Privacy policy

Who we are

Coredile decides how and why your personal information is used, so we're responsible for it under Sri Lanka's Personal Data Protection Act, No. 9 of 2022. Our company details are at the bottom of this page.

For anything about your personal information, contact us at hello@coredile.com.

What this policy covers

This policy covers personal information about people who visit our website, contact us, or work with us as customers or suppliers.

It doesn't cover the websites and systems we build or look after for our customers. For those, our customer decides how their visitors' and customers' information is used, and their own privacy policy applies. We handle that information on their behalf under our Data processing agreement.

What we collect

Information you give us

• When you contact us: your name, email address, phone or WhatsApp number, business name, and what you tell us in your message.
• When you become a customer: contact and billing details, details about your project, and any logins or access you share so we can do the work.

Information collected automatically

When you visit our website, our hosting provider records basic technical information, such as your IP address, browser type, the pages requested and when, to keep the website working and secure.

We don't use analytics, advertising or social media tracking on this website, and it doesn't set any cookies. See our Cookie policy.

Why we use it

We only use personal information when the law allows it:

We don't put people who contact us onto automatic follow-up email sequences, and we don't make decisions about you by automated means alone.

Who we share it with

We never sell your personal information. We only share it with:

• companies that provide services to us, such as hosting, email, file storage, accounting and payments, who may only use it to provide those services to us;
• our professional advisers, such as accountants and lawyers;
• authorities, when the law requires it, or to protect our rights, our customers or the public; and
• a buyer or successor, if our business is sold or merged. They'll have to protect it as this policy describes.

Storing data outside Sri Lanka

Some of the companies we use store data on servers outside Sri Lanka. When that happens, we choose established providers and take the steps the law requires to keep your information protected, such as contract terms that bind them to look after it.

How long we keep it

• Enquiries that don't lead to working together: up to 12 months after our last contact.
• Customer and billing records: for as long as we work together, then for as long as Sri Lankan tax and business laws require us to keep them.
• Technical records kept for security: usually up to 90 days.

After that, we delete it or remove anything that identifies you.

Keeping it safe

We use reasonable technical and practical measures to protect personal information, including encrypted connections, limiting who can access it, strong passwords and keeping software up to date.

No system is completely secure. If a breach puts your information at risk, we'll act quickly and tell you and the authorities where the law requires.

Your choices and rights

You can ask us to:

• give you a copy of the personal information we hold about you;
• correct information that's wrong or incomplete;
• delete your information;
• stop using it, or use it only in limited ways; and
• withdraw any consent you've given, such as for news or offers.

Email hello@coredile.com. We may need to confirm who you are first. We reply within one month, or tell you within that month if we need longer (up to two more months for complex requests).

Making a request is free. We may decline requests that are clearly unfounded or repeated, or charge a reasonable fee for them where the law allows. Sometimes we can't delete information because the law requires us to keep it (invoices, for example), and we'll tell you if that's the case.

Complaints

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Data Protection Authority of Sri Lanka.

Children

Our website and services are for businesses. They aren't aimed at anyone under 18, and we don't knowingly collect children's personal information.

Changes to this policy

We may update this policy. The "Last updated" date at the top shows when it last changed. If a change significantly affects how we use your information, we'll tell our customers directly.