Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, State, Province, ZIP/Postal code, City
Financial and Card Payment Data
When You make a payment on our platform using a credit card, debit card, or other electronic card payment mechanism, the transaction is processed directly by our secure, authorized third-party payment gateway providers.
- No Raw Card Storage: ResQ Harvest does not directly collect, view, or store raw credit/debit card numbers, CVVs, or card expiration dates on our own application servers.
- Processing Ecosystem: All card metadata and payments are encrypted and processed by PCI-DSS compliant payment gateways. The Company only processes payment confirmations, transaction IDs, and settlement tokens necessary to verify that a marketplace order has been paid.
Usage Data
Usage Data is collected automatically when using the Service.
Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device's unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.
We may also collect information that Your browser sends whenever You visit Our Service or when You access the Service by or through a mobile device.
Tracking Technologies and Cookies
We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies We use include beacons, tags, and scripts to collect and track information and to improve and analyze Our Service.
Where required by law, we use non-essential cookies (such as analytics, advertising, and remarketing cookies) only with Your consent. You can withdraw or change Your consent at any time using Our cookie preferences tool or through Your browser/device settings.
We use both Session and Persistent Cookies for the purposes set out below:
- Necessary / Essential Cookies (Session): Administered by Us. These Cookies are essential to provide You with services available through the Platform and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts.
- Cookies Policy / Notice Acceptance Cookies (Persistent): Administered by Us. These Cookies identify if users have accepted the use of cookies on the Website.
- Functionality Cookies (Persistent): Administered by Us. These Cookies allow Us to remember choices You make when You use the Platform, such as remembering your login details or language preference.
Retention of Your Personal Data
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. Where appropriate, we may apply shorter retention periods. Unless otherwise stated, the retention periods below are maximum periods ("up to"), and We may remove Personal Data earlier when it is no longer required for the purposes for which it was collected.
| Data Category | Primary Purpose |
|---|
| Account Information | Dispute resolution and post-termination reconciliation |
| Customer Support & Chat | Quality assurance, staff training, and defense against legal claims |
| Usage & Analytics Data | Trend analysis, optimization of Colombo/Kandy/Galle hub inventory |
| Server & Security Logs | Infrastructure security monitoring and troubleshooting |
When Personal Data is no longer required for the purposes described in this Privacy Policy, We may delete or otherwise remove access to such data in accordance with Our operational and legal requirements. Certain information may be retained for longer periods where required by applicable law, regulatory obligations, dispute resolution needs, or legitimate business purposes.
Transfer of Your Personal Data (International Cloud Infrastructure)
Your information, including Personal Data, is processed at the Company's operating offices in Sri Lanka and in any other places where the cloud providers involved in the processing are located.
International Transfers & Cloud Storage Framework: To maintain real-time synchronization, continuous platform availability, and low latency across our regional operational hubs, ResQ Harvest utilizes international public cloud infrastructure (including, but not limited to, global data centers managed via secure environments like Google Cloud, Firebase, and Amazon Web Services).
In strict compliance with the Sri Lankan Personal Data Protection (Amendment) Act, No. 22 of 2025, by registering an Account and clicking your agreement to these terms, you grant your explicit, informed consent to the transfer, routing, and processing of your personal data to cloud servers located outside of Sri Lanka. The Company secures these pipelines using advanced end-to-end encryption protocols matching or exceeding international security standards.