Cookie Policy

1. INTRODUCTION

1.1 This Cookie Policy explains how Dynamic Labs (Private) Limited (“we,” “us,” “our,” or “Company”) uses cookies and similar tracking technologies on magiya.lk (the “Platform”), including our website and mobile applications.

1.2 This policy provides detailed information about what cookies are, how we use them, what types of cookies we use, the purposes they serve, and how you can control or delete them.

1.3 This Cookie Policy should be read in conjunction with our Privacy Policy and Terms of Service.

1.4 Non-essential cookies (including functional, analytics, advertising, and social media cookies) are only activated after obtaining your explicit consent through the Cookie Consent Banner.

1.5 In the event of any conflict, inconsistency, or ambiguity between this Cookie Policy, the Terms of Service, the Privacy Policy, or any other policy published on the Platform, the Terms of Service shall prevail, followed by the Privacy Policy, and thereafter this Cookie Policy, unless expressly stated otherwise.

2. WHAT ARE COOKIES?

2.1 Cookies are small text files that are placed on your device (computer, smartphone, tablet, or other electronic device) when you visit a website or use an application.

2.2 Cookies contain information that is transferred to your device’s hard drive and stored by your web browser. They allow websites to recognize your device and remember information about your visit.

2.3 Cookies typically contain:

  • The name of the website or domain that placed the cookie
  • A unique identifier
  • An expiration date
  • Other information related to your use of the website

2.4 Cookies are widely used to make websites work more efficiently, improve user experience, and provide analytical information to website owners.

3. SIMILAR TECHNOLOGIES

In addition to cookies, we use similar tracking technologies:

  • 3.1 Web Beacons (Pixels): Small graphic images embedded in web pages or emails that allow us to track page views, email opens, and user behavior.
  • 3.2 Local Storage: Technology that allows websites to store data locally on your browser, similar to cookies but with greater storage capacity.
  • 3.3 Session Storage: Temporary storage that is deleted when you close your browser.
  • 3.4 Device Identifiers: Unique identifiers associated with your mobile device (such as IDFA for iOS or Android Advertising ID).
  • 3.5 Software Development Kits (SDKs): Code embedded in mobile applications that provides similar functionality to cookies.

Throughout this policy, the term “cookies” includes all these similar technologies unless otherwise specified.

4. TYPES OF COOKIES WE USE

Cookies can be classified in several ways. We use the following types:

4.1 By Duration

(a) Session Cookies:

  • Temporary cookies that expire when you close your browser
  • Used to maintain your session while browsing the Platform
  • Essential for Platform functionality
  • Automatically deleted when you end your browsing session

(b) Persistent Cookies:

  • Remain on your device for a set period or until you delete them
  • Used to remember your preferences and settings
  • Help us recognize you when you return to the Platform
  • Expiration periods vary from days to years depending on purpose

4.2 By Ownership

(a) First-Party Cookies:

  • Set directly by magiya.lk
  • Used to provide core functionality and improve your experience
  • Under our direct control

(b) Third-Party Cookies:

  • Set by external service providers and partners
  • Used for analytics, advertising, social media integration, and other purposes
  • Subject to the privacy policies of those third parties

4.3 By Purpose (See Section 5 for detailed purposes)

  • Strictly Necessary Cookies
  • Functional Cookies
  • Performance and Analytics Cookies
  • Advertising and Marketing Cookies
  • Social Media Cookies

5. HOW WE USE COOKIES

We use cookies for the following purposes:

5.1 Strictly Necessary Cookies

• Purpose: Essential for the Platform to function properly. Without these cookies, certain features cannot be provided.

Examples of Use:

  • Authenticating users and maintaining login sessions
  • Remembering items in your booking cart
  • Ensuring security and preventing fraud
  • Load balancing across servers
  • Enabling payment processing
  • Maintaining your language preference
  • Remembering your cookie consent choices

• Legal Basis: These cookies are necessary to provide services you request and do not require consent.

