Lift

Ready when you are

0%

Privacy Information

Understand how we collect, use, and protect your data across the Lift platform.

Lift Holdings (Pvt) Ltd

Privacy Policy

Effective Date: 20 February 2019 | Last Updated: 2026

Introduction

This Privacy Policy provides you (referred to as "User") with information about the nature, scope, and purpose of the collection and use of data shared with or collected by Lift Holdings (Pvt) Ltd ("Lift Holdings") through its services.

"User" means any person that downloads and/or registers with Lifttaxi as a Passenger or a Driver to obtain the Service. "Service" means the services facilitated by the Lifttaxi website or mobile applications (Customer App and Driver App) through which Passengers can access and order taxi services provided by Drivers at various locations.

Lift Holdings will collect and process the User's data to provide and improve the Service and the User hereby agrees to the collection and use of such data in accordance with this Privacy Policy. Unless otherwise defined in this Privacy Policy, terms used herein have the same meanings as in the Lift Holdings Terms and Conditions.

This Privacy Policy applies to both the Lifttaxi Customer Application and the Lift Driver Application.

1. Data We Collect

Lift Holdings collects the following categories of personal data depending on the User's role (Passenger or Driver):

1.1 Personal Data

Personal data submitted by Users includes: full name, email address, telephone number, gender, profile picture, residential address, and any other personal information the User chooses to provide during registration or use of the Service.

Driver Users additionally provide: vehicle details (make, model, registration number), driving licence information, and National Identity Card details where required for verification.

All personal data is collected, stored, and processed in accordance with applicable data protection laws, including the Personal Data Protection Act No. 9 of 2022 of Sri Lanka (as amended).

1.2 Location Data

Lift Holdings collects precise, real-time GPS location data from the User's device for the following purposes:

  • Passenger App: to identify the User's pick-up and drop-off locations and to display nearby available Drivers.
  • Driver App: to match the Driver with nearby Passengers, provide navigation guidance, calculate fares based on distance and route, and support passenger safety monitoring.

Location data is collected while the application is active, including when the Driver App is running in the background. Background location access is required for the Driver App to function correctly — specifically to maintain trip continuity and ensure accurate fare calculation when the screen is off or the app is not in the foreground. Users may disable location access through their device settings; however, doing so will prevent core features of the Service from operating.

1.3 Usage Data

Lift Holdings may collect data about how the User interacts with the Service, including: IP address, browser type and version, device type and model, operating system and version, unique device identifiers, advertising identifiers, app features accessed, pages visited, time and date of visits, time spent on pages, crash reports, and other diagnostic data.

1.4 Transaction Data

Lift Holdings collects transaction data related to use of the Service, including: type of service requested, date and time of service, distance travelled, fare amount, payment method used, trip history, and other related transaction details. Call and message data (date, time, and content of communications between Passengers and Drivers facilitated through the App) may also be collected.

1.5 Tracking and Cookies Data

Lifttaxi uses cookies and similar tracking technologies (including beacons, tags, and scripts) to track activity on the Service and to improve and analyse the Service. Users can instruct their browser to refuse all cookies or to indicate when a cookie is being sent. Refusing cookies may limit certain features of the Service.

1.6 Contacts Data

With the User's explicit permission, Lift Holdings may access the User's device contacts list to facilitate social features or for referral purposes. Permission will be sought through the device's standard permission system and may be revoked at any time through device settings.

1.7 Data from Third-Party Sources

Lift Holdings may receive User data from third-party sources, including payment providers, social media platforms used to connect to Lifttaxi, or from an employer where the employer is registered with Lifttaxi for corporate services.

1.8 Camera and Media Access

Where the User grants permission, Lift Holdings may access the device camera and photo library for the following purposes:

  • All Users: to upload and update a profile photograph within the App.
  • Driver Users: to upload vehicle and identity documents required for Driver verification (e.g. driving licence, National Identity Card, vehicle registration certificate).

Camera and photo library access is requested through the device's standard permission system at the time the relevant feature is used. Users may revoke this permission at any time through their device settings; however, doing so will prevent profile photo updates and, for Drivers, the submission of verification documents.

2. How We Use Your Data

Lift Holdings uses the data collected for the following purposes:

  • To provide, maintain, and improve the Service
  • To match Passengers with available Drivers
  • To process payments and settlements
  • To facilitate communication between Passengers and Drivers
  • To calculate fares and generate trip records
  • To notify Users of changes to the Service
  • To provide customer support
  • To monitor usage and detect, prevent, and address technical issues and fraud
  • To comply with applicable legal obligations
  • To send service-related communications via email or in-app notification

3. Sharing and Disclosure of Data

Lift Holdings may share User data in the following circumstances:

Service Providers

Lift Holdings shares data with contracted third-party service providers who act as data processors on its behalf. Each such provider is bound by contractual obligations requiring them to maintain the same standard of privacy protection as Lift Holdings, to process personal data only for the specific purposes for which it is disclosed, and to act solely in accordance with Lift Holdings' instructions. These contracted data processors include:

  • HNB Payment Gateway (Hatton National Bank PLC): Payment card and electronic transaction data is processed directly by HNB Payment Gateway, acting as a contracted data processor. Lift Holdings does not store full card or payment credentials. HNB is contractually obligated to maintain the confidentiality of payment data and to use it only for the purpose of processing and settling transactions on behalf of Lift Holdings. The use of payment data by HNB is also governed by HNB's own Privacy Policy, available at https://www.hnb.net.
  • Analytics Providers: Third-party analytics providers may collect usage data through cookies, SDKs, and similar technologies to help Lift Holdings understand how the Service is used. Such providers act as contracted data processors and are prohibited from using this data for their own independent purposes.
  • Mapping and Navigation Providers: Location data is shared with mapping service providers to enable navigation and distance calculation features. Such providers act as contracted data processors and may only use location data for the purposes of delivering navigation and routing services to Lift Holdings.

