Privacy Policy

YourTurn (“we”, “us”, or “our”) operates the yourturn.lk platform and associated subdomains. This Privacy Policy explains how we collect, use, and protect information about businesses and individuals who interact with our platform.

1. Information We Collect

We collect information you provide directly when you:

• Register a business account (name, email address, phone number, business details)
• Complete a payment (billing name, email; card details are handled exclusively by PayHere and never stored by us)
• Contact us for support

We also collect limited information automatically, such as your IP address, browser type, and pages visited, through standard web server logs and cookies.

2. How We Use Your Information

• To create and manage your business account
• To process payments through PayHere (our authorised payment processor)
• To send transactional communications (account confirmations, billing receipts)
• To improve and maintain the platform
• To comply with legal obligations

We do not sell personal information to third parties.

3. Third-Party Service Providers

We share data with third parties only to operate the platform:

• PayHere – Payment processing. Subject to PayHere's Privacy Policy.
• Supabase – Database and file storage hosted in secure cloud infrastructure.
• text.lk – SMS delivery for queue notifications sent on behalf of clinics.

4. Cookies

We use session cookies to keep you logged in and preference cookies to remember your settings. We do not use advertising or tracking cookies. You may disable cookies in your browser, though this may affect some functionality.

5. Data Security

We implement industry-standard security measures including HTTPS encryption, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

6. Data Retention

We retain account data for as long as your account is active. After account closure, data is retained for up to 90 days before permanent deletion, unless a longer period is required by law.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal requirements)
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at the address below.

8. Children's Privacy

YourTurn is a business platform not directed at children under 18. We do not knowingly collect personal data from minors.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered account holders of material changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related enquiries, please contact us at:
YourTurn · info@yourturn.lk