Privacy Policy
1. Introduction
This Privacy Policy explains how we collect, use, store, disclose and protect personal data.
Terracode processes personal data in accordance with applicable privacy and data protection requirements, including the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka, as amended and applicable.
2. Personal Data We May Collect
Depending on how you interact with Terracode, we may collect:
Identity Information
name;
username;
job title;
company or organisation name.
Contact Information
email address;
telephone number;
business address;
contact preferences.
Account Information
account credentials;
account identifiers;
subscription details;
account preferences.
Transaction Information
purchases;
invoices;
subscription history;
billing information;
transaction status;
payment references.
Payment card information may be collected directly by third-party payment processors. Terracode does not normally store full payment card numbers or card security codes.
Technical Information
We may automatically collect:
IP address;
browser type;
device information;
operating system;
login records;
application logs;
timestamps;
security events;
approximate location derived from IP information; and
diagnostic data.
Usage Information
We may collect information regarding how individuals use our websites and Services, including:
pages viewed;
features used;
actions performed;
interaction history;
session activity; and
product analytics.
Communications
We may retain communications sent through:
email;
support channels;
contact forms;
customer service;
project communication tools; and
other business communication channels.
Customer-Provided Data
Where customers use Terracode software to process information relating to their customers, employees, suppliers or other persons, Terracode may process such information on behalf of the customer.
In such circumstances, the customer may act as the primary controller of that information and Terracode may act as a processor or service provider, depending on the circumstances.
3. How We Collect Information
Information may be collected:
directly from you;
when you register an account;
when you purchase a Service;
through our websites or applications;
through cookies and similar technologies;
from your organisation;
from systems you choose to integrate with our Services;
from third-party service providers; and
through normal operation of our software infrastructure.
4. How We Use Personal Data
Terracode may process personal data to:
create and administer accounts;
deliver purchased Services;
process subscriptions and transactions;
provide customer support;
communicate service information;
maintain and improve software;
customise functionality;
maintain cybersecurity;
prevent fraud and abuse;
troubleshoot technical problems;
conduct analytics;
manage contracts and projects;
comply with legal and regulatory requirements;
maintain accounting and business records;
exercise or defend legal rights; and
send marketing communications where legally permitted.
We process personal data only where there is an appropriate lawful basis under applicable law.
5. Payment Information
Payments may be handled by external payment processors.
When payment information is entered directly into a payment processor’s system, that provider processes the information according to its own security and privacy requirements.
Terracode may receive limited payment-related information such as:
customer name;
payment status;
transaction identifier;
payment amount;
payment method type; and
limited card information such as the final digits of the card where supplied by the processor.
Terracode does not intentionally store full card numbers or card security codes unless expressly required and appropriately secured.
6. Sharing of Personal Data
Terracode does not sell personal data.
We may disclose personal data to:
cloud hosting providers;
payment processors;
email and communication providers;
analytics providers;
cybersecurity providers;
professional advisers;
contractors supporting delivery of our Services;
software integration providers;
AI service providers where an AI-enabled feature requires such processing; and
government authorities or regulators where required by law.
We seek to disclose only information reasonably necessary for the relevant purpose.
7. International Processing and Transfers
Terracode may use technology service providers located outside Sri Lanka.
Accordingly, personal data may in certain circumstances be processed or stored outside Sri Lanka.
Where applicable law requires safeguards for international transfers, Terracode will take reasonable and appropriate steps to implement the required safeguards.
8. Data Retention
Terracode retains personal data only for as long as reasonably necessary for the purpose for which it was collected, including to:
provide Services;
maintain accounts;
comply with financial and legal obligations;
maintain security records;
resolve disputes;
enforce agreements; and
establish, exercise or defend legal claims.
Retention periods may differ depending on the type of data and the applicable legal or operational requirements.
Data that is no longer required will be deleted, anonymised or securely disposed of where reasonably practicable.
9. Your Data Protection Rights
Subject to applicable law and any permitted exceptions, individuals may have rights including the right to:
request access to personal data;
request correction or completion of inaccurate personal data;
withdraw consent where processing is based on consent;
object to certain processing;
request erasure of personal data where applicable; and
request review of certain decisions made solely through automated processing.
These rights correspond with rights recognised under Sri Lanka’s PDPA.
Requests may be submitted to:
operations@terracodedev.com
We may request reasonable verification before processing a request.
10. Marketing Communications
Where legally permitted, Terracode may send information concerning:
products;
services;
updates;
offers;
events; and
relevant company information.
Recipients may unsubscribe from marketing communications using the unsubscribe mechanism provided or by contacting us.
Operational or security-related messages concerning an active account may still be sent even where marketing communications have been declined.
11. Cookies
Terracode websites may use cookies and similar technologies for:
essential website functionality;
security;
authentication;
preferences;
performance;
analytics; and
marketing where applicable.
Further information is provided in our Cookie Policy.
12. Security
Terracode uses reasonable technical and organisational measures designed to protect personal data against:
unauthorised access;
accidental disclosure;
alteration;
loss;
destruction; and
misuse.
These measures may include access controls, authentication, encryption, backups, logging and security monitoring where appropriate.
No electronic system can guarantee absolute security.
13. Data Breaches
Terracode maintains procedures for investigating suspected personal data breaches.
Where notification is required under applicable law, Terracode will take appropriate steps to notify the relevant parties and authorities.
14. Children’s Privacy
Terracode Services are primarily intended for businesses and persons legally capable of entering into contractual relationships.
We do not knowingly collect personal data directly from children where such processing would be unlawful.
If you believe a child has provided personal data to us improperly, please contact:
operations@terracodedev.com
15. Third-Party Websites and Services
Our Services may contain links or integrations with third-party websites or services.
Terracode does not control the privacy practices of independent third parties. Users should review the privacy policies of those providers.
16. Changes to This Privacy Policy
Terracode may update this Privacy Policy to reflect changes to:
applicable law;
Services;
technology;
data practices; or
regulatory requirements.
The latest version will display its effective date.
17. Contact Us
Questions, complaints or data protection requests may be directed to:
Registered Address: 274, Highlevel Road, Maharagama, Sri Lanka
Phone: +94112838640
Privacy Email: operations@terracodedev.com