All contracted data processors are selected on the basis that they can provide sufficient guarantees of appropriate technical and organisational measures to ensure that processing meets the requirements of applicable data protection law and protects the rights of Users.

Between Users

Limited data (such as a Driver's name, vehicle details, and profile photo, or a Passenger's name and pick-up location) is shared between Passengers and Drivers to facilitate a specific trip. Such data must not be used for any purpose beyond the trip itself.

Legal Obligations

Lift Holdings may disclose User data where required to comply with a legal obligation, to protect and defend the rights or property of Lift Holdings, to prevent or investigate wrongdoing, or to protect the personal safety of Users or the public.

Business Transfers

In the event Lift Holdings is merged with or acquired by another entity, User data may be transferred as part of that transaction.

Lift Holdings does not sell User personal data to third parties.

4. Payment Data

Lift Holdings will not store or collect payment card details. Such information is transmitted directly to and processed by HNB Payment Gateway (Hatton National Bank PLC), acting as a contracted data processor on behalf of Lift Holdings. HNB is contractually obligated to handle payment data with the same standard of confidentiality and data protection as required of Lift Holdings under this Privacy Policy and applicable law, and to use such data solely for the purposes of payment processing and settlement. The use of payment data by HNB is also governed by HNB's own Privacy Policy, available at https://www.hnb.net.

5. Data Retention

Lift Holdings retains User data for as long as is necessary for the purposes set out in this Privacy Policy, and in any event for no longer than 7 years following account closure, unless a shorter or longer period is required by applicable law.

Usage data is generally retained for a shorter period, except where it is used to strengthen the security or improve the functionality of the Service, or where Lift Holdings is legally obligated to retain it for a longer period.

Upon account deletion, Lift Holdings will delete or anonymise the User's personal data within 30 days, except where retention is required for tax, fraud prevention, dispute resolution, or other legal purposes.

6. Your Rights Under the PDPA

In accordance with the Personal Data Protection Act No. 9 of 2022 of Sri Lanka, Users have the following rights in respect of their personal data:

  • Right of Access: to request a copy of the personal data Lift Holdings holds about them.
  • Right to Correction: to request correction of inaccurate or incomplete personal data.
  • Right to Deletion: to request deletion of personal data, subject to any legal retention obligations.
  • Right to Object: to object to the processing of personal data in certain circumstances.
  • Right to Withdraw Consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

How to withdraw consent or manage permissions: Users may withdraw consent for specific data collection at any time using the following methods:

  • Location access: disable via device Settings → Privacy → Location Services (iOS) or Settings → Apps → Lift App → Permissions → Location (Android).
  • Camera and photo library access: disable via device Settings → Privacy → Camera / Photos (iOS) or Settings → Apps → Lift App → Permissions (Android).
  • Contacts access: disable via device Settings → Privacy → Contacts (iOS) or Settings → Apps → Lift App → Permissions → Contacts (Android).
  • All other data processing: submit a written withdrawal request to Lift Holdings using the contact details in Section 14 below.

To exercise any other rights listed above, Users may contact Lift Holdings using the details in the Contact Us section below, or use the account settings available within the App.

7. Account Deletion

Users may delete their account at any time by using the account deletion option within the App under Profile Settings, or by contacting Lift Holdings via the support contact provided. Upon deletion, personal data will be handled in accordance with Section 5 above.

8. Data Security

Lift Holdings will take all necessary steps to protect User data from unauthorised disclosure, misuse, unlawful use, modification, loss, or destruction, including the use of encryption in transit (HTTPS/TLS) and at rest. Lift Holdings will ensure compliance with all applicable laws in respect of data protection. However, Lift Holdings does not guarantee the absolute security of data transmitted over the internet.

9. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of Users, Lift Holdings will notify the relevant regulatory authority and affected Users in accordance with the requirements of the Personal Data Protection Act No. 9 of 2022 and any other applicable law. Users are requested to immediately notify Lift Holdings upon becoming aware of any unauthorised access or breach connected to their account.

10. Children and Minors

The Service is intended for users aged 18 and above. Lift Holdings does not knowingly collect personal data from persons under the age of 18. If Lift Holdings becomes aware that personal data has been collected from a minor, it will take steps to delete such data promptly. If you believe a minor has provided personal data to Lift Holdings, please contact us using the details below.

11. Transfer of Data

Lift Holdings may transfer User data to countries outside Sri Lanka for the purposes of processing and storage. Where such transfers occur, Lift Holdings will take appropriate measures to ensure that User data is protected in accordance with this Privacy Policy and applicable law.

12. Links to Other Sites

The Service may contain links to third-party websites or services not operated by Lift Holdings. Lift Holdings assumes no responsibility for the content, privacy policies, or practices of any third-party sites or services.

13. Changes to This Privacy Policy

Lift Holdings reserves the right to modify this Privacy Policy from time to time. Where changes are made, Lift Holdings will notify Users via email to the registered email address and/or via a prominent in-app notice prior to the change taking effect. The updated Privacy Policy will be published at https://www.lifttaxi.lk/privacy with the revised effective date.

14. Contact Us

For any queries in respect of this Privacy Policy, or to exercise any of your data rights, please contact Lift Holdings by any of the following methods:

Consent: By registering for and using the Service, the User confirms that they have read, understood, and agrees to the terms of this Privacy Policy.