Privacy Policy
This policy explains what personal and business data LGO collects, how we use it, and the choices you have. It applies to the youShop and youResto apps, website and hardware.
1. Data we collect
We collect the information you give us when you sign up and run your business on LGO — your name and contact details, business details and identity documents, staff accounts, and the products, sales and transactions you record. We also collect technical data such as device type, app version and log data needed to operate the service securely.
2. How we use it
We use your data to run youShop, youResto and youQR, process payments through our partners, generate your sales history and reports, provide support, keep the platform secure, and — where you ask for it — assess eligibility for working-capital credit. We may send you service messages about your account.
3. Payments & credit partners
Payment acceptance is provided by LankaPay under its CBSL licence and credit by Sampath Bank. When you transact or apply for credit, the relevant data is shared with these partners so they can deliver the regulated service. They act as independent controllers for the services they provide, under their own terms and privacy notices.
4. Your customers’ data
Information you collect about your own customers through LGO belongs to you. You are the controller of that data and are responsible for handling it lawfully. LGO processes it only on your behalf to provide the service, and never sells it.
5. Sharing & disclosure
We do not sell your personal data. We share it only with the payment and credit partners named above, with service providers who help us run LGO under confidentiality obligations, and where we are legally required to do so by a competent authority.
6. Retention
We keep your data for as long as your account is active and for the period afterwards required to meet legal, tax, accounting and anti-fraud obligations. When data is no longer needed, we delete or anonymise it.
7. Security
We use encryption, access controls and monitoring to protect your data. No system is perfectly secure, so you must also keep your login credentials, staff accounts and devices safe. Tell us immediately if you suspect unauthorised access.
8. Your rights
Subject to applicable law, you can ask to access, correct, export or delete your personal data, and object to certain processing. Some data must be retained to meet legal obligations. To exercise a right, contact us using the details below.
9. Changes & contact
We may update this policy as the product and regulation evolve; material changes will be notified in-app or on this page. This policy is governed by the laws of Sri Lanka. Questions? Email connect@lgotech.lk or call (+94) 77 201 7950.