1. Scope & Legal Framework
This Privacy Policy applies to all personal information collected and processed by Udan Enterprises (Pvt) Ltd through our official website (zubooudan.com), our customer support channels (telephone, WhatsApp, and email), and our physical showroom located on Udugama Road, Kurunduwatta, Pinnaduwa, Galle, Sri Lanka.
We operate as a lawful Data Controller in strict alignment with the Personal Data Protection Act (PDPA) No. 9 of 2022 of the Democratic Socialist Republic of Sri Lanka. Our processing practices respect the core data protection principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity.
2. Personal Data We Collect
Depending on how you interact with Udan Enterprises, we may collect and maintain the following categories of data:
Customer Inquiries & Quotes
- Full Name and preferred title
- Telephone and WhatsApp contact number
- Email address
- City / District of residence (e.g. Galle, Matara)
- Vehicle model of interest (e.g. T16, The Tank, GT)
Free Test Ride Appointments
- Sri Lankan National Identity Card (NIC) number
- Valid Driving License details (where required)
- Scheduled test appointment date and timeslot
- Signed safety indemnity & rider disclaimer
Warranty & Vehicle Registration
- Vehicle Identification Number (VIN) / Chassis Number
- Electric Motor Serial Number
- Battery Pack Serial & Chemistry specification
- Purchase invoice number and delivery date
- Periodic maintenance and odometer records
Digital & Browsing Information
- IP address and approximate geographic location
- Browser user agent, screen resolution, operating system
- Referral sources and page navigation patterns
- Essential functional and performance session cookies
3. How We Use Your Information
Udan Enterprises utilizes customer information solely for legitimate automotive business purposes, specifically:
- Scheduling & Conducting Free Test Rides: Verifying rider eligibility, coordinating showroom course safety, and confirming booking appointments via SMS or WhatsApp.
- Official Zuboo Factory Warranty Registration: Registering vehicle chassis numbers, motors, and battery packs with Zuboo factory databases to ensure prompt honors for our 2-Year Motor & Battery and 3-Year Chassis warranty pledges.
- After-Sales Servicing & Technical Recalls: Alerting owners of scheduled maintenance inspections, software updates, battery health checks, or safety notices.
- Customer Inquiries & Quotation Requests: Generating formal proforma invoices, price breakdowns, and financing support documentation upon explicit customer request.
- Statutory & Tax Compliance: Maintaining lawful sales records and fiscal documents required by the Inland Revenue Department (IRD) and Sri Lankan commercial law.
4. Data Security & Storage Measures
We implement automotive-grade organizational, technical, and physical security measures to protect your personal data from unauthorized disclosure, destruction, loss, or alteration:
- Transport Layer Security (TLS/HTTPS): All web traffic and digital form submissions on
zubooudan.comare protected with modern 256-bit SSL encryption. - Restricted Dealership Access: Customer records and warranty documents are strictly accessible only by authorized dealership management and service department staff at our Pinnaduwa showroom.
- Secure Cloud Infrastructure: Inquiries and digital records are stored using secure cloud databases backed by Google Cloud / Firebase enterprise security protocols.
- Physical Showroom Security: Paper invoices, warranty cards, and identity photocopies are stored in locked administrative archives with monitored showroom access control.
5. Third-Party Disclosures & Partner Sharing
We do not sell, rent, trade, or monetize your personal information to third-party marketing brokers under any circumstances.
Data is only shared in the following bounded and transparent operational contexts:
- Zuboo OEM Manufacturing Division: Chassis numbers and technical battery metrics are shared with Zuboo factory systems for digital warranty activation, parts provisioning, and safety bulletins.
- Authorized Financing & Leasing Partners: If you explicitly apply for electric bike financing, we transmit quotation documentation to your chosen financial institution (e.g. LOLC Finance, Commercial Bank, CDB, LB Finance) with your prior written consent.
- Government Authorities: Where compelled by valid legal subpoenas, court orders, or statutory mandates from Sri Lankan regulatory bodies such as the Department of Motor Traffic (DMT).
6. Your Rights Under Sri Lanka PDPA No. 9 of 2022
Under the Sri Lanka Personal Data Protection Act No. 9 of 2022, as a data subject, you hold clear statutory rights:
Right of Access & Confirmation
You have the right to request confirmation of whether we process your personal data and to obtain a summary copy of your warranty and service file.
Right to Rectification
If your contact details, phone number, residential address, or ownership credentials change, you may request an immediate correction in our records.
Right to Withdraw Consent
Where data processing relies on your voluntary consent (such as promotional updates or WhatsApp catalogs), you may withdraw that consent at any time without penalty.
Right to Erasure (“Right to be Forgotten”)
You may request the deletion of prospective inquiry data. Please note that active vehicle warranty records and tax invoices must be retained for the minimum statutory period under Sri Lankan commercial law.
7. Data Retention Policy
We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered:
- Warranty & Chassis History: Retained for the full operational lifecycle of the vehicle (minimum 7 years) to honor warranty obligations, manage battery recycling, and enable genuine spare parts matching.
- Test Ride Registration Records: Retained for 12 months following the appointment for safety audit and liability compliance.
- General Web Inquiries: Inactive sales inquiries are automatically purged or anonymized after 18 months.
9. Contact Information & Dealership Office
If you have questions regarding this Privacy Policy, wish to review your stored personal data, or require formal assistance under the Sri Lanka PDPA, please contact our showroom office directly: