Last updated: February 2026

Privacy Policy

This policy describes how Salesrep collects, uses, and protects your information when you use our platform.

1. Information We Collect

We collect information you provide directly when you register, place offers, or contact us. This includes your name, business name, email address, phone number, registration numbers, and uploaded documents (certificates and drug licenses). We also automatically collect usage data such as pages visited, browser type, device information, and IP addresses.

2. How We Use Your Information

We use collected information to: verify your identity and business details, process your account registration and approval, facilitate offer placement and listing management, send platform notifications and administrative communications, maintain platform security and prevent fraud, comply with legal obligations, and improve our services based on usage patterns.

3. Information Sharing

We do not sell your personal information to third parties. We may share limited information with: other platform users only as required for transactions (e.g., supplier company names visible to buyers), administrative staff for account verification, legal authorities when required by law, and service providers who help us operate the platform under strict confidentiality agreements.

4. Document Storage

Uploaded documents (certificates, drug licenses) are stored securely on our servers with restricted access. Only authorised administrators can view these documents for the purpose of account verification. Documents are retained for the duration of your account and up to 2 years after account closure.

5. Offer and Transaction Data

Offer details including discount values and quantities are visible to the relevant supplier. Admin-approved offers may be visible to other buyers in aggregate form (offer count only, not individual offer details) depending on platform settings. Your identity is not revealed to other buyers.

6. Data Retention

We retain your account information for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., transaction records).

7. Security

We implement industry-standard security measures including bcrypt password hashing, CSRF token protection, prepared SQL statements to prevent injection, HTTPS encryption, and access control for sensitive files. However, no system is completely secure, and we cannot guarantee absolute security.

8. Cookies

We use session cookies to maintain your login state and CSRF tokens for security. We do not use tracking cookies or third-party advertising cookies. You may disable cookies in your browser, but this will prevent you from logging in.

9. Your Rights

You have the right to: access and review your personal data, request corrections to inaccurate information, request account deletion, obtain a copy of your data, and withdraw consent where processing is based on consent. Contact us at the address below to exercise these rights.

10. Third-Party Services

Our platform may link to third-party websites. We are not responsible for the privacy practices of those sites. This policy applies only to the Salesrep platform.

11. Children's Privacy

Salesrep is a business-to-business platform and is not intended for use by persons under 18. We do not knowingly collect personal information from minors.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes via email or platform notification. Continued use after changes constitutes acceptance of the updated policy.

Contact Us: If you have questions about this Privacy Policy or your data, contact us at salesrep.lk/contact or email privacy@salesrep.lk.