Download
legi
Privacy Policy
Last updated: June 1, 2026
This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights.
Blicq operates as a payment facilitator and aggregator. We do not issue digital wallets or hold user funds. We enable You to link Your existing bank accounts or payment cards to seamlessly execute LANKAQR payments. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy, in compliance with the Personal Data Protection Act, No. 9 of 2022 (PDPA) of Sri Lanka.
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- You: the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
- Account: a unique account created for You to access our Service or parts of our Service.
- Affiliate: an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
- Application: refers to Blicq, the software program provided by the Company.
- Company: refers to Blicq (Pvt) Ltd, 135b Rajagiriya Rd, Rajagiriya, Sri Lanka.
- Country: refers to Sri Lanka.
- Device: any device that can access the Service such as a computer, a cell phone, or a digital tablet.
- Personal Data: any information that relates to an identified or identifiable individual.
- Service: refers to the Application.
- Service Provider: any natural or legal person who processes the data on behalf of the Company.
- Usage Data: refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Collecting and Using Your Personal Data
Types of Data Collected
A. Basic Account Data
Since Blicq acts as a pass-through payment platform, we require minimal information to create Your secure profile:
- First Name and Last Name
- Email address
- Mobile Phone number
B. Financial and Transaction Data
To facilitate payments between Your linked funding source and the merchant, we collect:
- Tokenized Payment Information: We do not store Your full credit/debit card numbers or bank account credentials. We use secure, bank-grade tokenization through our licensed acquiring partners. We only store masked details (e.g., the last 4 digits of Your card) for Your reference.
- Transaction History: Details of Your LANKAQR payments, including merchant name, location, time, amount, and applied Blicq rewards/discounts.
C. Usage and Device Data
Collected automatically to ensure app security and optimize performance: IP address, device type, mobile OS, unique device identifiers (UUID), and diagnostic data.
D. Location Data
With Your explicit permission, we collect real-time geo-location data. This is strictly used to verify You are at the merchant's location when scanning a QR code (fraud prevention) and to show You nearby Blicq-supported locations.
3. Lawful Bases and Use of Your Personal Data
Under the Sri Lanka PDPA, we process your data under the following lawful bases:
- Account Creation & Support: Processed under the basis of Performance of a Contract.
- Facilitating LANKAQR Payments via Linked Cards/Accounts: Processed under the basis of Performance of a Contract.
- Fraud Prevention & Security Monitoring: Processed under the basis of Legitimate Interest & Compliance with Legal Obligations.
- Push Notifications & Marketing Offers: Processed under the basis of Your Explicit Consent (This can be withdrawn by You at any time).
4. Sharing Your Personal Data
The Company may use Personal Data for the following purposes:
We never sell Your data. We share Your information only to make payments happen:
- With Payment Gateways and Partner Banks: Your encrypted payment requests are routed through licensed financial institutions in Sri Lanka to process the LANKAQR transaction.
- With Merchants: When You pay, the merchant only sees a transaction ID, Your masked name, and the payment status. They do not see Your card or bank details.
- With Law Enforcement: If legally required by authorities (e.g., Central Bank of Sri Lanka) to investigate fraudulent activities.
5. Your Rights Under Sri Lanka PDPA
- Access and Rectify: Request a copy of your data or correct it via the app.
- Erasure (Right to be Forgotten): You can request account deletion. Upon deletion, Your linked payment tokens will be destroyed. (Note: Basic transaction logs may be retained by our partner banks as required by financial regulations).
- Unlink Funding Sources: You can instantly unlink any bank account or card from the Blicq app at any time.
6. Security
We implement PCI-DSS compliant standards through our payment gateway partners. Your sensitive card data never touches our servers directly; it is encrypted and tokenized immediately upon entry.
- Transfer of Your Personal Data
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located (such as secure cloud servers hosted outside of Sri Lanka).
Because Blicq acts as a payment facilitator, Your tokenized payment data may also be routed through international payment networks (e.g., Visa, Mastercard) to process the transaction. This means that Your information may be transferred to — and maintained on — computers located outside of Your state, province, or country where the data protection laws may differ from those of Sri Lanka.
By using the Service and linking Your payment methods, You consent to this transfer.
In accordance with the Sri Lanka Personal Data Protection Act (PDPA No. 9 of 2022), Blicq Asia (Pvt) Ltd ensures that any cross-border transfer of Your Personal Data is subject to appropriate safeguards. We only transfer data to recipients that are bound by legally enforceable instruments (such as standard contractual clauses or binding corporate rules) that guarantee a level of data protection equivalent to the laws of Sri Lanka.
