Last updated: 21 July 2026
At ENDURA, operated by ENDURA (Pvt) Ltd, we are committed to protecting the privacy and security of the personal information you share with us. This Privacy Policy explains what we collect, how we use it, and how we keep it safe when you visit endura.lk, purchase from us, join as a member, or register for one of our events.
By using our website, you consent to the practices described in this policy.
Information We Collect
Information you give us:
- Name, email address, telephone number and delivery address, provided when you create an account, place an order, subscribe to updates or contact us
- Membership details, where you register as an ENDURA member
- Event registration details, which may include your date of birth, gender, T-shirt size, emergency contact details and relevant medical or fitness information required for safe participation
- Any information you include in messages, enquiries or feedback you send us
Information collected automatically:
- Your IP address, browser type, device type and operating system
- Pages visited, time spent on the site, and how you arrived at our website
- Cookie data and similar tracking information
Payment information:
We do not collect or store your full card details. All card payments on endura.lk are processed by PayHere, a licensed third-party payment gateway. Your card information is entered directly into PayHere’s secure environment and is never accessible to us. We receive only a confirmation of whether the payment succeeded, along with a transaction reference.
How We Use Your Information
We use the information we collect to:
- Process, fulfil and deliver your orders
- Register you for events and communicate essential event information such as start times, routes and safety instructions
- Manage your membership and process renewals
- Provide customer support and respond to your enquiries
- Send you order confirmations, delivery updates and transaction receipts
- Send you news, offers and event announcements, where you have opted in
- Improve our website, products and services
- Detect, prevent and investigate fraud or misuse of our website
- Meet our legal and regulatory obligations
Event Health Information
Where we collect medical or fitness information for event participation, we use it solely for participant safety — for example, to assist medical staff in the event of an emergency during a race. This information is shared only with the medical and safety personnel responsible for the event, and is retained only as long as necessary for that purpose.
Sharing Your Information
We do not sell, rent or trade your personal information. We share it only in the following circumstances:
- Service providers: Delivery and courier partners, payment processors, hosting providers and email service providers, each of whom receives only the information needed to perform their function and is required to keep it confidential
- Event partners: Where an event is organised jointly, we may share participant details with the co-organiser strictly for the purposes of running that event
- Legal requirements: Where we are required to disclose information by law, by a court order, or by a valid request from a regulatory or law enforcement authority
- Business transfer: If our business is sold or merged, your information may transfer as part of that transaction, subject to the same protections set out here
Data Security
We use industry-standard measures to protect your information, including SSL encryption on our website and restricted internal access to customer records. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
If you hold an account with us, you are responsible for keeping your password confidential.
Data Retention
We retain your personal information for as long as your account or membership is active, and afterwards only for as long as necessary to meet legal, accounting, tax or reporting requirements.
Cookies
We use cookies and similar technologies to keep items in your shopping cart, remember your preferences, keep you signed in, understand how our website is used, and — where you have consented — to measure the performance of our advertising.
You can disable cookies through your browser settings. Please note that some parts of our website, including checkout, may not function correctly if cookies are disabled.
Your Rights
You may:
- Request a copy of the personal information we hold about you
- Ask us to correct information that is inaccurate or incomplete
- Ask us to delete your information, where we are not required to retain it
- Withdraw consent for marketing communications at any time, by using the unsubscribe link in any email or by contacting us directly
To exercise any of these rights, contact us at info@endura.lk. We will respond within a reasonable period.
Children’s Privacy
Our website is not directed at children under the age of 18, and we do not knowingly collect personal information from them. Where a minor participates in an ENDURA event, registration must be completed by a parent or legal guardian.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “last updated” date. We encourage you to review it periodically.
Contact Us
ENDURA (Pvt) Ltd 34/3, Old Kesbewa Road Raththanapitiya, Boralesgamuwa Sri Lanka
Email: info@endura.lk Phone: +94 77 140 2722
