Last updated: 25 September 2026
RY Code (“we,” “us,” “our”), currently operated by Yashod Mendis and Ravishka Amashan and invoicing under the name Yashod Mendis pending formal business registration, respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights, when you visit our website, contact us, or use our web design, e-commerce, hosting, or POS services.
1. Information We Collect
a. Information you give us directly – Name, email, phone number, company name — via contact forms, quotation requests, or emails. – Billing and invoicing details — for clients engaging our services. – Project-related information — content, credentials, and business data you share for a project (e.g., hosting logins, product catalogs, POS data), which we treat as confidential.
b. Information collected automatically – Website usage data (pages visited, browser type, device, approximate location) via cookies and analytics tools (e.g., Google Analytics), if enabled on our website. – Server/hosting logs for websites we host or maintain on behalf of clients.
c. Information processed on behalf of clients When we build or maintain an e-commerce store, POS system, or website for a client, we may process that client’s own customers’ personal data (e.g., names, addresses, order details) strictly as instructed by the client, who remains the data controller for that data.
2. How We Use Information
We use collected information to: – Respond to inquiries and prepare quotations/proposals. – Deliver, host, and maintain the services you have engaged us for. – Issue invoices and manage payments. – Improve our website and services. – Communicate project updates, support notices, or (with consent) occasional marketing updates.
We do not sell personal information to third parties.
3. Legal Basis for Processing
We process personal data based on: – Performance of a contract (delivering a project you’ve engaged us for). – Your consent (e.g., marketing emails, non-essential cookies). – Our legitimate business interests (e.g., responding to inquiries, securing our systems). – Compliance with legal obligations (e.g., tax/invoicing records).
4. Sharing of Information
We may share information with: – Service providers we use to deliver your project — hosting companies, domain registrars, payment gateways, plugin/theme vendors, and analytics providers — only as necessary to perform the service. – Legal authorities, where required by law. We do not share client project data (including end-customer data processed on a client’s behalf) with unrelated third parties.
5. Data Storage & Security
We take reasonable technical and organizational measures (such as access controls, secure hosting, and confidentiality practices) to protect the information we handle. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain personal and project information for as long as necessary to: – Deliver ongoing services (e.g., hosting, maintenance, support). – Meet accounting, invoicing, and tax record-keeping obligations. – Resolve disputes or enforce agreements.
Data no longer needed for these purposes will be deleted or anonymized where reasonably practicable.
7. Cookies
Our website may use cookies and similar technologies to remember preferences and understand site usage. You can control or disable cookies through your browser settings; disabling some cookies may affect website functionality.
8. Your Rights
Subject to applicable law, you may have the right to: – Request access to the personal data we hold about you. – Request correction of inaccurate data. – Request deletion of your data, where applicable. – Withdraw consent for marketing communications at any time.
To exercise these rights, contact us using the details in Section 12.
9. Children’s Privacy
Our services are intended for businesses and individuals over the age of 18. We do not knowingly collect personal data from children.
10. International Data Transfers
Where a hosting provider, plugin, or analytics service we use stores data outside Sri Lanka, that data may be transferred and processed internationally. We select providers that maintain reasonable data protection standards.
11. Regulatory Note (Sri Lanka)
Sri Lanka’s Personal Data Protection Act, No. 9 of 2022 (PDPA) is Sri Lanka’s core data protection law. Its Data Protection Authority is already established, and key operational provisions (covering lawful processing, controller/processor obligations, data breach notification, and cross-border transfers) are scheduled to take effect on 1 January 2027 under a gazette notification issued in July 2026. We are committed to aligning our data handling practices with the PDPA as it comes into force.
12. Changes to This Policy
We may update this Privacy Policy periodically. The “Last updated” date at the top reflects the latest revision. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.
13. Contact Us
For privacy-related questions or requests, contact: RY Code (operated by Yashod Mendis & Ravishka Amashan) Email: hello@rycode.online Phone: +94 77 906 8435 Address: Ambalangoda, Sri Lanka, 80300
