PRIVACY POLICY
Daraz understands that our users care about their personal data and how it is collected, used, shared, protected and cared for. We are committed to handling your personal data in accordance with the applicable laws when you use any of the features and functions available on our Platform or Services, interact with us via an external service, application or through our customer service agents, or access our Services or our Platform through your computer, mobile device, or any other device with Internet connectivity.
PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY CLICKING “SIGN UP” ,”LOGIN”, “I AGREE/CONSENT TO DARAZ’S PRIVACY POLICY”, “I AGREE AND CONSENT TO THE COLLECTION, USE, DISCLOSURE, STORAGE, TRANSFER AND/OR PROCESSING OF MY PERSONAL DATA FOR THE PURPOSE STATED IN, AND UNDER THE TERMS OF THIS PRIVACY POLICY” OR SIMILAR STATEMENTS AVAILABLE AT THE DARAZ REGISTRATION PAGE OR IN THE COURSE OF PROVIDING YOU WITH THE SERVICES OR ACCESS TO THE PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THE TERMS OF THIS PRIVACY POLICY AND THAT YOU HAVE AGREED AND CONSENTED TO THE COLLECTION, USE, DISCLOSURE, STORAGE, TRANSFERAND/OR PROCESSING OF YOUR PERSONAL DATA AS DESCRIBED AND UNDER THE TERMS HEREIN.
3. USE AND DISCLOSURE OF YOUR PERSONAL DATA
❖ Purpose of Use
3.1. We use and disclose personal data for the purposes described below in accordance with applicable local laws and this Privacy Policy, if required, upon obtaining your consent.
3.2. Depending on your relationship with us (for example, whether you are a buyer, a seller, a visitor to our websites, or a user of our mobile applications), the personal data which we collect from you or via third parties may be used for one or more purposes, as follows:
a) To facilitate your use of the Services or access to the Platform.
b) To administer the online account that you may have set up with us.
c) To conduct analytics, research, business and development:
d) To better understand user experience with the Ser vices and the Platform;
e) To improve the layout or content of the pages of the Platform and customise them for users;
f) To identify visitors on the Platform;
g) To conduct surveys, including carrying out research on our users' demographics and behaviour to improve our current technology (e.g. voice recognition tech, etc) via machine learning or other means;
h) To derive further attributes relating to you based on personal data provided by you (whether to us or third parties), in order to provide you with mo re targeted and/or relevant information;
i) To conduct data analysis, testing and research, monitoring and analysing usage and activity trends; and
j) To further develop our products and services.
k) Legal and operational purposes
l) To ascertain your identity in connection with fraud detection purposes;
m) To compare information, and verify with third parties in order to ensure that the information is accurate;
n) To process any complaints, feedback, enforcement action and take -down requests in relation to any content you have uploaded to the Platform;
o) To produce statistics and research for internal and statutory reporting and/or record -keeping requirements;
p) To store, host, back up your personal data for operational, legal or business purposes;
q) To share personal data in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we satisfy the requirements of applicable data protection law when disclosing your personal data;
r) To prevent or investigate any actual or suspected viol ations of our Terms of Use, Privacy Policy or any of our policies, fraud, unlawful activity, omission or misconduct, whether relating to your use of our Services or any other matter arising from your relationship with us.
s) To perform due diligence checks;
t) To comply with legal and regulatory requirements (including, where applicable, the display of your name, contact details and company details), including any law enforcement requests, requests by any governmental or regulatory authority having jurisdiction over Daraz, in connection with any legal proceedings, or as otherwise deemed necessary by us; and
u) To protect the life, health or personal safety of Daraz's employees, its users and/or the public.
v) Any other purpose to which your consent has been obtained, in compliance with our obligations under applicable laws, including to notify you at the time of obtaining your consent.