• Retention: Typically session-based, deleted when you close your browser or complete your transaction.

Cannot be disabled: These cookies are essential and cannot be turned off in our systems.

5.2 Functional Cookies

• Purpose: Enable enhanced functionality and personalization to improve your experience.

Examples of Use:

  • Remembering your preferences (currency, language, location)
  • Storing your search history and filters
  • Personalizing content based on your interests
  • Remembering your accessibility settings
  • Auto-filling forms with previously entered information
  • Customizing the user interface based on your device
  • Remembering your account settings

• Legal Basis: Legitimate interest in providing enhanced user experience; consent may be required in some jurisdictions.

• Retention: Persistent, typically 30 days to 2 years depending on the specific function.

• Can be disabled: Yes, but may affect Platform functionality and your user experience.

5.3 Performance and Analytics Cookies

• Purpose: Collect information about how visitors use the Platform to help us improve functionality and performance.

Examples of Use:

  • Tracking page views, clicks, and navigation patterns
  • Measuring Platform performance and load times
  • Identifying errors and technical issues
  • Understanding which features are most popular
  • Analyzing user behavior and engagement
  • Conducting A/B testing of new features
  • Generating statistical reports on Platform usage
  • Measuring the effectiveness of our services

Information Collected:

  • Pages visited and time spent on pages
  • Click patterns and scroll depth
  • Browser type and device information
  • Referral sources (how you found our Platform)
  • Search terms used within the Platform
  • Error messages encountered

Third-Party Analytics Services We Use:

  • Google Analytics
  • Facebook Pixel
  • Hotjar (heatmaps and session recording)
  • Mixpanel
  • Other analytics platforms

• Legal Basis: Legitimate interest in improving our Platform; consent may be required in some jurisdictions.

• Retention: Persistent, typically 30 days to 2 years.

• Can be disabled: Yes, through browser settings or our cookie preference center.

5.4 Advertising and Marketing Cookies

• Purpose: Deliver relevant advertisements and marketing messages, measure campaign effectiveness, and prevent ad fatigue.

Examples of Use:

  • Displaying personalized advertisements based on your interests
  • Showing relevant travel deals and offers
  • Retargeting (showing ads for services you viewed on our Platform)
  • Measuring ad performance and conversion rates
  • Limiting the number of times you see the same ad
  • Building marketing profiles and segments
  • Cross-device tracking for consistent ad experience
  • Affiliate tracking and attribution

Third-Party Advertising Partners:

  • Google Ads
  • Facebook Ads
  • Instagram Ads
  • Programmatic advertising networks
  • Affiliate marketing platforms
  • Other advertising and marketing platforms

• Legal Basis: Consent required in most jurisdictions.

• Retention: Persistent, typically 30 days to 13 months.

• Can be disabled: Yes, through browser settings, our cookie preference center, or third-party opt-out tools.

5.5 Social Media Cookies

• Purpose: Enable social media features and track social media activity related to our Platform.

Examples of Use:

  • Enabling social media sharing buttons
  • Allowing you to log in using social media accounts
  • Showing social media feeds on our Platform
  • Tracking social media referrals
  • Delivering targeted social media advertising
  • Measuring social media campaign effectiveness

Third-Party Social Media Platforms:

  • Facebook
  • Instagram
  • Twitter/X
  • LinkedIn
  • YouTube
  • WhatsApp
  • Other social media platforms

• Legal Basis: Consent required for non-essential social media features.

• Retention: Varies by social media platform, typically 30 days to 2 years.

• Can be disabled: Yes, through browser settings or our cookie preference center. Note that disabling these cookies may prevent social sharing features from working.

5.6 Data Protection Compliance

Where applicable, the use of cookies and similar tracking technologies, and any processing of personal data arising therefrom, shall be carried out in compliance with the Personal Data Protection Act No. 9 of 2022 of Sri Lanka and any applicable regulations made thereunder. Where consent is required, such consent shall be obtained prior to the activation of non-essential cookies.

