Last updated Effective 29 October 2026
This policy explains what personal information JNK Motors collects when you use jnkmotors.lk or buy from us, why we collect it, who we share it with, how long we keep it, and what you can ask us to do.
We collect what we need to sell and deliver car parts: your contact details, your delivery address, your orders and payments, and the cars you save. We never see your full card number. You type your card details on PayHere's page, not ours.
We do not sell your information, show you adverts or use tracking cookies. We send texts and emails about your orders and sign-in. We send no marketing.
Our website and database run on a server in Singapore. Our emails are sent by a United States company from its servers in Japan, and our email inbox is with Google. Cloudflare protects the site from its worldwide network.
Our system decides whether to offer cash on delivery, based on the delivery history of your phone number. Card or bank transfer is always offered instead. You can ask a person to review the decision.
If you have an account, you can download your data or delete your account at jnkmotors.lk/account/privacy. A deletion waits 7 days, so you can change your mind. Order and invoice records stay for as long as tax law requires.
Questions or requests go to our privacy contact at [email protected]. We reply within one month, free of charge.
J N K Motors trades as JNK Motors. We sell car spare parts in Sri Lanka through jnkmotors.lk. We decide how your personal information is used, so we are responsible for it.
In this policy, "we" and "us" mean J N K Motors trading as JNK Motors. "You" means anyone who uses our website or buys from us.
Our privacy contact deals with every question, request and complaint about your personal information. Email [email protected] with "Privacy" in the subject line, or call 077 737 0138.
We have not appointed a Data Protection Officer.
This policy covers the personal information we collect through jnkmotors.lk, when you order from us, when you ask us to find a part, and when you contact us.
When you pay on PayHere's page, sign in on Google's page, email us (our inbox is with Google) or message us on WhatsApp, those companies also handle your information under their own privacy policies.
You can look around the shop without an account and without telling us who you are.
You can create an account with an email address and a password, sign in with Google, or sign in with a code we text to your mobile.
The same applies whether you have an account or check out as a guest.
If you cannot find a part, you can ask us to find it at jnkmotors.lk/request-a-part. Our staff call you back.
Sometimes we get information about you from someone else. None of it comes from public sources.
We use your information only when we have a lawful reason. Here is each use and the reason for it.
Where we say "legitimate interest", we mean a fair reason of our own, which we rely on only where it does not override your interests and privacy.
When you choose cash on delivery at checkout (or cash when you collect), our system decides on its own whether to offer it for that order, and up to what amount. No person looks at it at that moment.
It looks at the mobile number on the order, in a scrambled form. It counts how many cash-on-delivery parcels to that number were delivered, checks whether any parcel to that number was refused or came back undelivered in the last 180 days, and adds up what is still unpaid on that number's open cash-on-delivery orders. It also looks at the order total, and at whether the order has a part we never send cash on delivery.
These are the rules it follows:
It decides only how you can pay. We never refuse to sell to you because of it. Card or bank transfer is always offered instead, with no limit.
The message at checkout tells you when a part in your basket cannot go cash on delivery, or the most you can pay in cash on this order. It does not say whether your delivery history was the reason.
We do not charge you for a refused parcel. The only effect of a refusal is on cash on delivery. If you refused a parcel because it was damaged, wrong or not what you ordered, tell us, so it does not count against you.
If you think the decision is wrong, for example because a parcel was refused through our mistake or the courier's, contact our privacy contact. A member of our staff will review your history, tell you the result and the reason, and correct our records if they are wrong.
We do not sell your information, and we do not share it for advertising. Inside our shop, only the staff who need your details can see them.
We share your information only with the companies and people below, each for one job, and we give each only what it needs for that job. PayHere, Google and WhatsApp also handle it under their own privacy policies.
Some of the companies above keep or handle your information outside Sri Lanka.
We protect your information abroad in these ways.
We keep information only as long as we need it for the reason we collected it, or as long as the law requires. Our systems delete or remove most of it automatically, on these timetables.
Some records have to outlive the periods above.
You can ask us to do any of these, free of charge:
If you have an account, sign in and go to Your account, then Your data (jnkmotors.lk/account/privacy), and choose Request a copy. It is usually ready within a few minutes. You download it from the same page. Today we do not delete this copy automatically, even if you later delete your data. We are changing this so it is deleted 30 days after it is ready.
