Privacy Policy
What data we collect, why we collect it, and how we keep it safe.
Last updated: May 19, 2026
1. What we collect
Account info (name, email, phone, address), billing info (payment proofs, transaction references), service info (domains, server logs, IP addresses), and basic analytics (pages visited, device type). We do not store full bank or credit-card numbers.
2. Why we collect it
To provision and operate your services, verify bank-transfer payments, send order and service notifications, prevent abuse, comply with the law, and improve our products. We never sell your personal data.
3. Payment proofs
If you upload a bank transfer slip, the image is stored privately in our backend and is only accessible to LankaServers staff verifying your order. Slips are retained for accounting and dispute purposes.
4. Cookies & analytics
We use a minimal set of cookies needed to keep you signed in and to remember your cart. If Google Analytics is enabled by our admins, it runs with IP anonymization. You can clear cookies or block them in your browser at any time.
5. Service credentials
When we share hosting or cPanel credentials with you, they are delivered via your dashboard and email. We recommend changing the password on first login. We do not log or display your password after delivery beyond what is necessary to provision the service.
6. Sharing with third parties
We share data only with: (a) infrastructure providers we rely on to run the platform (database, file storage, email delivery), (b) domain registries and registrars for domain orders, and (c) authorities when legally required. Each partner is bound by appropriate data-protection terms.
7. Data retention
Active account data is retained while your account is open. After account closure, billing records are kept for the period required by Sri Lankan tax law, and other personal data is deleted or anonymized within 90 days.
8. Your rights
You can view and update your profile from the dashboard, request a copy of your data, or request deletion of your account. Email us via the contact page and we will respond within 30 days.
9. Security
We encrypt data in transit using TLS, store credentials hashed where applicable, enforce row-level security on the database, and audit admin access. No system is perfectly secure — please use a strong, unique password.
10. Children
LankaServers is not directed to children under 16. If you believe a minor has created an account, please contact us to have it removed.
11. Changes
We may update this policy. Material changes will be announced at least 14 days in advance via email or your dashboard.
12. Contact
For privacy questions, reach us via the contact page or WhatsApp link in the footer.