1. Introduction

boardima.com ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. This policy is aligned with the Personal Data Protection Act (PDPA) of Sri Lanka.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

• Account Information: Name, email address, password (hashed)
• Property Listings: Property details, contact information (phone, email), location data
• Verification Documents: NIC images (front and back) for landlord verification (stored securely, not publicly accessible)
• Communication Data: Messages, inquiries, and other communications

2.2 Automatically Collected Information

We automatically collect certain information when you use our Service:

• IP address and location data
• Browser type and version
• Device information
• Usage data and interaction patterns
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our services
• User Accounts: To create and manage user accounts, verify identities
• Property Listings: To display property listings and facilitate connections between landlords and renters
• Communication: To send verification emails, notifications, and respond to inquiries
• Safety and Moderation: To detect and prevent fraud, abuse, and illegal activities
• Analytics: To analyze usage patterns and improve user experience
• Legal Compliance: To comply with applicable laws and regulations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Public Listings: Property listings and contact information (when revealed) are visible to other users
• Service Providers: With third-party service providers who assist in operating our Service (e.g., email services, hosting)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with any merger, sale, or transfer of assets

NIC Verification Documents: NIC images are stored securely and are never publicly accessible. Only authorized administrators can access these documents for verification purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of sensitive data in transit and at rest
• Secure password hashing (bcrypt/Argon2)
• Access controls and authentication
• Regular security assessments and updates
• Secure storage of verification documents in private directories

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law:

• Account Data: Retained while your account is active and for a reasonable period after account deletion
• Property Listings: Retained while the listing is active and for a period after deletion for record-keeping
• Verification Documents: Retained for verification purposes and deleted upon request if verification is rejected or withdrawn
• Logs and Analytics: Retained for a limited period for security and analytics purposes

7. Your Rights (PDPA Compliance)

Under the Personal Data Protection Act of Sri Lanka, you have the following rights:

• Right of Access: Request access to your personal data
• Right of Correction: Request correction of inaccurate or incomplete data
• Right of Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Object: Object to processing of your personal data
• Right to Data Portability: Request a copy of your data in a structured format
• Right to Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us through our contact page or visit your profile settings.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for the Service to function (e.g., session management)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how users interact with our Service

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Service.

9. Third-Party Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than Sri Lanka. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

• Email: Contact Form
• Website: Contact Page