Privacy Policy

This policy explains how StartOne.lk collects, uses, stores and protects information about you and your business. We handle registration, tax and employment data, so we take this seriously.

1. What we collect

Account details (name, email, phone), business details (names, registration numbers, TIN, VAT, EPF numbers, addresses), documents you upload (such as NIC copies, certificates and bank slips), order and payment records, and messages you exchange with our team.

2. Why we collect it

Solely to deliver the services you order: preparing and lodging filings with the authorities, tracking your compliance obligations, storing your documents, invoicing, and communicating with you about your work. We do not sell or rent your information to anyone.

3. Legal basis

We process your information to perform our contract with you, to meet legal record-keeping obligations, and with your consent where applicable. We comply with applicable Sri Lankan data protection law, including the Personal Data Protection Act No. 9 of 2022 as it comes into force.

4. Who can see your data

Only our staff, and only to the extent needed to perform the work. Access is role-based and every customer's data is isolated from other customers at the database level. Information is shared with government authorities only as required to complete the filings you ordered.

5. Where it is stored

Data is stored with our cloud infrastructure providers in secure data centres, encrypted in transit. Uploaded documents live in private storage that is never publicly accessible; download links expire automatically.

6. How long we keep it

For as long as your account is active, and afterwards as required for legal and accounting record-keeping. You may request deletion of your account data subject to those obligations.

7. Your rights

You can access and update your profile and business details in your dashboard at any time, download your documents, and contact us to correct, export or delete your data.

8. Cookies

We use only the cookies necessary to keep you signed in and remember your active business. We do not run third-party advertising or tracking cookies.

9. Changes

If we make material changes to this policy we will notify you through the platform before they take effect.

10. Contact

Privacy questions or requests: [email protected].