ONESTOP.LK, referred to below as Onestop, is an online retailer of consumer goods. ONESTOP values its relationship with you and other users of this website. We recognize that you may be concerned about how we collect, hold, use, and disclose your personal information. We have implemented this Privacy Policy to inform you of the personal information that we collect from you, how we collect and hold this information and what we do with it after we collect it. If you have any questions or comments regarding this Privacy Policy, please contact us via our contact us page or email us via privacy@onestop.lk.
ONESTOP.LK is located at 106 4/4, Leader Complex, First Cross Street, Colombo 11, Sri Lanka 01100.

Personal information that we collect from you and hold includes information that is required in order for us to offer goods or services to you and to delivery these goods and services. These include your name, address, telephone number and e-mail address. We collect personal information directly from you and very occasionally via 3rd party suppliers. In other instances, we may collect personal information voluntarily from you when you contact us (for example:- when you make a telephone inquiry) or when you use our website or mobile apps. Personal information is also collected directly from you via a series of forms which you complete including:

a) Membership Registration 
Our site’s registration form requires you to provide us contact information (email address) and may occasionally require demographic information. At this time you may withhold certain information if you so wish such as your real name and act under a pseudonym. We do not require any other personal information at this stage.

b) Passwords 
You are responsible for all actions taken with your user name, email address and password. Therefore we do not recommend that you disclose your ONESTOP password to any third parties. If you choose to share your user name, email address and password or your information with third parties to provide you additional services, you are responsible for all actions taken with this information and therefore you should review that third party’s privacy policy.

c) Address and telephone number
When you place an order on our website or via our mobile apps, we will require you to insert your address and telephone number and any other information relevant to your order including your payment information and information on your payment method. At this time we may require you to provide us with your full name and not rely on any pseudonym you may have used to access the website. We will require your full postal address and in some circumstances we are unable to rely on or delivery to a P.O. Box. We also require your telephone number in order to contact you regarding the order or service that you have purchased or for other reasons.

Personal information collected via a 3rd party.

Personal information that we collect via a 3rd Party is information that you have opted in to share with us. For example if you choose to login to our website using a third party login service such as “login with Facebook”, then you opt in to share your basic information with us. This basic information includes your name, e- mail address, gender and date of birth. We may require further personal information and will prompt you to supply us with that information such as your address and contact details when you place an order as detailed above. Information that we hold about you is held in a firewall protected, restricted user access database. We carry out regular user access audits; access logging and daily PCI scanning.

How we ensure we have accurate information.

We rely upon you to correctly insert your personal information and provide you with the ability both to view and to amend that personal information as detailed below.

We enable you to view the personal information we store via the My Account Section of the website or App. Here you can view any of your personal details including your registered username, password, email address or date of birth. We also enable you to store and amend up to two addresses for the effective delivery of goods. If you would like to access any other personal information which we hold about you or if you would like to seek the correction of that information, you can do so by contacting us via our contact us page or email us to privacy@onestop.lk.

We collect, hold, use and disclose personal information for the following purposes:

In order to send you offers of goods and services that you have opted in to receive from us via e-mail. You can choose to opt out of us using your personal information for future direct marketing by selecting the unsubscribe option on any of the e-mails that we send to you. You can also select unsubscribe on our website or apps, contact us via our Contact page, email us via privacy@onestop.lk and request to be unsubscribed.

In order to allow you to access our website and view the offers that we have made.

In order to contact you via reasonable means to verify and confirm or discuss purchases for goods or services that you have made.

In order to complete or fulfill via any reasonable means an order of goods or services that you have made from us.

In order to respond to your inquiries and do the things you have asked us to do.

We may need to disclose your personal information to third parties in order to deliver goods or services that you have purchased from our website. We disclose this personal information only to ensure that we complete the primary purpose for holding your personal information and for no other reason. The list of potential recipients of your personal information includes the following, some of which may include overseas disclosure (also detailed subsequently);

  • A supplier who requires your personal information to complete a delivery or service where that supplier is delivering the goods or providing a service to you on our behalf.
  • Postal and Courier companies who are contracted to complete a delivery service on our behalf receive a manifest, which includes names, addresses, and where necessary telephone numbers in order to contact you to complete delivery.
  • Customs documents must also contain your personal details when you are purchasing from a sale that is fulfilled from overseas.
  • In addition, we also print your personal information on the parcels but we do not publish this information or make it available for any other purpose other than to ensure the delivery of goods.
  • As an organization, we also may disclose your information to overseas entities or contractors who we engage in order to send you goods as detailed in the section above. These entities or contractors are likely to be located in the aforementioned countries and regions.

Allowed exceptions to the aforementioned disclosure limitations

We never sell, rent or use your personal information or disclose any personal information other than for the above reasons or other than where we are required or authorized by or under Sri Lankan law or a court/tribunal order to do so.

Invite a friend

ONESTOP provides facilities throughout the site for you to send invitations to friends, referring them to ONESTOP. We do not collect personal information about your friends through these facilities but may collect personal information about them if they contact us. You may not use the “Invite a friend” service or other email forwarding services that we offer to send spam or otherwise send content that would violate our Privacy Policy or Terms and Conditions. We do not permanently store, sell, or rent these email messages or the email addresses.

Security

ONESTOP.LK uses Global Payments to provide a secure environment for the authorization of credit card and charge card transactions. Confidential information including card details is encrypted using industry standard SSL 128- bit encryption technology.

Cookies

Cookies are small pieces of information that are stored in a browser-related file on your computer’s hard drive when you use our Web site. We use cookies to improve the member experience. We also use them to deliver information and fresh content specific to your interests. Cookies are widely used on most major Web sites.

ONESTOP mostly uses “session” cookies, which are removed from your computer once you leave ONESTOP. These are used so our service can remember that you have logged in already and prevent you doing so more frequently. The technology we use (Microsoft .NET), requires the use of session cookies. Session cookies expire and are deleted after 30 minutes of no activity on ONESTOP. ONESTOP also uses persistent cookies to personalize the user experience, to help protect our members and to provide us with research information (such as how often members visit ONESTOP each month). Persistent cookies allow us to track users on ONESTOP and help us identify users abusing the ONESTOP service.

Membership Removal

If you wish to be removed from our database for any reason, simply send us an email requesting to be removed via our contact us page.

Complaints

If you would like to make a complaint about a breach of the Sri Lankan Privacy Principles, please contact us via our contact us page, email us via privacy@onestop.lk. Once we receive your complaint, we will endeavor to respond to your complaint within a reasonable period of time. If you are unhappy with the outcome of your complaint, you can take your complaint to the Sri Lanka Information and Communication Technology service(SLICT). For more information on how to contact the SLICT, Please visit their website at: http://www.pubad.gov.lk/web/index.php?option=com_content&view=article&i d=104&Itemid=234&lang=en.

Updates to our information practices

ONESTOP reserves the right to add to, delete or change these terms because of frequent changes in Internet technology and applicable law. As such, you should check this privacy policy from time to time for such changes.