- Delete Your Personal Data
You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.
Since Blicq does not operate a digital wallet and does not hold Your funds, You can manage Your privacy directly within the Application by:
- Unlinking Funding Sources: You can instantly remove or delete any linked bank account or payment card from Your Blicq profile at any time through the account settings. Once unlinked, the secure payment tokens associated with those cards/accounts are permanently destroyed.
- Deleting Your Blicq Account: You can request the full deletion of Your Blicq profile within the app settings or by contacting us.
Please note, however, that while we will immediately delete Your active profile and unlinked payment methods, We may be legally required to retain certain transaction logs and basic identifier data for a statutory period (typically 5 to 7 years) to comply with the Central Bank of Sri Lanka (CBSL) anti-money laundering (AML/CFT) regulations and financial record-keeping laws.
Disclosure of Your Personal Data
Business Transactions
If involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will notify You before that happens.
Law Enforcement
We may disclose Personal Data if legally required or requested by public authorities.
Other Legal Requirements
We may disclose Your Personal Data in good faith to:
- Comply with legal obligations
- Protect and defend Company rights
- Investigate wrongdoing
- Protect users or the public
- Protect against legal liability
Children’s Privacy
We do not knowingly collect Personal Data from children under 13. If you are a parent or guardian and believe Your child has provided Us data, please contact Us. We will delete it. If required by law, we may request parental consent before processing children's data.
Links to Other Websites
Our Service may contain links to third-party websites. We do not control or assume responsibility for their content or privacy practices. We strongly advise You to review their Privacy Policies.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with an updated “Last updated” date.
We may notify You by email or a prominent notice before changes take effect. Please review this page periodically.
Contact Us
If you have any questions about this Privacy Policy, You can contact us:
If you have any questions about this Privacy Policy, You can contact us:
- By email: privacypolicy@blicq.io
- By visiting: http://blicq.io/contact
legi
info@blicq.io
Blicq (Pvt) Ltd
Address : 135b Rajagiriya Rd, Rajagiriya, Sri Lanka
Headquarter Office -
IN : S.A., 14A, Rue des Bains, Luxembourg
© 2026 Blicq. All rights reserved.
Privacy Policy
Last updated: June 1, 2026
This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights.
Blicq operates as a payment facilitator and aggregator. We do not issue digital wallets or hold user funds. We enable You to link Your existing bank accounts or payment cards to seamlessly execute LANKAQR payments. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy, in compliance with the Personal Data Protection Act, No. 9 of 2022 (PDPA) of Sri Lanka.
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- You: the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
- Account: a unique account created for You to access our Service or parts of our Service.
- Affiliate: an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
- Application: refers to Blicq, the software program provided by the Company.
- Company: refers to Blicq (Pvt) Ltd, 135b Rajagiriya Rd, Rajagiriya, Sri Lanka.
- Country: refers to Sri Lanka.
- Device: any device that can access the Service such as a computer, a cell phone, or a digital tablet.
- Personal Data: any information that relates to an identified or identifiable individual.
- Service: refers to the Application.
- Service Provider: any natural or legal person who processes the data on behalf of the Company.
- Usage Data: refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Collecting and Using Your Personal Data
Types of Data Collected
A. Basic Account Data
Since Blicq acts as a pass-through payment platform, we require minimal information to create Your secure profile:
- First Name and Last Name
- Email address
- Mobile Phone number
B. Financial and Transaction Data
To facilitate payments between Your linked funding source and the merchant, we collect:
- Tokenized Payment Information: We do not store Your full credit/debit card numbers or bank account credentials. We use secure, bank-grade tokenization through our licensed acquiring partners. We only store masked details (e.g., the last 4 digits of Your card) for Your reference.
- Transaction History: Details of Your LANKAQR payments, including merchant name, location, time, amount, and applied Blicq rewards/discounts.
C. Usage and Device Data
Collected automatically to ensure app security and optimize performance: IP address, device type, mobile OS, unique device identifiers (UUID), and diagnostic data.
D. Location Data
With Your explicit permission, we collect real-time geo-location data. This is strictly used to verify You are at the merchant's location when scanning a QR code (fraud prevention) and to show You nearby Blicq-supported locations.
3. Lawful Bases and Use of Your Personal Data
Under the Sri Lanka PDPA, we process your data under the following lawful bases:
- Account Creation & Support: Processed under the basis of Performance of a Contract.
- Facilitating LANKAQR Payments via Linked Cards/Accounts: Processed under the basis of Performance of a Contract.
- Fraud Prevention & Security Monitoring: Processed under the basis of Legitimate Interest & Compliance with Legal Obligations.