3.3. Where you are a buyer and/or you have signed in or registered with us, the personal data which we collect from you or via third parties may be used for other purposes, as follows:
i. Processing your order for products (whether sold by us or a third party seller)
a) To process orders, you submit through the Platform;
b) To deliver the products you have purchased through the Platform. We may pass your personal information on to a third party (e.g. our logistics partner) or relevant regulatory authority, where applicable (e.g. customs) in order to make delivery of the product to you;
c) To update you on the delivery of the products;
d) To provide customer support for your orders, for example, to return products that you have purchased through the Platform; and
e) To verify and carry out payment transactions (including any credit card payments, bank transfers, offline payments, remittances, or e -wallet transactions) in relation to payments related to you, promotions participated in by you and/or Services used by you. In order to verify and carry out such payment transactions, payment information, which may include personal data, will be transferred to third parties such as our payment service providers.
ii. Providing Services
a) To display your name, username or profile on the Platform (including on any reviews you may post);
b) To facilitate the use of the mini-apps available on the Platform and purchases made via these mini-apps;
c) To respond to your queries, feedback, claims or disputes, whether directly or through our third-party service providers;
d) To display on scoreboards on the Platform in relation to campaigns, mobile games or any other activity;
e) To allow other users to identify you (via the "Find my friends" or any other similar function) as a user of the Service, to allow you to find other users and to connect with them on the Platform, and to support the socialising function of the Services (where applicable);
f) To assess your application for loan facilities and/or to perform credit risk assessments in relation to applications for financial services and products, such as credit or loan facilities, insurance or credit cards (where applicable); and
g) To facilitate the integration of third party's loyalty membership programmes (including those supported by sellers or brands) with our Platform.
(iii) Marketing and Advertising
a) To provide you with information we think you may find useful or which you have requested from us;
b) To send you marketing or promotional information about our or third -party sellers’ products and services on our Platform from time to time;
c) To help us conduct marketing and advertising; and
d) To promote the Services and use the information that you give to us, such as user-generated content (including video content) that you can choose to upload or broadcast on our Platform and will be accessible on the Internet and may be shared by the public (the latter of which is not within our control), as part of our advertising and marketing campaigns to promote the Platform.
(iv) Other
a) To know our buyers better; and
b) To conduct automated decision-making processes in accordance with any of the above purposes, which will be carried out in compliance wit h our obligations under applicable laws.
3.4. Where you are a seller, the personal data which we collect from you or via third parties may be used for other purposes, as follows:
(i) Providing Services
a) To ship or deliver the products you have listed or sold through the Platform. We may pass your personal information on to a third party (e.g. our logistics partners, our affiliates) or relevant regulatory authority, where applicable (e.g. customs) in order to carry out shipping or delivery of the products listed or sold by you;
b) To respond to your queries, feedback, claims or disputes, whether directly or through our third-party service agents;
c) To verify your documentation submitted to us to facilitate your onboarding with us as a seller on the Platform, including the testing of technologies to enable faster and more efficient onboarding;
d) To display your name, username or profile on the Platform;
e) To verify and carry out financial transactions (including any credit card payments, bank transfers, offline payments, remittances, or e -wallet transactions) in relation to payments related to you, promotions participated by you and/or Services used by you. In order to verify and carry out such payment transactions, payment information, which may include personal data, will be transferred to third parties such as our payment service providers;
f) To assess your application for loan facilities and/or to perform credit risk assessments in relation to your applications for seller financing and products, including credit or l oan facilities, insurance or credit cards (where applicable);
g) To provide you with ancillary logistics services to protect against risks of failed deliveries or customer returns; and
h) To facilitate the return of products to you (which may be through our logistics partner).
(ii) Marketing and Advertising
a) To send you marketing or promotional materials about our or third -party sellers’ products and services on our Platform or services which may be provided by our affiliates from time to time; and
b) To help us conduct marketing and advertising.
(iii) Other
a) To know our sellers better; and
b) To conduct automated decision-making processes in accordance with any of these purposes, which will be carried out in compliance with our obligations under applicable laws.
❖ Who we may disclose your personal data to;
3.5. We may share (or permit the sharing of) your personal data with and/or transfer your personal data to third parties for the above -mentioned purposes (i.e Purpose of Use). These third parties, which may be located inside or outside your jurisdiction, may include:
(i) Service providers (such as agents, vendors, contractors, sub-contractors and partners) in areas such as payment services, logistics and shipping, marketing, data analytics, market or consumer research, survey, social media, customer service, cloud computing or other hosting service providers, credit risk assessment service providers, auditors, installation services, information technology and website hosting;
(ii) Their service providers and related comp anies;
(iii) Alibaba group entities and affiliated companies and/or their designated service providers that work with us to provide processing services such as software, tools, systems and messaging services for purposes described in this Privacy Policy;
(iv) Courts, tribunals, law enforcement agencies, governmental or regulatory authorities; and where we believe it is necessary to comply with applicable laws or to exercise, establish or defend our legal rights or protect your vital interests or those of any other person; or as otherwise required or permitted by applicable laws.
