PRIVACY POLICY

Last updated: 13th of December 2025

This Privacy Policy is issued in compliance with the Personal Data Protection Act No. 9 of 2022 (Democratic Socialist Republic of Sri Lanka).

1. Lawful Basis of Processing

Personal data is processed strictly on the basis of:

  • User consent
  • Contractual necessity
  • Legal compliance
  • Legitimate interest consistent with PDPA

2. Categories of Data Processed

The Platform processes only data strictly necessary for operational functionality, including identification, transactional, and compliance-related records.

3. Purpose Limitation

Data is processed solely for authentication, platform security, fraud prevention, financial reconciliation, and regulatory compliance.

4. Data Minimization and Retention

Data is retained only for legally permissible periods.

Financial and audit records may be retained notwithstanding account deletion.

5. Security Safeguards

The Platform implements administrative, technical, and organizational safeguards including access controls, encryption, and monitoring mechanisms.

6. Automated Monitoring

The Platform may employ automated decision-making systems to detect anomalies, abuse, or risk patterns. Such decisions may affect access or balances.

7. Data Subject Rights

Rights under PDPA may be exercised subject to statutory limitations and fraud-prevention obligations.

8. Cross-Border Processing

Where data is processed outside Sri Lanka, adequate safeguards consistent with PDPA are maintained.

9. Policy Amendments

This Policy may be amended without prior notice. Continued use constitutes acceptance.

10. Contact

Privacy and legal correspondence: hi@fillmyq.com

Data Protection Compliance

This Privacy Policy is issued in accordance with the Personal Data Protection Act No. 9 of 2022 of Democratic Socialist Republic of Sri Lanka.