6. Third-Party Cookies

6.1 We work with third-party service providers and partners who may place cookies on your device when you use our Platform.

6.2 Third-party cookies are governed by the privacy policies and cookie policies of those third parties, not this Cookie Policy. These third parties may process your personal data for their own purposes as independent data controllers. We encourage users to review their respective privacy policies to understand how their data is handled. Dynamic Labs (Private) Limited shall not be responsible for the processing of personal data carried out by such third parties.

6.3 Categories of Third Parties:

(a) Analytics Providers:

  • Google Analytics, Mixpanel, Hotjar
  • Help us understand Platform usage and performance

(b) Advertising Networks:

  • Google Ads, Facebook Ads, programmatic ad platforms
  • Deliver and measure advertising campaigns

(c) Payment Processors:

  • Secure payment gateway providers
  • Enable payment processing functionality

(d) Customer Support Tools:

  • Live chat providers, helpdesk systems
  • Provide customer support services

(e) Content Delivery Networks (CDNs):

  • Improve Platform speed and performance
  • Deliver content efficiently

(f) Security Providers:

  • Fraud detection and prevention services
  • Enhance Platform security

(g) Marketing Platforms:

  • Email marketing services, CRM platforms
  • Manage marketing communications

6.4 We conduct due diligence on third party service providers to ensure they handle data responsibly and in accordance with applicable laws. Where third party providers transfer data outside Sri Lanka, we ensure that appropriate safeguards are implemented in accordance with applicable data protection laws.

6.5 We do not control third-party cookies and recommend reviewing the privacy policies of these third parties.

7. Mobile Application Tracking

7.1 Our mobile applications use similar tracking technologies to cookies, including:

  • Device identifiers (IDFA, Android Advertising ID)
  • SDKs from third party service providers
  • Local storage and session storage
  • In-app analytics and tracking

7.2 Mobile Tracking Purposes:

  • App functionality and performance
  • User authentication and security
  • Crash reporting and error tracking
  • Usage analytics and optimization
  • Push notification delivery
  • Personalized content and recommendations
  • In-app advertising (if applicable)

7.3 You can control mobile tracking through:

  • Device settings (iOS: Settings > Privacy > Tracking; Android: Settings > Google > Ads)
  • App permission settings
  • In-app preference controls
  • Disabling advertising identifiers
  • Uninstalling the app

8. Your Cookie Choices and Controls

You have several options to control or limit cookies:

8.1 Cookie Preference Center

  • Access our Cookie Preference Center on the Platform
  • Manage your cookie preferences by category
  • Accept or reject non essential cookies
  • Update your preferences at any time
  • Located in the footer of our website or in app settings

8.2 Browser Settings

Most browsers allow you to:

  • Block all cookies
  • Block third party cookies only
  • Delete existing cookies
  • Receive notifications when cookies are set
  • Browse in private/incognito mode

Browser-Specific Instructions:

Google Chrome:

  • Settings > Privacy and Security > Cookies and other site data
  • Choose “Block third-party cookies” or “Block all cookies”

Mozilla Firefox:

  • Settings > Privacy & Security > Cookies and Site Data
  • Select “Custom” and choose preferences

Safari (Mac):

  • Preferences > Privacy > Cookies and website data
  • Choose blocking options

Microsoft Edge:

  • Settings > Cookies and site permissions > Cookies and site data
  • Manage cookie settings

Safari (iOS):

  • Settings > Safari > Block All Cookies or Prevent Cross-Site Tracking

Android Chrome:

  • Settings > Site settings > Cookies
  • Choose blocking options

Note: For other browsers, consult your browser’s help documentation.