(v) Affiliated entities who may be engaged in providing financial services, such as buy-now pay later services, exclusively for their credit risk assessment/creditworthiness evaluation or credit risk protection purposes.
(vi) To any other person with your consent to the dis closure
3.6. In disclosing your personal data to them, we endeavor to ensure that the third parties and our affiliates keep your personal data secure from unauthorised access, collection, use, disclosure, processing or similar risks and retain your person al data only for as long as your personal data is needed to achieve the purposes mentioned in this Privacy Policy.
❖ International data transfer
3.7. We may transfer or permit the transfer of your personal data outside of your jurisdiction in connection with providing the Services through our Platform. We may store your personal data processed through the Platform in other jurisdictions (such as Singapore), depending on the country you are located in. These countries have data protection laws t hat may have different provisions to the laws of your country. There will also be international transfers of your information among the Daraz entities referred herein. We take appropriate steps to ensure that recipients of your personal information are bound to duties of confidentiality and we implement appropriate measures to ensure your personal data will remain protected in accordance with this Privacy Policy . Notwithstanding anything to the contrary, we will not transfer or permit any of your personal d ata to be transferred outside of such jurisdiction unless the transfer is in compliance with applicable laws, including, for example, to inform and obtain your consent on the countries to which your personal data may be transferred to and the applicable st andards on data protection under the laws of such countries.
❖ Third party services
3.8. We may share your personal data with our third-party service providers or affiliates (e.g. payment service providers) in order for them to offer their services to you in conjunction with your use of the Platform or our Services. Your acceptance and use of the third-party service provider's or our affiliate's services shall be subject to terms and conditions as may be agreed between you and the third-party service provider or our affiliate. Upon your acceptance of the third-party service provider's or our affiliate's service offering, the collection, use, disclosure, storage, transfer and processing of your data (including your personal data and any data disclosed by us to such thirdparty service provider or affiliate) shall be subject to the applicable privacy policy of the thirdparty service provider or our affiliate, which shall be the data controller of such data. You agree that any queries or complaints relating to your acceptance or use of the third-party service provider's or our affiliate's services shall be directed to the party named in the applicable privacy policy.
4. WITHDRAWAL OF CONSENT TO CONTINUED USE, DISCLOSURE, STORING AND/OR
PROCESSING OF PERSONAL DATA
4.1. You may communicate the withdrawal of your consent to the continued use, disclosure, storing and/or processing of your personal data by contacting us using the contact details below, subject to the conditions and/or limitations impose d by applicable laws or regulations.
4.2. Please note that if you communicate your withdrawal of your consent to our use, disclosure, storing or processing of your personal data for the purposes and in the manner as stated above or exercise your other rights as available under applicable local laws, we may not be in a position to continue to provide the Services to you or perform any contract we have with you, and we will not be liable in the event that we do not continue to provide the Services to, or perf orm our contract with you. Our legal rights and remedies are expressly reserved in such an event.
4.3. You may unsubscribe from receiving marketing information at any time in our mobile application settings or by using the unsubscribe function within the e lectronic marketing material.
5. UPDATING YOUR PERSONAL DATA
5.1. It is important that the personal data you provide to us is accurate , up-to date and complete for you to continue using the Platform and for us to provide the Services. You are responsible for informing us of changes to your personal data, or in the event you believe that the personal data we have about you is inaccurate, incomplete, misleading or out of date.
5.2. You can update your personal data anytime by accessing your account on the Platform.
5.3. We may take steps to share the updates to your personal data with third parties and our affiliates with whom we have shared your personal data if your personal data is still necessary for the above - stated purposes.
