At Gannako, we are committed to protecting your privacy. This policy explains how we collect, use, and safeguard data in compliance with the Sri Lanka Personal Data Protection Act (PDPA) and GDPR.
Overview
Gannako is a multi-tenant e-commerce platform that enables businesses to create and manage their online stores. This privacy policy covers:
- Data collected from store owners (our customers)
- Data collected from shoppers who use stores on our platform
- How we process and protect this data
Data from Store Owners
When you create a store on Gannako, we collect:
Account Information
Name, email address, phone number, business name, and business address
Billing Data
Payment method details processed securely through our payment partners
Usage Data
Store activity, feature usage, and platform interactions for service improvement
Support Data
Communications with our support team and any attachments you provide
Data from Shoppers
When you shop at stores powered by Gannako, we process:
Order Information
Name, shipping address, email, phone number for order fulfillment
Payment Data
Payment information processed by secure third-party providers (we do not store full card details)
Technical Data
IP address, browser type, device information for security and analytics
Preferences
Cookie preferences, marketing consent, and communication preferences
Note: Individual store owners are responsible for their own privacy policies regarding how they use customer data obtained through their stores.
Sub-processors
We work with trusted third-party services to operate our platform:
Your Rights
Under PDPA and GDPR, you have the following rights:
Access
Request a copy of your personal data we hold.
Rectification
Correct any inaccurate or incomplete data.
Erasure
Request deletion of your personal data.
Portability
Receive your data in a machine-readable format.
Object
Object to processing for marketing purposes.
Withdraw Consent
Withdraw previously given consent at any time.
Contact
Data Protection Team
privacy@gannako.comFor any privacy-related inquiries, data access requests, or complaints, please contact our Data Protection Team.