Privacy policy

Distributor Lanka (distributorlanka.com) provides an online system that distribution agencies use to manage stock, trucks, orders, bills and payments. In this policy, "we" means Distributor Lanka and "you" means a company that uses the service (a "customer company") and the people who use it.

We handle personal data in line with Sri Lanka's Personal Data Protection Act, No. 9 of 2022.

Each customer company owns the business data it puts into Distributor Lanka: products, stock, customers, suppliers, employees, trucks, orders and payments. For that data, the customer company decides what is collected and why, and we process it only on its behalf and on its instructions, to run the service.

Each company's data is kept separate from every other company's. People at one company cannot see another company's data.

• Account details: the name, email address, phone number and job title of each person who signs in, and a securely hashed password (we never store passwords in readable form).
• Sign-in and device details: when and from which device someone signs in (browser, device type and IP address), so we can keep accounts secure and apply your plan's device limit.
• Company and billing details: your company's name and contact details, your plan, and your invoices and payments to us.
• Sign-up details: what you type into our sign-up form (your name, email, phone, company details and the package you choose). The form saves as you type, and says so, so you can continue later even if you don't finish.
• Business data you enter: as described above, including details of your own customers and staff.
• Messages you send us: for example when you email us for support or to ask about plans.

• To provide, maintain and secure the service, including backups.
• To sign people in and to enforce your plan's limits on employees, trucks, branches and devices.
• To bill your company and record payments.
• To answer questions and give support, including helping you finish a sign-up you started.
• To send product news and offers, only if you agreed by ticking the box on the sign-up form. You can unsubscribe at any time.
• To tell you about important changes to the service or to this policy.
• To meet our legal obligations.

We do not sell personal data. We share it only with service providers that help us run Distributor Lanka (for example hosting and email), under agreements that require them to protect it and use it only for us, or when the law requires it.

Our people access customer data only when needed to give support or to keep the service running, and only as far as that needs.

• Each company's data is separated from other companies' data.
• Passwords are stored only as secure hashes; sign-in sessions can be ended by your admin at any time.
• Data is sent over encrypted connections and backed up regularly.
• Access by our staff is limited to what their work needs.

If you start signing up but don't finish, we keep your sign-up details for up to 12 months so you can come back, unless you ask us to delete them sooner. We keep your company's data while you use the service. If your company stops using Distributor Lanka, you can ask us for a copy of your data; we then delete it within a reasonable time, except records we must keep by law (for example billing records).

Under the Personal Data Protection Act you can ask to:

• see the personal data held about you,
• correct data that is wrong or incomplete,
• have data deleted, or its processing restricted, where the law allows, and
• withdraw consent you gave earlier.

If your data was entered by a company that uses Distributor Lanka (for example your employer, or an agency you buy from), please contact that company first; we'll help them answer you. Otherwise email info@distributorlanka.com.

We use your browser's storage only to keep you signed in and to remember settings such as the colour theme. We don't use advertising cookies or sell browsing data.

If we change this policy, we'll update the date at the top. For important changes we'll tell customer companies by email or in the app before they take effect.