Privacy Policy

1. Information We Collect

When you visit our website or interact with our digital store and services, we may collect the following information:

• Personal Identification Information: Name, email address, phone number, and account credentials provided voluntarily during SSO registration or checkout.
• Billing & Address Information: Street address, city, postal code, and country required for invoicing and payment processing.
• Payment Data: Credit/debit card information and bank deposit slips. Online card payments are securely handled directly by accredited PCI-DSS compliant third-party payment processors (PayHere). Ceylon Net does not store or process raw credit card numbers.
• Technical & Browsing Data: IP address, browser type, device information, and session tokens collected automatically via essential cookies.

2. Use of Information

We use the collected information for the following legitimate business purposes:

• To process, fulfill, and deliver your digital product orders and vault download tokens.
• To authenticate your identity across Ceylon Net applications via Single Sign-On (SSO).
• To communicate with you regarding order confirmations, security alerts, and technical support.
• To personalize your experience and recommend relevant digital solutions and cloud services.
• To detect, prevent, and investigate fraudulent transactions, security breaches, or unauthorized platform use.

3. Information Sharing & Third Parties

We respect your privacy. Ceylon Net does not sell, trade, or rent your personal information to third parties. We only share information with trusted service providers under strict confidentiality agreements:

• Trusted Payment Gateways: PayHere (PayHere Private Limited) for online payment processing and fraud detection.
• Cloud Infrastructure Providers: Secure hosting environments used solely to store encrypted vault assets and user authentication tokens.
• Legal Requirements: We may disclose information if required to do so by applicable laws of the Democratic Socialist Republic of Sri Lanka or valid legal requests.

4. Data Security

We implement industry-standard encryption protocols (TLS/SSL encryption, HMAC-SHA256 signatures, and secure password hashing) to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, please note that no method of transmission over the internet is 100% immune, and we continuously audit our infrastructure for security compliance.

5. Cookies and Session Storage

We use cookies and essential local browser storage to maintain active login sessions, store temporary checkout preferences, and analyze site traffic. You can adjust your browser settings to refuse cookies, but doing so may limit your ability to use certain interactive features on Ceylon Net.

6. Changes to Privacy Policy

Ceylon Net reserves the right to modify this Privacy Policy at any time. Any changes will be published on this page with a revised "last updated" date. We encourage users to review this policy periodically.