8.3 Third-Party Opt-Out Tools

Google Analytics Opt-Out:

  • Install the Google Analytics Opt-out Browser Add-on
  • Available at: https://tools.google.com/dlpage/gaoptout

Advertising Opt-Out:

  • Network Advertising Initiative (NAI): www.networkadvertising.org/choices
  • Digital Advertising Alliance (DAA): www.aboutads.info/choices
  • European Interactive Digital Advertising Alliance (EDAA): www.youronlinechoices.eu

Mobile Advertising Opt-Out:

  • iOS: Settings > Privacy > Tracking > Disable “Allow Apps to Request to Track”
  • Android: Settings > Google > Ads > Opt out of Ads Personalization

8.4 Do Not Track (DNT) Signals

  • Some browsers support “Do Not Track” signals
  • Currently, there is no universal standard for DNT
  • Our Platform does not currently respond to DNT signals
  • We respect your cookie preferences set through our Cookie Preference Center

8.5 Impact of Disabling Cookies

  • You may not be able to log in or maintain a session
  • Booking processes may not function properly
  • Your preferences and settings may not be saved
  • You may see less relevant content and advertisements
  • Some features may not work as intended
  • You may need to re-enter information repeatedly

Strictly necessary cookies cannot be disabled without severely affecting Platform functionality.

9. COOKIE CONSENT

9.1 First Time Visitors

Non essential cookies are disabled by default and will only be activated after you provide explicit consent. When you first visit our Platform, you will see a cookie banner that:

  • Explains our use of cookies
  • Provides options to accept or reject cookies
  • Allows you to manage preferences

The banner provides the following options:

  • Accept All Cookies
  • Reject Non-Essential Cookies
  • Manage Preferences

Note: Continuing to use the Platform without making a selection constitutes consent to essential cookies only.

9.2 Managing Consent

  • You can change your cookie preferences at any time through our Cookie Preference Center
  • Access the preference center through the link in the footer or app settings
  • Changes take effect immediately

9.3 Consent Records

  • We maintain records of your cookie consent choices
  • Records include: date, time, consent preferences, and IP address
  • Maintained for compliance and accountability purposes

9.4 Withdrawal of Consent

You may withdraw your consent to the use of non essential cookies at any time through the Cookie Preference Center or applicable browser settings. Such withdrawal shall not affect the lawfulness of any processing carried out prior to the withdrawal of consent.

10. COOKIES AND PERSONAL INFORMATION

10.1 Some cookies may contain or collect personal information (such as user identifiers, IP addresses, or browsing behavior).

10.2 Personal information collected through cookies is handled in accordance with our Privacy Policy.

10.3 We implement security measures to protect cookie data from unauthorized access or misuse.

10.4 Third party cookies are subject to the privacy policies of those third parties.

10.5 For information about how we handle personal data, please refer to our Privacy Policy.

10.6 Where personal data is collected through cookies, such processing is carried out in compliance with applicable data protection laws, including the Personal Data Protection Act No. 9 of 2022 of Sri Lanka.

11. INTERNATIONAL TRANSFERS

11.1 Some cookies and tracking technologies may result in your information being transferred to countries outside Sri Lanka.

11.2 These transfers may include countries that have different data protection standards.

11.3 We ensure appropriate safeguards are in place for international data transfers, as described in our Privacy Policy.

11.4 Third party cookies may transfer data to their servers located globally. Such transfers are conducted subject to appropriate safeguards, including contractual protections or equivalent legal mechanisms.

12. COOKIES AND CHILDREN

12.1 Our Platform is not directed to children under the age of 18.

12.2 We do not knowingly collect information from children through cookies or other tracking technologies.

12.3 If you are under 18, please obtain parental consent before using our Platform.

12.4 Parents can manage cookie settings to protect their children’s privacy.

12A. LIMITATION OF LIABILITY

To the maximum extent permitted by applicable law, Dynamic Labs (Private) Limited shall not be liable for any direct, indirect, incidental, or consequential loss or damage arising from the use of cookies or similar technologies, including but not limited to reliance on analytics, third-party tracking technologies, or any data collected through such technologies.

