consent and respect withdrawal. Withdrawing consent does not affect processing lawfully carried out before withdrawal. Browser controls alone may not cover every provider or processing activity, and blocking essential technologies may prevent requested functions from working. Contact us if you need help with a privacy choice or information about enabled services.
8. Marketing and service messages
We send necessary account, security, transaction and service messages to operate the service. Optional newsletters and promotional communications follow applicable consent requirements and your choices. You can withdraw marketing permission using an unsubscribe option or by contacting us. Stopping optional marketing does not stop essential messages about your existing account or orders.
Advertisers must not use enquiries to add people to unrelated marketing lists without a lawful basis and any required permission.
9. Processing outside Sri Lanka
Our providers or authorised support personnel may process information outside Sri Lanka, depending on the services used. Public advertisements can also be viewed internationally. We assess overseas processing under applicable law and use appropriate contractual or other safeguards where required. We do not treat acceptance of website terms as unlimited consent to every overseas transfer.
Contact us for information about relevant processing locations and safeguards. An overseas provider's role, country and safeguards must be considered for the actual processing involved; using an overseas service does not remove our responsibilities.
10. How long information is kept
We retain identifiable information only for as long as necessary for its purpose, applicable legal requirements and justified dispute or security needs. The criteria differ by record:
| Record | Retention approach |
|---|---|
| Account information | While needed for the account and a necessary closure, security or dispute period afterwards |
| Advertisements and associated media | While needed for publication and account management; restricted copies may remain where necessary for complaints, fraud prevention or legal obligations |
| Enquiries and support correspondence | While needed to answer, follow up and resolve the matter and any justified related dispute |
| Verification evidence | Only as long as necessary for the stated check and a justified review, dispute or legal requirement; unnecessary copies should be removed |
| Order, invoice and accounting records | For applicable company, tax and accounting requirements; company accounting records may need the current and last ten completed accounting periods |
| Technical logs, cookies and backups | For their security, operational or recovery purpose and configured expiry, taking sensitivity and risk into account |
Closing an account does not require immediate deletion of records that must lawfully be retained. Such retention does not authorise continued public display or unrelated marketing. Backup copies may remain until normal secure expiry; retained information remains subject to appropriate restrictions. We may keep genuinely anonymised statistics that no longer identify you.
11. Security and incidents
We are responsible for taking technical and organisational measures appropriate to the risks to personal information, including appropriate access restrictions and protection when information is handled by providers. The safeguards required depend on the information and processing involved. No website or transmission method can guarantee absolute security.
Protect your account credentials, use a strong unique password and report suspicious access promptly. If a personal-data incident occurs, we investigate, take appropriate remedial action and notify affected people or authorities when required by applicable law. A payment provider's certification is not a certification of our entire website.
12. Your requests and complaints
Contact [email protected] with the subject Privacy Request to ask about your information, seek access or correction, request deletion or restriction, object to relevant processing, withdraw consent or make a complaint. Where applicable law provides portability or review of an automated decision, you may request that too.
We verify identity proportionately to the request and risk. We do not require unnecessary identity documents for routine requests. We aim to respond without undue delay and within one month, or the shorter period required by applicable law. If a lawful extension is needed, we explain the reason and expected timing. Requests are handled without charge unless applicable law permits a justified fee. If a request cannot be fully met, we explain the applicable reason and available review or complaint options, unless disclosure is prohibited by law.
You may complain to Sri Lanka's Data Protection Authority where its relevant powers and the applicable provisions are in force, or another competent privacy regulator where the law governing your processing permits. Contacting us first can help resolve a concern but does not remove an applicable right to complain directly.
13. Adults, automated tools and international users
Account creation, advertising purchases and enquiry services are intended for people aged 18 or over. We do not knowingly seek children's personal information for these services. A parent, guardian or affected person can contact us about inappropriate collection or publication so we can investigate and take appropriate action.
Service analytics, advertising tools or spam/security screening may use automated processing. An advertising recommendation or featured placement is not a decision about a person's eligibility to buy, rent or obtain credit. If you believe an automated restriction has unfairly affected your account or advertisement, request a review through support.
This portal focuses on Sri Lankan property. Additional privacy rights may apply where another country's law governs a particular processing activity. We assess those rights according to the relevant law and circumstances, rather than treating nationality or an overseas visit alone as determining every legal obligation.
14. Changes and related policies
We publish updates here with a revised date and give additional notice where required for a material change. A new purpose requiring consent will not be authorised merely by updating this page. Changes do not remove existing legal rights.
Read this policy with our Terms and Conditions and Refund & Cancellation Policy. For privacy matters, contact EOFFICE INTERNATIONAL (PRIVATE) LIMITED, PV00267327, using the support email or telephone above.