Privacy policy

Last updated 20 October 2026. This explains what LankaByte collects when you use this website and your client panel, why, and your rights under Sri Lanka's Personal Data Protection Act, No. 9 of 2022.

What we collect

• Your account: name, business name, email, mobile number, postal address and city, and a scrambled (hashed) copy of your password.
• Domain owner details: for each domain we register, the owner's name, NIC or passport number, address, phone, email, business name and registration number, and what the domain is for, because LK Domain Registry requires them.
• Messages you send us: what you write in the contact form, with your name, email and phone.
• Your orders: domains, hosting and website requests, the brief you write, invoices and payments. Card and eZ Cash payments are handled by PayHere; we never see or store your card number. For bank transfers we keep the slip you upload.
• Support: the messages you send us in tickets.
• Technical: your IP address and the time when you sign in, accept these terms or place an order, kept for security and as a record of your agreement.

Why we use it

• To register domains in your name. Domain registries require the registrant's name, address, email and phone, and may publish some of it in their WHOIS directory.
• To set up and run your hosting and website, send invoices and reminders, and answer support requests.
• To keep records the law requires for tax and accounting.

We do not sell your information and we do not use it for advertising.

Emails about our services

We sometimes email businesses whose contact address is published for enquiries, to tell them what we do. Every such email says who we are and has an unsubscribe link; once you unsubscribe, we don't email you again. These emails are sent through our email delivery provider.

Who we share it with

• LK Domain Registry (for .lk) or our registrar (for .com), to register and renew your domain.
• PayHere, when you pay online.
• Our hosting and email providers, who store data on our behalf.
• Authorities, only when the law requires it.

Cookies

This website uses one cookie, a session cookie that keeps you signed in and remembers your cart. It is needed for the site to work, so there is nothing to accept or decline. We use no analytics, advertising or tracking cookies.

How long we keep it

While you are a customer, and then for as long as tax law requires invoices to be kept (currently six years). Support emails we send are kept for 180 days. Uploaded bank slips are kept with the invoice they belong to.

Your rights

You can ask to see the information we hold about you, have it corrected, or have it deleted when we no longer need it, and you can withdraw consent where we rely on it. Write to support@lankabyte.com; we reply within 21 days.

Changes

If we change this policy we update the date above and tell active customers by email.