Privacy Policy

Last updated: 12-02-2026

TwinBP is owned and operated by Tropcey Technologics (Private) Limited ("Company", "we", "our", "us"). This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you use:

• TwinBP mobile application
• TwinBP website
• Related services and features

(collectively referred to as the "Platform")

By creating an account or using the Platform, you agree to the practices described in this Privacy Policy.

1. Who This Applies To

This policy applies to:

• Buyers (customers)
• Sellers (suppliers/vendors)
• Visitors of the Platform

You must be 18 years or older to use the Platform.

2. Information We Collect

We collect only information necessary to operate the Platform.

2.1 Account & Identity Information

• Name
• Date of birth
• Profile photo (optional)
• Email address
• Phone number
• Username and password

2.2 Contact & Delivery Information

• Billing address
• Delivery address
• Location (only when you provide it or upload images containing location data)

2.3 Payment & Financial Information

• Payment method details
• Bank account details (for sellers or refunds)
• Transaction records

Note: Card payments may be processed directly by third-party payment providers. We do not store full card numbers.

2.4 Technical & Device Information

• IP address
• Device type
• Operating system
• Browser type
• Device identifiers
• App usage logs

2.5 Usage & Activity Information

• Orders and purchases
• Searches
• Pages viewed
• Time spent on Platform
• Communications with support

2.6 Verification Information (when required)

• National ID / Passport copies
• Business registration details (for sellers)
• Fraud prevention verification

3. Legal Basis for Processing

We process your personal data only when permitted by law, including:

Basis	Example
Contract necessity	Processing orders and payments
Legal obligation	Tax, accounting, fraud prevention
Legitimate interest	Platform security and improvements
Consent	Marketing communications

4. How We Use Your Information

4.1 Provide Services

• Create and manage accounts
• Process orders
• Deliver products
• Customer support
• Seller onboarding

4.2 Payments

• Verify transactions
• Pay sellers
• Issue refunds
• Prevent fraud

4.3 Platform Operations

• Improve performance
• Monitor usage
• Detect abuse
• Troubleshoot problems

4.4 Communication

• Order updates
• Service notifications
• Customer service responses

4.5 Marketing (Only With Consent)

• Promotions
• Offers
• Newsletters

You can opt out anytime in app settings or email unsubscribe link.

4.6 Legal & Safety

• Comply with law enforcement requests
• Resolve disputes
• Prevent illegal activity

5. Sharing of Information

We may share your data only when necessary with:

Service Providers

• Payment processors
• Delivery partners
• Hosting providers
• Analytics providers
• Customer support tools

Sellers & Buyers

Necessary information (name, contact, delivery address) is shared only to complete transactions.

Authorities

If required by law, court order, or safety protection.

We do not sell personal data.

6. International Data Transfers

Your data may be stored or processed outside Sri Lanka. We ensure appropriate contractual safeguards are in place to protect it.

7. Data Retention

Data Type	Retention
Account	Until deletion request
Transactions	Up to 7 years (legal requirement)
Logs	Up to 12 months
Marketing consent	Until withdrawal

After retention period, data is deleted or anonymized.

8. Cookies & Analytics

We use cookies and similar technologies to:

• Keep you logged in
• Remember preferences
• Measure performance
• Improve services

We may use analytics providers (e.g., Google Analytics) to understand usage trends.

You may disable cookies in browser settings, but some features may not work.

9. Security

We implement reasonable safeguards including:

• Encrypted connections
• Secure servers
• Access controls
• Fraud monitoring

However, no system is 100% secure.

10. Your Rights

You have the right to:

• Access your data
• Correct inaccurate data
• Delete your account
• Withdraw consent
• Object to marketing
• Request a copy of your data

To make a request contact: [email protected]
We respond within 14 business days.

11. Children

The Platform is not intended for persons under 18. We do not knowingly collect children's data.

12. Changes to This Policy

We may update this policy. Major changes will be notified via app or email.

Continued use after updates means acceptance.