The file holds your account details, saved cars, saved parts, basket, what you agreed to and when, the times you signed in, and your part requests.
Your orders and invoices are on your orders page (jnkmotors.lk/account/orders), where you can download each invoice.
If you want anything else we hold, such as the photos you sent with a part request, contact our privacy contact.
If you have an account, sign in and go to Your data (jnkmotors.lk/account/privacy), and choose Delete my data. To protect you, we ask you to sign in again and type DELETE.
Your deletion then waits 7 days. During that time the page shows the date it will happen and a button to cancel it. Signing in does not cancel it; only the button does. After the 7 days it cannot be undone.
When the 7 days are up, we:
Deleting your data removes your details from your account and closes it. It does not wipe every record, for these reasons:
The Your data page works only when you are signed in to an account. If you ordered without an account, contact our privacy contact for a copy of your information or to have it deleted.
Before we act, we will ask for your order number and check that you are the person on the order, for example by calling the mobile number on it.
You can add and remove saved cars in My Garage, and remove saved parts, yourself.
To correct your name, email address or mobile number, or a detail on an order, contact our privacy contact.
A tax invoice cannot be changed once it is issued. If yours has a mistake, tell us and we will record the correction.
Where we rely on your consent, you can withdraw it at any time by contacting our privacy contact. Withdrawing does not affect what we did before you withdrew.
If you no longer want your account linked to Google, contact us and we will remove the link. First make sure you can still sign in another way, with your email address and a password, or with a code sent to your mobile.
Where we use your information for our legitimate interests, you can ask us to stop. We will stop unless the law allows us to continue, for example because a law requires us to keep the record, or to prevent or investigate a crime such as fraud. We will tell you what we decided and why, and that you can take it to the Data Protection Authority.
The cash-on-delivery check is needed for us to offer cash on delivery at all. If you object to it, you can still pay by card or bank transfer.
Send your request to our privacy contact at [email protected] or 077 737 0138, or use the Your data page.
Before we act, we may ask for information to confirm who you are, so that nobody else can get or delete your information. Someone else can ask for you if you authorise them in writing. A parent or guardian can ask for a child.
We reply within one month of receiving your request. If we need longer, up to 2 more months, we tell you why before the first month ends.
There is no charge.
If we cannot do what you ask, for example because tax law requires us to keep a record, we tell you why, and that you can take the matter to the Data Protection Authority.
If you are unhappy with how we handle your information, please tell our privacy contact first. We will try to put it right.
You can also contact the Data Protection Authority of Sri Lanka:
Giving us information is your choice, and you can browse without telling us who you are. But we need some details to sell to you, and once you buy, tax law requires us to keep the details on your invoice.
No website can be made completely safe, but we take the steps below. Please keep your password and sign-in codes to yourself, and tell us straight away if you think someone else has used your account.
We use only the cookies the site needs to work: to keep you signed in, keep your basket, remember the vehicle you chose, protect sign-in, and finish a Google sign-in. We use no advertising or tracking cookies, so we do not ask you to accept cookies. The full list, with how long each lasts, is at jnkmotors.lk/cookies.
Cloudflare, which protects this site, may set its own short-lived security cookies to tell people from automated traffic. When you pay on PayHere's page, PayHere may set its own cookies there.
If your information is lost, stolen, changed or seen by someone who should not see it, we will act at once to stop it and limit the harm.
We will tell the Data Protection Authority, and we aim to do so within 72 hours of finding out. If there is a high risk to you, we will also tell you directly, with what happened and what you should do.
Our shop is for adults. You must be 18 or over to create an account or place an order.
We do not knowingly collect information about children under 16. If you are a parent or guardian and think your child has given us information, contact our privacy contact. We will delete it, keeping only what the law requires us to keep.
We do not send marketing messages today.
If we start, we will send them only if you have said yes. We will ask separately from placing an order or creating an account, and you will never have to say yes to buy from us. Every marketing message will say who it is from and how to stop, and stopping will be free.
Messages about your orders, deliveries and sign-in are not marketing. We send them as part of our service.
We may update this policy. The effective date at the top changes with each new version.
We record which version was live when you placed an order, or created an account with an email address and password.
Before we use your information for a new purpose, or make another important change, we will tell you. We will say so on this page and, where the change affects you and we have your contact details, by email or text.
This policy is written in English. If we publish it in Sinhala or Tamil and a version differs from the English, you may rely on whichever is more favourable to you.