Privacy policy. What we collect, and how we look after it.

Who we are

This policy covers ryzera.lk and the services of Ryzera Technologies (Private) Limited in Sri Lanka and Ryzera Technologies LLC in the United States (together “Ryzera”, “we” or “us”). The company named on your proposal, invoice or agreement is the one responsible for your information in that relationship.

Sri Lanka

Ryzera Technologies (Private) LimitedNo. 60/1, 3rd Lane, New Samagi Mawatha, Colombo 10390, Sri Lanka

United States

Ryzera Technologies LLC580 Sunset Blvd Ste 5093, Kalispell, MT 59901, USA

Information we collect

We collect only what we need to answer you, deliver our services and get paid for them:

• Contact details you send us, such as your name, email address, phone number, company and the details of your project, when you email us or use the contact form. The form prepares an email in your own email app; the website itself does not store what you type.
• Job applications, including your CV and anything else you send to careers@ryzera.lk.
• Billing information: your name, billing email and address, what you bought, and the payment status. Card and bank details are entered on Stripe's secure pages and go directly to Stripe. We never see or store your full card number.
• Client project data that you give us so we can build, host or support a system for you.
• Usage information collected automatically when you visit the site: pages viewed, approximate location, browser and device type, and referring site, through Google Analytics and our hosting provider's server logs.

How we use it

• To reply to your enquiries and give you support.
• To prepare proposals, deliver the services you ask for, and keep you updated on your project.
• To take payments, send invoices and receipts, handle refunds, and keep the accounting records the law requires.
• To prevent fraud, chargebacks and misuse of our services.
• To review job applications.
• To understand how the website is used so we can improve it.

We use your information because we need it to perform a contract with you, because the law requires it, because we have a legitimate interest in running and protecting our business, or because you have given us your consent. We do not sell personal information, and we do not use it for advertising.

Payments through Stripe

Online payments are processed by Stripe, Inc. and its affiliates. When you pay, Stripe collects your payment details and the information needed to process the payment, check it for fraud and meet its own legal duties. Stripe then gives us the payment result and a limited record of the transaction, such as the amount, date, card brand and last four digits.

Stripe handles card data under the PCI DSS security standard. How Stripe uses your information is described in the Stripe Privacy Policy.

Who we share it with, and how

We share personal information only with the parties below, and only the part each one needs:

• Stripe, to process payments. You send your payment details to Stripe directly through its secure checkout or payment pages.
• Service providers who run parts of our business for us, such as website hosting (Vercel), email, cloud storage, analytics (Google) and accounting. They receive information over encrypted connections and may use it only to provide their service to us.
• Professional advisers, such as our accountants, auditors and lawyers, under a duty of confidentiality.
• Authorities, when the law, a court order or a regulator requires it, or to protect the rights and safety of Ryzera, our clients or others.
• A buyer or successor, if our business or part of it is merged or sold, who must then protect your information as this policy describes.

We share information between the two Ryzera companies when both are involved in serving you.

Cookies and analytics

The website uses Google Analytics to count visits and see which pages are useful. Google Analytics sets cookies in your browser, and we ask Google to shorten your IP address before it is stored. The map on the contact page is embedded from Google Maps, which may also set cookies. Stripe sets cookies on its payment pages to keep payments secure and detect fraud.

You can block or delete cookies in your browser settings, or install the Google Analytics opt-out add-on. The site still works without them.

How we protect it

• The website and payment pages are served only over HTTPS, so information is encrypted in transit.
• Payment card data is handled by Stripe, a PCI DSS Level 1 certified provider, and never passes through or stays on our servers.
• Access to client and personal data is limited to the team members who need it for their work, with individual accounts and multi-factor authentication.
• We keep our systems and the services we use updated, and review who has access when people join or leave a project.
• Client project data is kept only in the systems agreed for that project.

No method of sending or storing information is completely secure, but we work to protect yours and will tell you without undue delay if a breach affects your information.

How long we keep it

We keep enquiries for up to two years after our last contact, unless they lead to a project. We keep billing and transaction records for as long as tax and accounting laws require, normally seven years. We keep job applications for up to one year so we can contact you about future roles, unless you ask us to delete yours sooner. Client project data is kept for the length of the agreement and then returned or deleted as the agreement says.

International transfers

We operate in Sri Lanka and the United States, and our service providers may process information in other countries. When information moves between countries, we take steps to make sure it stays protected as this policy describes, including contract terms with our providers.

Your rights

Depending on where you live, including under Sri Lanka's Personal Data Protection Act, No. 9 of 2022, you may have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information, or to stop or limit using it;
• withdraw a consent you have given us, at any time;
• complain to a data protection authority.

To use any of these rights, email info@ryzera.lk. We will reply within 30 days. We may need to confirm who you are first, and we may keep some records where the law requires us to.

Children

Our website and services are meant for businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has sent us their information, contact us and we will delete it.

Changes to this policy

We may update this policy when our services or the law change. The new version will be posted on this page with a new effective date, and we will tell clients directly about any significant change.

Contact us

For any question about this policy or your information, email info@ryzera.lk or write to either address under Who we are. You can also visit our support page.