Privacy & cookie policy
This policy explains how personal data is processed when you visit appslanka.lk or contact us through it, in line with Sri Lanka's Personal Data Protection Act No. 9 of 2022 and, for visitors in the European Union, the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").
1. Data controller
Apps Lanka Software Solutions (Pvt) Ltd (Reg. No. PV 123478),
No.40, Palaly Road, Jaffna, Sri Lanka.
Email: info@appslanka.lk · Phone: +94 77 262 7755
Representative in the European Union: our affiliated company Apps Lanka S.R.L., Via Emilia All'Ospizio, 70, 42122 Reggio Emilia (RE), Italy, VAT 03141110357. Email: info@appslanka.it. Apps Lanka S.R.L also handles contracts with clients in Europe.
2. What data we collect and why
| Context | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact and demo request forms | Name, company, email, phone, country, project details and the options you select | Replying to your request and preparing a proposal | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) |
| Career applications | Name, contact details, occupation, city/country, experience, CV | Evaluating your application for current and future openings | Pre-contractual steps (Art. 6(1)(b)) and your consent for future openings (Art. 6(1)(a)) |
| Blog and portfolio comments | Name, email (not published), comment | Publishing your comment and preventing abuse | Your consent (Art. 6(1)(a)) and our legitimate interest in moderation (Art. 6(1)(f)) |
| Website analytics (only if you accept) | Pseudonymous usage data, device and browser information, approximate location | Understanding how the website is used and improving it | Your consent (Art. 6(1)(a)); you can withdraw it at any time |
| Technical operation | IP address, server logs, session and security cookies | Delivering the website securely and preventing spam and abuse | Legitimate interest (Art. 6(1)(f)) |
Providing data marked as required in our forms is necessary to handle your request. We do not use your data for automated decision-making or profiling.
3. How long we keep data
- Contact and demo requests: up to 24 months after our last communication, unless a contract follows (then for the period required by law, e.g. tax and accounting obligations).
- Career applications: up to 12 months, or until you withdraw your consent.
- Comments: as long as they are published, or until you ask us to remove them.
- Analytics data: up to 14 months.
- Server and security logs: for a limited period needed for security purposes.
4. Who receives your data
Your data is accessed only by authorised staff of Apps Lanka Software Solutions (Pvt) Ltd and our affiliated company Apps Lanka S.R.L., and by service providers acting as processors on our behalf, such as hosting, email delivery and, if you consent, Google (Google Analytics) and Trustpilot (review widget). We do not sell your personal data.
5. Cookies and similar technologies
| Name | Provider | Purpose | Type |
|---|---|---|---|
| apps_lanka_session, XSRF-TOKEN | appslanka.lk | Keeps the website and forms working securely | Technical, always active |
| appslanka-theme, appslanka-consent (local storage) | appslanka.lk | Remembers your light/dark theme and cookie choice | Technical, always active |
| _ga, _ga_* | Google Analytics | Statistics about website usage | Analytics, only after consent |
| Trustpilot widget cookies | Trustpilot | Displays our Trustpilot rating | Third-party, only after consent |
You can change your choice at any time using cookie settings. Rejecting analytics cookies does not affect your use of the website.
6. International transfers
This website is operated from Sri Lanka, and data you submit is processed by Apps Lanka Software Solutions (Pvt) Ltd in Sri Lanka. When personal data of people in the European Economic Area is transferred to Sri Lanka, between our companies, or to service providers such as Google, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses, or rely on an adequacy decision where one applies. You can request a copy of these safeguards by contacting us.
7. Your rights
Under the Personal Data Protection Act and, for people in the EU, the GDPR, you have the right to:
- access your data and receive a copy of it;
- have inaccurate data corrected and, where applicable, deleted;
- restrict or object to processing based on our legitimate interests;
- data portability;
- withdraw consent at any time, without affecting processing carried out before withdrawal.
To exercise your rights, email info@appslanka.lk. People in the EU can also contact our EU representative at info@appslanka.it. You have the right to lodge a complaint with the Data Protection Authority of Sri Lanka or, if you are in the EU, with your national supervisory authority (in Italy, the Garante per la protezione dei dati personali).
8. Security
We use encrypted connections (HTTPS), access controls and spam protection to protect personal data. No method of transmission over the internet is completely secure, but we work to protect your data with appropriate measures.
9. Changes to this policy
We may update this policy when our website or the law changes. The date at the top shows the latest version.
10. Mobile apps and products
Our products (such as iPOS, Easy Loan, Easy Biz, Ecommerce Pack, AppRollout and Site Pro) and mobile apps may have their own privacy notices, which apply when you use them.