California Privacy Notice

1. Who this notice is for

This notice supplements our general Gizlilik Politikası and applies to California residents whose Personal Information is processed by SriLankaExport.com (operated by Harker International (Pvt) Ltd, Reg. No. PV 00338032, Kandy, Sri Lanka). It is issued under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (jointly, “CCPA”).

It applies whether you are a Buyer using the Platform from California, a Vendor employee based in California, or a California-resident visitor to the public website.

2. Categories of Personal Information collected (last 12 months)

The categories below follow the categorization in Cal. Civ. Code § 1798.140(v) and the implementing regulations.

3. We do NOT collect: affirmative statements

• We do not collect Sensitive Personal Information as defined in Cal. Civ. Code § 1798.140(ae) (e.g. precise geolocation, racial or ethnic origin, health data, biometric data, financial account credentials).
• We do not collect Personal Information from minors. The Platform is restricted to users aged 18 or over under our Terms of Service.
• We do not use Personal Information for automated decision-making with legal or similarly significant effects on you.
• We do not engage in profiling for the purpose of cross-context behavioural advertising.

4. We do NOT sell or share your Personal Information: affirmative statement

Harker International does not sell Personal Information of California residents for monetary or other valuable consideration, and has not done so in the preceding 12 months.

Harker International does not share Personal Information of California residents for the purpose of cross-context behavioural advertising, and has not done so in the preceding 12 months.

Because we do not sell or share Personal Information in the CCPA-defined sense, the “Do Not Sell or Share My Personal Information” link required by Cal. Civ. Code § 1798.135 nonetheless appears below for transparency:

Do Not Sell or Share My Personal Information

This link allows you to (a) confirm your global Do-Not-Track preference, (b) opt out of analytics cookies on this site, and (c) submit a written instruction to us that we may receive in future.

5. Your rights as a California resident

You have the following rights under CCPA. To exercise any of them, email privacy@harker.international with subject “California Resident, [right being exercised].”

• Right to Know: Cal. Civ. Code § 1798.100, § 1798.110, § 1798.115. A description of the categories of Personal Information collected, sources, purposes, and recipients (this notice satisfies most of that). On request, we will also provide the specific pieces of Personal Information we have collected about you over the preceding 12 months.
• Right to Delete: Cal. Civ. Code § 1798.105. Request deletion of Personal Information we have collected about you, subject to the exceptions in § 1798.105(d) (records we must retain for tax/customs law, transactions you have requested, dispute resolution, etc.).
• Right to Correct: Cal. Civ. Code § 1798.106. Request correction of inaccurate Personal Information we hold about you. We will use commercially reasonable efforts.
• Right to Opt-Out of Sale or Sharing, Cal. Civ. Code § 1798.120. As stated in section 4, we do not sell or share Personal Information; the opt-out is nonetheless available via the link above.
• Right to Limit Use of Sensitive Personal Information, Cal. Civ. Code § 1798.121. As stated in section 3, we do not collect Sensitive Personal Information; this right does not require active exercise.
• Right to Non-Discrimination: Cal. Civ. Code § 1798.125. We will not deny goods or services, charge a different price, or provide a different quality of service because you exercised a CCPA right.
• Right to Data Portability, Cal. Civ. Code § 1798.130(a)(2). Where we provide Personal Information in response to a Right to Know request, we provide it in a portable, readily usable format.

6. How to verify your request

To protect your Personal Information from unauthorized disclosure, we verify the identity of the requester before fulfilling a Right to Know, Delete, or Correct request:

• For account-holder requests, sending the request from the email address associated with your account is generally sufficient; we may request additional confirmation for high-value or sensitive data.
• For requests from a person without an account but whose Personal Information we hold (e.g. consignee data routed through a Vendor), we require at least two data points that match our records (e.g. business name + email used in correspondence) to verify the request.
• We do not require you to create an account in order to make a request.

We respond to verifiable requests within 45 calendar days. If we need an extension (up to a further 45 days), we will tell you in writing within the first 45 days.

7. Authorized agents

You may use an authorized agent to submit a CCPA request on your behalf. The agent must provide:

• A signed written authorization from you (a copy of a power of attorney executed under Cal. Probate Code §§ 4000 to 4465 also qualifies).
• Verification of the agent’s own identity.
• Verification of your identity directly with us, except where the authorization document already establishes it to a comparable standard.

8. Retention

We retain Personal Information for as long as your account is active and for the periods described in our Gizlilik Politikası. Tax and customs records are retained for 6 years under Sri Lankan law; transaction dispute records are retained for 5 years.

9. Notice of financial incentive

We do not offer financial incentives in exchange for the collection, sale, or sharing of Personal Information.

10. Categories of third parties to whom Personal Information has been disclosed for a business purpose (last 12 months)

• Vendors with whom you have transacted (for order fulfillment).
• HNB IPG, once its card gateway is live (for card-payment processing).
• HNB Sri Lanka (for wire-transfer settlement).
• Sub-processors listed in our Data Processing Addendum: hosting, CDN, analytics, transactional email.
• Where required by law, government and law-enforcement authorities (e.g. tax, customs, AML/CFT, regulatory subpoenas).

None of the above disclosures constitutes a “sale” or “sharing” of Personal Information within the meaning of CCPA.

11. Contact

For all California-resident privacy matters:

12. Notice of changes

Material changes to this notice will be communicated by updating the “Last updated” date at the top and, where the change materially affects rights or practices, by a notice on the homepage.