Your Privacy
Matters to Us
We keep things simple and transparent. Here's exactly what data we collect, why we collect it, and how we protect it.
Last updated: April 14, 2026
PothHub is a Sri Lankan book marketplace operated by Thisul Bimsara. This policy explains how we handle the personal information you share with us when using our platform. By using PothHub, you agree to the practices described here.
Information We Collect
Account Information
When you create a PothHub account, we collect your name, email address, and password. If you choose to add a profile photo or phone number, that information is stored as well.
Listing & Transaction Data
When you list a book or complete a purchase, we collect details such as book title, price, condition, delivery address, and payment references. We do not store full card numbers — payments are handled by trusted third-party processors.
Usage Information
We automatically collect information about how you use PothHub: pages visited, search queries, clicks, and the device or browser you use. This helps us improve the platform.
Communications
If you contact us via email or our contact form, we retain that correspondence to resolve your inquiry and improve our support.
How We Use Your Information
To Operate the Marketplace
We use your data to show your listings, connect you with buyers or sellers, process transactions, and send order-related notifications.
To Improve PothHub
Usage data and feedback help us understand what features matter most, fix bugs, and build a better experience for the community.
To Communicate With You
We may send you account-related emails (password resets, listing updates) and, with your permission, occasional newsletters about new features or promotions.
To Keep the Platform Safe
We analyse activity to detect fraudulent listings, spam, or policy violations — protecting both buyers and sellers.
Data Security
How We Protect Your Data
We use industry-standard encryption (HTTPS/TLS) for all data in transit and store passwords using secure hashing. Access to user data is restricted to authorised team members only.
Your Responsibility
Please choose a strong, unique password and never share your login credentials. If you suspect unauthorised access to your account, contact us immediately.
Data Retention
We retain your account data for as long as your account is active. If you delete your account, your personal data is removed within 30 days, except where retention is required by law.
Your Rights
Access & Correction
You can view and update most of your personal information directly from your account settings at any time.
Account Deletion
You may request deletion of your account and associated personal data by contacting us at pothhub1@gmail.com. We will process your request within 7 business days.
Opt-Out of Marketing
Every marketing email includes an unsubscribe link. You can also opt out via your notification preferences in account settings.
Data Portability
You may request a copy of the personal data we hold about you in a machine-readable format by contacting our support team.
Questions about your privacy?
If you have any questions, concerns, or requests regarding this policy or your personal data, reach out — we're happy to help.
This policy may be updated from time to time. We'll notify you of significant changes via email or a notice on the site. Continued use of PothHub after changes means you accept the updated policy.