Privacy Policy
Your privacy is important to us. This Privacy Policy explains how Ceytrex Labs collects, uses, and protects your personal information when you use www.ceytrexlabs.com, our customer dashboard, and related services.
Introduction
Ceytrex Labs ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, share, and protect information when you use our website, services, or interact with us.
By using our services or providing us with your information, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our services.
Information We Collect
Contact & sales inquiries: When you use our contact form or email us, we collect your name, email, company (optional), inquiry type, topic, and message.
Careers applications: If Inquiry Type is Careers, we also collect your CV/resume (PDF, DOC, or DOCX) so we can review your introduction for current or future roles.
Accounts: If you create a customer account, we collect your name, email, phone (optional), password (stored hashed by our auth provider), and OTP verification codes used to confirm login or password resets.
Orders & billing: For hosting, domains, packages, and related purchases we collect billing details, order items, amounts, and payment status needed to fulfil and support your order.
Support & tools: Messages you send through our on-site chat assistant, support tickets, and optional tools such as the Business Growth Scanner (business details you submit for a scan).
Technical information: We may automatically receive IP address, browser type, device information, and basic request logs needed to operate and secure the site.
Cookies & similar technologies: See our Cookie Policy for what we store in your browser and why.
How We Use Your Information
Service delivery: To provide IT services, hosting, domains, customer dashboard access, and our products (including Ceytrex Tickets, Flow, Agent, ID Vault, eSMS, and Toolkit where you use them).
Communication: To respond to inquiries, send order confirmations, OTPs, invoices, project updates, and support replies.
Recruitment: To review careers introductions and CVs, contact you about opportunities, and keep strong applications for future roles when appropriate.
Payments & fraud prevention: To process purchases through PayHere (Sri Lanka) Ltd. and keep transaction records for receipts, renewals, refunds, and dispute handling.
Operations & security: To manage accounts, prevent abuse, debug issues, and improve reliability.
Marketing: Only with your consent or where permitted by law - you can opt out of non-essential marketing emails.
Legal compliance: To meet applicable laws, tax, and regulatory requirements.
Information Sharing
We do not sell, trade, or rent your personal information.
Infrastructure & auth: Account and order data may be stored with our hosting and database providers (including Supabase) under contractual and security controls.
Email delivery: Transactional emails (OTP, receipts, contact acknowledgements) are sent via our SMTP email provider.
Contact routing: Contact-form submissions (and careers CVs) may be forwarded to our internal team channels, including Telegram and email, so we can respond promptly. Those messages are handled as confidential business correspondence.
Payments: Necessary checkout data is shared with PayHere (Sri Lanka) Ltd. to process payments.
Legal & transfers: We may disclose information when required by law, or as part of a merger, acquisition, or asset sale with appropriate safeguards.
Payment Processing
When you complete a payment on our website, we share the necessary transaction information (such as your name, email, phone number, billing address, order reference, and amount) with PayHere (Sri Lanka) Ltd., our PCI-DSS compliant payment gateway.
PayHere processes the payment on our behalf and returns us a transaction reference and status update. We store these details in your order history to confirm payment, issue refunds where applicable, and detect fraudulent activity.
We do not collect or store complete card numbers or CVV codes. All sensitive payment data is handled directly by PayHere in accordance with their security and privacy controls.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Our security measures include encryption in transit (HTTPS), access controls, hashed passwords via our auth provider, and limited staff access to operational systems.
While we strive to protect your information, no method of transmission over the internet is 100% secure. Please use a strong unique password for your account.
Your Rights
Access: You can request a copy of the personal information we hold about you.
Correction: You can request correction of inaccurate or incomplete personal information, including via your account profile where available.
Deletion: You may request deletion of your personal information, subject to legal, accounting, and fraud-prevention retention needs.
Portability: Where feasible, you may request your data in a commonly used electronic format.
Marketing objection: You can opt out of marketing emails at any time by contacting us or using unsubscribe links where provided.
Cookies Policy
We primarily use essential cookies and local storage for login sessions, cart/checkout continuity, and remembering your cookie-banner choice.
We do not currently run third-party advertising or marketing tracking pixels on this marketing site. If we enable analytics tools later, we will update the Cookie Policy and (where required) ask for consent.
Full details are in our Cookie Policy. You can also control cookies through your browser settings.
Data Retention
We retain personal information only as long as necessary for the purposes described above and to meet legal obligations.
Account, order, invoice, and payment records are kept for the life of the customer relationship and for a reasonable period afterward for tax, audit, and dispute handling.
Careers CVs and introductions are retained only as long as needed for recruitment review, then deleted or anonymised unless you ask us to keep your profile for future roles.
Chat and contact messages are retained as needed to complete support and sales follow-up.
Marketing communications data is retained until you unsubscribe or withdraw consent.
International Transfers
Ceytrex Labs is based in Colombo, Sri Lanka. Your information may be processed and stored in Sri Lanka and in other countries where our service providers (for example hosting, database, email, or payment partners) operate.
We take reasonable steps to ensure appropriate safeguards when personal information is transferred internationally.
By using our services, you understand that your information may be processed in these locations as described in this policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: hello@ceytrexlabs.com
We will respond to your inquiry within a reasonable timeframe and work to address your concerns.