- Push Notifications & Marketing Offers: Processed under the basis of Your Explicit Consent (This can be withdrawn by You at any time).
4. Sharing Your Personal Data
The Company may use Personal Data for the following purposes:
We never sell Your data. We share Your information only to make payments happen:
- With Payment Gateways and Partner Banks: Your encrypted payment requests are routed through licensed financial institutions in Sri Lanka to process the LANKAQR transaction.
- With Merchants: When You pay, the merchant only sees a transaction ID, Your masked name, and the payment status. They do not see Your card or bank details.
- With Law Enforcement: If legally required by authorities (e.g., Central Bank of Sri Lanka) to investigate fraudulent activities.
5. Your Rights Under Sri Lanka PDPA
- Access and Rectify: Request a copy of your data or correct it via the app.
- Erasure (Right to be Forgotten): You can request account deletion. Upon deletion, Your linked payment tokens will be destroyed. (Note: Basic transaction logs may be retained by our partner banks as required by financial regulations).
- Unlink Funding Sources: You can instantly unlink any bank account or card from the Blicq app at any time.
6. Security
We implement PCI-DSS compliant standards through our payment gateway partners. Your sensitive card data never touches our servers directly; it is encrypted and tokenized immediately upon entry.
- Transfer of Your Personal Data
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located (such as secure cloud servers hosted outside of Sri Lanka).
Because Blicq acts as a payment facilitator, Your tokenized payment data may also be routed through international payment networks (e.g., Visa, Mastercard) to process the transaction. This means that Your information may be transferred to — and maintained on — computers located outside of Your state, province, or country where the data protection laws may differ from those of Sri Lanka.
By using the Service and linking Your payment methods, You consent to this transfer.
In accordance with the Sri Lanka Personal Data Protection Act (PDPA No. 9 of 2022), Blicq Asia (Pvt) Ltd ensures that any cross-border transfer of Your Personal Data is subject to appropriate safeguards. We only transfer data to recipients that are bound by legally enforceable instruments (such as standard contractual clauses or binding corporate rules) that guarantee a level of data protection equivalent to the laws of Sri Lanka.
- Delete Your Personal Data
You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.
Since Blicq does not operate a digital wallet and does not hold Your funds, You can manage Your privacy directly within the Application by:
- Unlinking Funding Sources: You can instantly remove or delete any linked bank account or payment card from Your Blicq profile at any time through the account settings. Once unlinked, the secure payment tokens associated with those cards/accounts are permanently destroyed.
- Deleting Your Blicq Account: You can request the full deletion of Your Blicq profile within the app settings or by contacting us.
Please note, however, that while we will immediately delete Your active profile and unlinked payment methods, We may be legally required to retain certain transaction logs and basic identifier data for a statutory period (typically 5 to 7 years) to comply with the Central Bank of Sri Lanka (CBSL) anti-money laundering (AML/CFT) regulations and financial record-keeping laws.
Disclosure of Your Personal Data
Business Transactions
If involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will notify You before that happens.
Law Enforcement
We may disclose Personal Data if legally required or requested by public authorities.
Other Legal Requirements
We may disclose Your Personal Data in good faith to:
- Comply with legal obligations
- Protect and defend Company rights
- Investigate wrongdoing
- Protect users or the public
- Protect against legal liability
Children’s Privacy
We do not knowingly collect Personal Data from children under 13. If you are a parent or guardian and believe Your child has provided Us data, please contact Us. We will delete it. If required by law, we may request parental consent before processing children's data.
Links to Other Websites
Our Service may contain links to third-party websites. We do not control or assume responsibility for their content or privacy practices. We strongly advise You to review their Privacy Policies.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with an updated “Last updated” date.
We may notify You by email or a prominent notice before changes take effect. Please review this page periodically.
Contact Us
If you have any questions about this Privacy Policy, You can contact us:
If you have any questions about this Privacy Policy, You can contact us:
- By email: privacypolicy@blicq.io
- By visiting: http://blicq.io/contact
© 2026 Blicq. All rights reserved.
info@blicq.io
Blicq (Pvt) Ltd
Address : 135b Rajagiriya Rd, Rajagiriya, Sri Lanka
Headquarter Office - IN : S.A., 14A, Rue des Bains, Luxembourg
info@blicq.io
Blicq (Pvt) Ltd
Address : 135b Rajagiriya Rd, Rajagiriya, Sri Lanka
Headquarter Office - IN : S.A., 14A, Rue des Bains, Luxembourg
© 2026 Blicq. All rights reserved.