The Company does not control third-party cookies and shall not be responsible for the actions, omissions, or data practices of such third parties.

13. CHANGES TO THIS COOKIE POLICY

13.1 We may update this Cookie Policy from time to time to reflect changes in:

  • Our cookie practices
  • Technology
  • Legal requirements
  • Business operations

13.2 When we make material changes, we will notify you by:

  • Updating the “Last Updated” date at the top of this policy
  • Displaying a prominent notice on the Platform
  • Re-obtaining consent where required by law

13.3 We encourage you to review this Cookie Policy periodically to stay informed about our use of cookies.

13.4 Your continued use of the Platform after changes are posted constitutes acceptance of the updated Cookie Policy.

14. MORE INFORMATION ABOUT COOKIES

To learn more about cookies and how they work, visit:

  • All About Cookies: www.allaboutcookies.org
  • Network Advertising Initiative: www.networkadvertising.org
  • Your Online Choices: www.youronlinechoices.eu

15. CONTACT US

If you have questions or concerns about our use of cookies, please contact us:

Dynamic Labs (Private) Limited — magiya.lk Data Protection
Email: [email protected] • Phone: 0704222777 • Website: www.magiya.lk
Data Protection Officer: [email protected]

Subject line: “Cookie Policy Inquiry”

Please include:

  • • Your name and contact information
  • • Description of your inquiry
  • • Any relevant details about your cookie preferences or concerns

We will respond to your inquiry within 30 days.

16. COOKIE LIST

Below is a detailed list of cookies currently used on our Platform. This list is updated regularly.

16.1 Strictly Necessary Cookies

Cookie NamePurposeDurationType
session_idMaintain user sessionSessionFirst-party
csrf_tokenSecurity protectionSessionFirst-party
load_balancerServer load balancingSessionFirst-party
cookie_consentStore cookie preferences1 yearFirst-party
secure_loginAuthentication securitySessionFirst-party
cart_dataRemember booking cart24 hoursFirst-party

16.2 Functional Cookies

Cookie NamePurposeDurationType
language_prefRemember language choice1 yearFirst-party
currency_prefRemember currency choice1 yearFirst-party
user_settingsStore user preferences1 yearFirst-party
recent_searchesRemember search history30 daysFirst-party
location_dataStore location preferences90 daysFirst-party

16.3 Performance and Analytics Cookies

Cookie NamePurposeDurationType
_gaGoogle Analytics tracking2 yearsThird-party
_gidGoogle Analytics session24 hoursThird-party
_gatGoogle Analytics throttling1 minuteThird-party
hj_*Hotjar analytics1 yearThird-party
mp_*Mixpanel analytics1 yearThird-party

16.4 Advertising and Marketing Cookies

Cookie NamePurposeDurationType
_fbpFacebook Pixel3 monthsThird-party
frFacebook advertising3 monthsThird-party
IDEGoogle Ads13 monthsThird-party
NIDGoogle Ads personalization6 monthsThird-party
retargeting_idRetargeting campaigns90 daysFirst-party

16.5 Social Media Cookies

Cookie NamePurposeDurationType
fb_*Facebook integrationVariesThird-party
ig_*Instagram integrationVariesThird-party
twitter_*Twitter integrationVariesThird-party
li_*LinkedIn integrationVariesThird-party

Note: This list may be updated from time to time as cookies change due to system updates or third party integrations. This is a representative list, actual cookies may vary. Cookie names beginning with * indicate multiple variations exist. Third-party cookies are subject to the policies of those providers.

17. ACKNOWLEDGMENT

By using magiya.lk, you acknowledge that you have read and understood this Cookie Policy and how we use cookies and similar technologies.

For non essential cookies, your explicit consent is required and can be provided through our Cookie Preference Center.