Privacy Policy

1Introduction

This Privacy Policy explains how IS Properties ("we", "us", "our") collects, uses, stores, and protects the personal information you provide when using our website at https://isproperties.lk/ or engaging with our real estate services in Sri Lanka.

By using our website or submitting your information to us, you consent to the data practices described in this policy. If you do not agree, please do not use our website.

2Information We Collect

We collect information in the following ways:

Information you provide directly:

• Full name, email address, and phone number submitted through contact or inquiry forms
• Property preferences, budget ranges, and location preferences submitted in property request forms
• Messages and communications you send to us
• Any other information you voluntarily provide

Information collected automatically:

• IP address and browser type for security and analytics purposes
• Pages visited and time spent on our website
• Referring website or search terms used to find us
• Device type (desktop, mobile, tablet)

3How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your property inquiries and contact requests
• To match you with suitable property listings based on your preferences
• To send property alerts, updates, and newsletters (with your consent)
• To improve our website content and user experience
• To comply with our legal obligations under Sri Lankan law
• To prevent fraud and ensure the security of our platform
• To analyse website usage patterns and optimise our services

We will not use your information for any purpose not described in this policy without your prior consent.

4Information Sharing

We may share your information in limited circumstances:

• Property Owners / Sellers: With your consent, to facilitate property viewing arrangements
• Legal Professionals: Our partner legal consultants, where required to complete a property transaction you are involved in
• Service Providers: Trusted third-party providers who assist us in operating our website (e.g., hosting), subject to strict confidentiality agreements
• Legal Requirements: When required by law, court order, or government authority in Sri Lanka

5Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure HTTPS connections for all data transmission
• Encrypted storage of sensitive data in our database
• Regular security audits and vulnerability assessments
• Restricted employee access to personal data on a need-to-know basis
• Regular backups to prevent data loss

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to continuously improving our security practices.

6Cookies & Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Essential Cookies: Required for the website to function correctly (e.g., session management)
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
• Preference Cookies: Remember your settings and preferences for a better experience

You can control and delete cookies through your browser settings. Please note that disabling cookies may affect some website functionality.

7Your Rights

You have the following rights regarding your personal information held by IS Properties:

• Right of Access: Request a copy of the personal data we hold about you
• Right of Rectification: Request correction of any inaccurate or incomplete data
• Right of Erasure: Request deletion of your personal data, subject to legal retention obligations
• Right to Object: Object to the processing of your data for marketing purposes
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format

To exercise any of these rights, please contact us at ktispeiris@gmail.com. We will respond to your request within 30 days.

8Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Contact and inquiry data: Up to 3 years after your last interaction with us
• Transaction records: Up to 7 years as required by Sri Lankan tax and business regulations
• Website analytics data: Up to 26 months (anonymised after 14 months)

After the applicable retention period, your data will be securely deleted or anonymised.

9Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes acceptance of the updated policy.

10Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the relevant data protection supervisory authority in Sri Lanka.