PrivacyPolicy
We are committed to safeguarding your personal information, client data, and application telemetry with maximum security and transparency.
Easternlabs Global Privacy Policy
Effective Date: July 22, 2026
1. Overview
Easternlabs (“we”, “our”, or “us”) respects your privacy and is dedicated to protecting personal data. This Privacy Policy outlines how we collect, process, store, and safeguard information collected through our website (easternlabs.lk), our retail POS applications, mobile products, and software engineering services.
2. Information We Collect
We may collect the following categories of data when you interact with our platforms:
- Contact & Project Inquiries: Name, business email address, phone number, company name, and message details submitted via our contact or estimate forms.
- Application & POS Telemetry: Anonymized diagnostic logs, crash reports, network status telemetry, and hardware device identifiers to maintain system performance and offline sync stability.
- Usage & Cookie Data: IP address, browser type, referral URL, operating system, and interaction timestamps collected via performance analytics cookies.
3. How We Use Your Information
Collected data is used strictly for the following purposes:
- Delivering, maintaining, and supporting our custom software platforms and retail POS engines.
- Responding to sales inquiries, providing project cost estimates, and scheduling engineering consultations.
- Enhancing system security, detecting malicious activity, and ensuring high-availability performance.
- Complying with statutory accounting, tax, and legal obligations in Sri Lanka and the UAE.
4. Data Security & Storage Standards
We implement industry-standard technical and organizational security measures to protect your data against unauthorized access, loss, or alteration:
All database storage uses AES-256 encryption; network communications enforce TLS 1.3 encryption.
Access to production servers and client databases is locked behind multi-factor authentication (MFA) and VPN tunnels.
5. Data Sharing & Third-Party Services
We never sell or rent your personal or corporate data to third parties. We may share data only with trusted cloud infrastructure providers (e.g., AWS, Vercel, PostgreSQL hostings) operating under strict data processing agreements to run our services.
6. Your Rights
Depending on your location, you have rights under applicable privacy laws (such as GDPR or Sri Lanka PDPA), including:
- The right to access a copy of the personal data we hold about you.
- The right to request correction of inaccurate data.
- The right to request erasure of your data (“Right to be Forgotten”).
- The right to opt-out of non-essential marketing communications.
7. Contact Data Protection Officer
For any privacy questions, data requests, or security inquiries, please reach out to our Privacy Office: