What information do we collect?

In short:we collect personal information that you provide to us.

A) Information You Provide to Us.

1. MO collects information that you provide directly to us when you sign up and use MO, including:
1. Information when you register or update the details of your account.
2. Communication with other users, providing reviews or other comments.
3. Requests made to customer support or otherwise communicate with us.
2. The types of information we may collect include:
1. Your name
2. Email address
3. Account password (encrypted)
4. Mobile number
5. Postal address, including house number, street address, and city
6. Photographs you upload of items or services you post for sale
7. Written descriptions of your posted items
8. Bids you make on items
9. Reviews or comments you make
10. All messages with other users or with us are sent through the MO messaging service or to MO directly.
11. Government-issued identification documents (such as a driver’s license or national ID)
12. Delivery and billing address
13. Any other information you choose to provide

B) Payment Data

All payment services are handled through the payment gateway, PayHere. You can find their privacy notice link athttps://www.payhere.lk/privacy/.

C) Application Data.

If you use our application, we may also collect the following information if you choose to provide us with access or permission:

• Geolocation Information. We may request access or permission to track location-based information from your mobile device, either continuously or while you are using our mobile application, to provide certain location-based services. Such services would include delivery. If you wish to change our access or permissions, you may do so in your device’s settings.
• Mobile Device Access. We may request access to or permission to certain features on your mobile device, including your device’s camera, contacts, SMS messages, photos, and other features. If you wish to change our access permissions, you may do so in your device’s settings.
• Mobile device data We collect various types of mobile device data automatically, including device information (such as device ID, model, and manufacturer), operating system details, version information, system configuration, device and application identifiers, browser types and versions, hardware models, Internet Service Provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you use our application, we may also gather information about your mobile device's phone network, unique device ID, and which features of our application you interact with.
• Push Notifications. We may send you push notifications regarding your account or specific features of the application. If you prefer not to receive these communications, you can manage your preferences in your device settings.

This information is primarily needed to maintain the security and operation of our application for troubleshooting, internal analytics, and reporting purposes.

All the information that you provide to us must be true, complete, and accurate.

D) Information We Collect Automatically.

In short, some information, such as your internet protocol (IP) address and/or browser and device characteristics, is collected automatically when you visit our services.

We automatically collect certain information when you visit, use, or navigate the services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our services, and other technical information. This information is primarily needed to maintain the security and operation of our services and for our internal analytics and reporting purposes.

This information we collect includes:

• Log and Usage Data. Log and usage data comprise service-related diagnostic, usage, and performance information that our servers automatically collect when you access or use our services. This information is recorded in log files and may include your IP address, device details, browser type and settings, and your activity within the services (such as timestamps associated with your usage, viewed pages and files, searches, and other actions you take, including feature usage). Additionally, it encompasses device event information like system activity, error reports (sometimes referred to as ‘crash dumps’), and hardware settings.
• Device Data. We collect device data, such as information about your phone, tablet, or other device you use to access the services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
• Location Data. We collect location data, such as information about your device’s location, which can be either precise or imprecise. How much information we collect depends on the type of settings on the device you use to access the services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location based on your IP address. You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your location setting on your device. However, if you choose to opt out, you will not be able to use certain aspects of the services.

E) How do we Process your Information?

In short, we process your information to deliver, enhance, and manage our services, to communicate with you, for security and fraud prevention, and to comply with legal requirements. Additionally,

we may process your information for other purposes with your consent. We process your information for a variety of reasons, depending on how you interact with our services, including:

• To streamline account creation, authentication, and overall management of user accounts, we process your information to enable account creation, facilitate login access, and maintain the functionality of your account.
• To deliver and facilitate the delivery of services to users, we process your information to ensure you receive the requested services.
• To respond to user inquiries and provide support, we process your information to address your questions and resolve any issues related to the services you have requested.
• To send you administrative information, we may process your details to provide updates about our products and services, notify you of changes to our terms and policies, and share similar essential information.
• To fulfill and manage your orders, we process your information to handle and oversee purchases, payments, and returns made through our services.
• To facilitate user-to-user communications, we process your information when you choose to utilize any of our features that enable interaction with other users.
• To request feedback. We may process your information when necessary to request feedback and contact you about your use of our services.
• To send you marketing and promotional communications. We may process the personal information you send us for marketing purposes if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time.
• To provide targeted advertising, we process your information to develop and display personalized content and ads that align with your interests, location, and other relevant factors.
• To post testimonials. We post testimonials about our services that may contain personal information.
• To safeguard our services, we process your information to ensure their safety and security, which includes monitoring and preventing fraud.
• To evaluate and improve our services, products, marketing, and your experience. We may use your information when we believe it is necessary to identify usage trends, determine the effectiveness of our promotional campaigns, evaluate and improve the effectiveness of our promotional campaigns, and evaluate and improve our services, products, marketing, and your experience.
• To identify usage trends. We may process information about how you use our service to better understand how it is being used so we can improve it.
• To determine the effectiveness of our marketing and promotional campaigns. We may process your information to better understand how to provide marketing and promotional campaigns that are most relevant to you.
• To comply with our legal obligations. We may process your information to comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.

F) When and with whom do we share your personal information with?

In short, we may share your information in the specific situations described in this section and/or with the following third parties:

• Business Transfers: We may share or transfer your information in connection with or during negotiations of a merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
• Affiliates: We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
• Business Partners: We may share your information with our business partners to offer you certain products, services, or promotions.
• Other Users: When you share personal information (for example, by posting comments, contributions, or other content to the Services) or interact with public areas of the Services, such information may be viewed by all users and may be publicly distributed outside the Services in perpetuity. Similarly, other users will be able to view descriptions of your activity, communicate with you within our Services, and view your profile.

G) What is our stance on Third Party websites?

Our services may, from time to time, contain links to external sites or resources that are operated by third parties. We have no control over the content and privacy practices of such sites or resources. You are advised to review the privacy policies of these sites and resources operated by third parties and understand how your information may be used by those third parties.

H) Do we use Cookies & other tracking technologies?

We use tracking technologies for our services. These enable us to understand how you use our services, which, in turn, helps us provide and improve our services. However, the tracking technologies do not access, receive, or collect information that can be used to identify you. We have listed below some examples of the tracking technologies used on our services:

• Cookies. A cookie is a small data file sent from a website to your browser that is stored on your device. Cookies are used for a number of purposes, including to display the most appropriate content based on your interests and activity on our services, estimate and report our service's total audience size and track, and conduct research to improve our services. We may also partner with selected third-party vendors, such as Google Analytics, to allow tracking technologies and remarketing services on our platforms through the use of first-party cookies and third-party cookies for such purposes. You can configure your device's settings to reselect your preference to accept or reject cookies. If you reject all cookies, you will not be able to take full advantage of our services.
• Pixels. We may, from time to time, use certain Facebook business tools, such as the Facebook Pixel. This tool allows MO to keep track of what users do after they see or click on a Facebook advertisement and enables us to monitor the effectiveness of Facebook ads for purposes of statistics and market research. MO will be able to better understand and deliver ads and make them more relevant to you. The collected data remains anonymous, and MO cannot see the personal data of any individual user. However, the collected data is saved and processed by Facebook. Facebook may be able to connect the data with your Facebook account and use the data for their own advertising purposes, in accordance with Facebook’s Data Use Policy. Facebook has ultimate control over the information gathered through its business tools and communications.
• Clear gifs. We employ a software technology called clear gifs (also known as web beacons or web bugs) to help us better manage content on our services by informing us what content is effective. Clear gifs are tiny graphics with a unique identifier similar in function to cookies and are used to track the online movements of web users. In contrast to cookies, which are stored on a user's computer's hard drive, clear gifs are embedded invisibly on web pages and are about the size of the period at the end of this sentence. The data collected in this way is anonymous to us, which means we cannot see the personal data of individual users. However, this data is saved and processed by Facebook. Facebook can connect this data with your Facebook account and use it for its own advertising purposes, in accordance with Facebook’s Data Policy, which can be found athttps://www.facebook.com/about/privacy/. You can allow Facebook and its partners to place ads on and outside of Facebook. A cookie can also be saved on your device for these purposes.
• Flash cookies. We use Flash cookies (also known as local shared objects, or LSOs) to store some of your viewing preferences on our services. These are used to collect and store information, but they differ from browser cookies in the amount, type, and manner in which data is stored.

I) MO uses information about you for various purposes

• To verify your login information, enable access to and use of the MO Service. This helps personalize your experience and optimize the location and types of offers presented to you.
• Provide our services
• Resolve disputes
• Collect fees and troubleshoot problems.
• Customize the user experience.
• Measure activity and interest in our services.
• Encourage a safe market and enforce our terms of service.
• Communicate marketing and promotional offers to you according to your preferences.

J) Your Choices

Account Information

• You may update, correct, or remove account profile information at any time by logging into your account.
• You can deactivate your account by going to the settings tab on your app. We will make your account inactive until the time you decide you would like to return to using the MO Services. To reactivate your account, you can sign in using the same username and password.
• If you are on a mobile device and would like to delete your account, you can request deletion from your Account Settings menu. From your logged-in mobile device, click Account - Settings, scroll to “Account deletion,” and follow the prompts.
• Please note that we may retain certain information as required by law or for legitimate business purposes. We will also retain certain information, such as reviews, forum postings, and similar materials posted by you, which may continue to be publicly available (but not associated with your personal information) on the MO Service after your MO account is canceled.

K) Do we make updates to this notice?

In short, we will update this notice as necessary to stay compliant with relevant laws.

WE MAY UPDATE THIS PRIVACY NOTICE FROM TIME TO TIME. The updated version will be indicated by an updated “Revised 'date, and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy policy notice frequently to be informed of how we are protecting your information.

L) How Can You Contact Us About This Notice?

If you have any questions or comments about this notice, you may email us atsupport@mo.lk.