Privacy Policy

Last Updated: February 19, 2026

ScanFlow ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (hosted at scanflow.lk) and use our services, and tell you about your privacy rights and how the law protects you.

1. Compliance with Sri Lankan Law

This Privacy Policy is governed by the laws of the Democratic Socialist Republic of Sri Lanka, including the Personal Data Protection Act, No. 9 of 2022. We ensure that your data is processed lawfully, fairly, and transparently.

2. Information We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

  • Identity Data: Name, business name, and business registration details.
  • Contact Data: Email address, telephone numbers, and physical address.
  • Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us. Note that we do NOT store sensitive card details; these are handled securely by our payment partner, HelaPay (PayHere).
  • Technical Data: IP address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • To register you as a new customer.
  • To process and deliver your order (e.g., configuring your QR page).
  • To manage our relationship with you (e.g., notifying you about changes to our terms or privacy policy).
  • To administer and protect our business and this website.

4. Payment Security

All online payments are processed through HelaPay (PayHere), a Central Bank of Sri Lanka approved payment aggregator. Your financial data is encrypted and processed via their secure servers. ScanFlow does not have access to your full credit card number or implementation credentials.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

6. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to request access, correction, erasure, restriction, transfer, or to object to processing.

7. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at: hello@scanflow.lk.