Legal
Privacy Policy
Weenuz ("we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website and event ticketing platform at weenuz.lk.
1. Information We Collect
Information you provide directly
- Account information: Name, email address and password when you register an account (via email or Google Sign-In).
- Purchase information: First name, last name, email address and phone number entered when booking tickets.
Information collected automatically
- Device & usage data: IP address, browser type, pages visited and time spent on our site.
- Cookies: Session cookies required for authentication. We do not use advertising trackers.
Information we do not collect
- We do not store your payment card details. Payment is processed entirely by PayHere, a PCI-DSS-compliant third-party payment gateway.
2. How We Use Your Information
- To process your ticket purchases and send confirmation emails.
- To create and manage your Weenuz account.
- To send transactional communications (booking confirmations, event updates, cancellation notices).
- To prevent fraud and ensure security of our platform.
- To comply with legal obligations under applicable Sri Lankan law.
We do not sell, rent, or trade your personal information to any third party for marketing purposes.
3. Third-Party Services
We use the following trusted third-party services to operate our platform:
- Google Firebase- Authentication and database services. Governed by Google's Privacy Policy.
- PayHere - Payment processing for ticket purchases. When you make a purchase, your name, email address, phone number, and billing information are transmitted to PayHere to process your payment. PayHere operates under its own Privacy Policy and PCI-DSS compliance standards. We do not receive or store your full card details at any point.
- Cloudinary - Image hosting for event cover images.
These services may collect data as described in their own privacy policies. We encourage you to review their policies.
4. Cookies
We use a single session cookie (__session) to keep you signed in. This cookie is HttpOnly, Secure and SameSite=Strict - it cannot be accessed by JavaScript and is only transmitted over HTTPS. It expires after 7 days of inactivity.
We do not use advertising cookies, cross-site trackers, or analytics cookies.
5. Data Security
We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), secure HttpOnly session cookies, and access-controlled server infrastructure. Passwords are hashed using bcrypt and are never stored in plain text.
No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Data Retention
We retain your account information for as long as your account remains active. Purchase records may be retained for up to 7 years for accounting and legal compliance purposes. You may request deletion of your account and associated data at any time by contacting us.
7. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your account and associated data (subject to legal retention requirements).
- Withdraw consent for any processing based on consent at any time.
To exercise any of these rights, email us at support@weenuz.lk.
8. Children's Privacy
Our platform is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our platform after changes are posted constitutes your acceptance of the revised policy.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us:
- Email: support@weenuz.lk
- Website: weenuz.lk