6. ACCESSING AND CORRECTING YOUR PERSONAL DATA
6.1. You may request information about your personal data which we have collected, or enquire about the ways in which your personal data may have been used, disclosed, stored or processed by us via the personal account information setting on our Platform or by contacting us using the contact details in Section 11 below. You may also request correction of any error or omission in your personal data which we have collected in the same way. In order to facilitate processing of your request, it may be necessary for us to request further information relating to your request. Where permissible under law, we may refuse such correction requests if deemed vexatious or unreasonable.
6.2. Where permitted by applicable data protection laws, we reser ve the right to charge a reasonable administrative fee for retrieving your personal data records. If so, we will inform you of the fee before processing your request.
7. SECURITY OF YOUR PERSONAL DATA
7.1. To safeguard your personal data from unauthorised access, collection, use, disclosure, processing, copying, modification, disposal, loss, misuse, modification or similar risks during the course of your use of our Platform and/or Services, we have introduced appropriate administrative, physical and technical measures such as:
(a) Restricting access to personal data to individuals who require access;
(b) Maintaining technology products to prevent unauthorised computer access;
(c) Using TLS 1.2, (Transport Layer Security) encryption technology when processing your financial details; and/or
(d) implementing other security measures as required by applicable law.
7.2. You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While securit y cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures. You are also advised to exercise caution with respect to the sharing of your personal data and your authentication / security details (such as passwords, credit card details, transaction details) outside of our Platform / Services.
8. RETENTION OF PERSONAL DATA
8.1. We will only retain your personal data for as long as we are either required or permitted to by law or as relevant for the purposes for which it was collected.
8.2. We will cease to retain your personal data by securely disposing of the same, or remove the means by which the data can be associated with you through anonymisation, as soon as it is reasonable to assume that such retention no longer serves the purposes for which the personal data was collected, and is no longer necessary for any legal or business purpose.
9. MINORS
9.1. Daraz does not sell products to minors (which is to be determi ned based on the applicable law), nor does it intend to provide any of the Services or the use of the Platform to minors. We do not knowingly collect any personal data relating to minors.
9.2. You hereby confirm and warrant that you are above the age of mi nority and you are capable of understanding and accepting the terms of this Privacy Policy. If you are a minor, you may use our Platform only with the involvement of a parent or legal guardian.
9.3. As a parent or legal guardian, please do not allow minors under your care to submit personal data to Daraz. In the event that such personal data of a minor is disclosed to Daraz, you hereby consent to the processing of the minor's personal data and accept and agree to be bound by this Privacy Policy and take responsibility for his or her actions.
9.4. We will not be responsible for any unauthorised use of the Services on the Platform by yourself, users who act on your behalf or any unauthorised users. It is your responsibility to make your own informed decisions about the use of the Services on the Platform and take necessary steps to prevent any misuse of the Services on the Platform.
10. THIRD PARTY SITES
10.1. The Platform may contain links to other websites operated by other parties, such as our business affiliates, merchants or payment gateways. We are not responsible for the privacy practices of websites operated by these other parties. You are advised to check on the applicable privacy policies of those websites to determine how they will handle any informat ion they collect from you.
10.2. Please note that even if the third party is affiliated with us, we have no control over these third-party websites, each of which may have their own separate privacy and data collection practices independent of us. We there fore have no responsibility or liability for the content, security arrangements (or lack thereof) and activities of these linked sites. These linked sites are only for your convenience and you therefore access them at your own risk. Nonetheless, we seek to protect the integrity of our Platform and the links placed upon each of them and therefore welcome any feedback about these linked sites (including, without limitation, if a specific link does not work).
11. QUESTIONS, FEEDBACK, CONCERNS, SUGGESTIONS OR COMPLAINTS
11.1. If you have other questions, comments or concerns about our privacy practices, or if you wish to issue a request to exercise your rights where applicable by law, please contact our privacy office at dataprotectionoffice@daraz.com - Please provide your name and contact information along with the request.
12. Country-specific Riders
Sri Lanka
I. This Privacy Policy will apply to all processing of personal data which takes wholly or partly in Sri Lanka and/or where the data subjects are domiciled or ordinarily resident in Sri Lanka.
II. Kaymu Lanka (Private) Limited will be subject to the Personal Data Protection Act No.09 of 2022 of Sri Lanka and any amendments thereto.
Version dated July 2025
