1. Introduction
This Privacy Policy applies to Acorn Ventures (Private) Limited and its affiliated entities
within the Acorn Group (collectively referred to as “Acorn,” “we,” “our,” or “us”). It describes
how we collect, use, share, and protect personal information through our websites,
applications, services, advertisements, and other digital platforms—including the Compass
Club mobile application (Package ID: com.acorntravel.compassclub). By using any of our
digital platforms or services, you agree to the practices described in this Privacy Policy.
2. Scope
This policy applies to all users interacting with Acorn websites, marketing campaigns,
customer portals, and mobile applications. Certain platforms, such as Compass Club, may
include additional terms specific to their operation. However, this unified policy governs all
Acorn data handling practices unless a more specific notice applies.
3. Information We Collect
We collect and process the following categories of personal data depending on your
interaction with our websites, applications, or services:
a. Contact Information – Name, phone number, email, mailing address, company name (if
applicable)
b. Personal & Account Data – Login credentials, user IDs, profile information, preferences
c. Digital Usage & Technical Data – IP address, device ID, browser type, OS, language
settings, session logs, cookies
d. Location Data – With consent, precise or approximate location for services
e. Communication Data – Messages, inquiries, complaints, support interactions
f. Marketing & Campaign Data – Preferences, consent flags, ad engagement, form
submissions
g. Transaction Data – Purchase history, payments, rewards
4. How We Use Your Information
Your information may be used to provide services, personalize content, analyze usage,
verify identities, send updates, improve security, and comply with legal requirements.
5. Legal Basis for Processing
For users in the EEA or similar jurisdictions, we rely on consent, contractual necessity, legal
obligation, or legitimate interest to process personal data.
6. Data Sharing and Disclosure
We do not sell your data. We may share it with service providers, affiliates, legal authorities,
or as part of business transfers, under confidentiality obligations.
7. Third-Party Services and SDKs
Our platforms (including Compass Club) may use integrations such as Google Maps and
Firebase Analytics, which may collect limited technical data under their own privacy
policies.
8. Cookies and Tracking Technologies
We use cookies and similar tracking tools for analytics and personalization. Users may
manage cookies through browser settings or consent banners.
9. Data Retention
We retain personal data only as long as necessary for the purposes outlined or as required
by law. Users can request deletion via [email protected].
10. Data Security
We implement industry-standard security measures such as encryption, access control, and
periodic audits to protect your data.
11. International Data Transfers
Your data may be processed outside your country. Adequate safeguards like Standard
Contractual Clauses (SCCs) are used to protect your information.
12. Your Rights
Subject to law, you may access, correct, delete, restrict, or object to data processing and
withdraw consent. Contact [email protected] for assistance.
13. Children’s Privacy
Our services, including Compass Club, are not intended for children under 13. Any such data
found will be deleted immediately.
14. Policy Updates
We may update this policy periodically. The latest version will be posted at
https://acorn.lk/privacy-policy with the revised effective date.
15. Contact Us
Acorn Ventures (Private) Limited
Email: [email protected]
Phone: +94 11 4 70 470 5
Postal Address: Hemas Building, 81 York St, Colombo 00100
Compliance Statement
This Privacy Policy complies with Google Play Developer Policy (Data Safety section), GDPR,
CCPA, and Sri Lanka PDPA requirements.