Privacy Policy

This website is operated by Innerverse Project in Sri Lanka. If you have questions about this policy or your data, contact us at alokanaverse@gmail.com.

This policy covers our processing of personal data when you purchase tickets and/or physical merchandise via ALOKANA. There is no account creation on the site, and we do not run analytics or marketing trackers at this time.

• Checkout details: first name, last name, email, phone number, shipping address (including city and optional postal code), selected item(s) including size and quantity.
• Transaction data: order ID, payment status (from the payment gateway), amounts, and shipping method.
• Technical basics: standard server logs for security and troubleshooting (IP address, user agent). We do not collect analytics or set marketing cookies right now.

• Process orders and deliver tickets/merch.
• Provide order confirmations and support.
• Prevent fraud and ensure platform security.
• Comply with legal and tax obligations.

Payments are processed by PayHere and KOKO (Buy Now Pay Later). Your card or bank details are handled directly by these providers — we do not store card numbers on our servers.

We receive non-sensitive payment status information (e.g., success, failure, order reference) to complete your order.

For physical merchandise, we share only the necessary delivery information (name, phone, address, item details) with trusted courier/delivery partners to fulfill your order.

Order records (e.g., customer details, items, totals, and statuses) are stored in our secure backend. We plan to host production data on AWS when we go live. This may involve international data transfers subject to appropriate safeguards.

We apply reasonable technical and organizational measures to protect your data against unauthorized access, alteration, or loss.

We process personal data under the Sri Lanka Personal Data Protection Act, No. 9 of 2022 and applicable laws based on:

• Contract: to fulfill your order and deliver products/services you requested.
• Legitimate interests: fraud prevention, platform security, and service improvement.
• Legal obligation: record-keeping, tax, and compliance requirements.

We retain order and transaction records for as long as necessary to provide services and meet legal, accounting, and tax requirements. After the retention period, data is securely deleted or anonymized.

Subject to applicable law, you may request to access, correct, update, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact alokanaverse@gmail.com. We may need to verify your identity and the request scope.

If you believe your rights have been violated, you may also have the right to lodge a complaint with the relevant authority.

Our site is not directed to children. We do not knowingly collect personal data from children without appropriate consent where required by law.

We do not currently use analytics or marketing cookies. If this changes, we will update this policy and provide appropriate notices and choices.

• Payment processors: PayHere, KOKO.
• Delivery partners: to ship merchandise to you.
• Service providers: hosting, security, and operational vendors under confidentiality obligations.
• Legal compliance: where required by law, regulation, or legal process.
• No sale of data: we do not sell your personal data.

We may update this Privacy Policy from time to time. We will post the revised version with an updated “Last updated” date.

For privacy questions or requests, email alokanaverse@gmail.com.