Privacy Policy

Last Updated: February 2026

eCloud.lk (“the Company”, “we”, “us”, or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information in compliance with the Personal Data Protection Act No. 9 of 2022 of Sri Lanka.

1. Information We Collect

We collect information that identifies you or can be used to identify you (“Personal Data”) when you interact with our platform:

  • Account Data: Name, business name, NIC/Passport number (if required for verification), physical address, email address, and telephone numbers.
  • Technical Data: IP addresses, browser types, access times, and device identifiers collected via cookies and server logs.
  • Service Data: Domain name registration details, server configurations, and support ticket history.
  • Financial Data: We process payments through secure local gateways. While we maintain records of transactions, we do not store credit card numbers on our servers.

2. Purpose of Data Processing

In accordance with the PDPA, we process your data only for specified and lawful purposes:

  • Contractual Necessity: To provision your Cloud VPS, GPU servers, or workspace licenses.
  • Identity Management: To verify the legitimacy of account holders and prevent fraudulent activities.
  • Communication: To send automated invoices, service alerts, and critical security updates.
  • Legal Compliance: To meet the requirements of the LK Domain Registry, ICANN, and Sri Lankan law enforcement requests.

3. Data Sharing and Third-Party Transfers

As an authorized partner of global infrastructure providers, your data may be shared under strict confidentiality agreements with:

  • Upstream Providers: AWS, Microsoft, and Google (for provisioning global cloud instances and licenses).
  • Domain Registries: Information required for WHOIS databases as mandated by ICANN and the LK Domain Registry.
  • Local Authorities: When required by a valid court order or under the Computer Crimes Act of Sri Lanka.

4. Data Security and Integrity

eCloud.lk implements industry-standard technical and organizational measures to prevent unauthorized access, loss, or destruction of data:

  • Encryption: Use of SSL/TLS for all data transmissions.
  • Access Control: Strict internal “need-to-know” access policies.
  • Monitoring: 24/7 system monitoring to detect and mitigate potential data breaches.

5. Data Retention

We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected or to comply with legal, accounting, or reporting requirements. Account data for terminated services is typically purged after 30 days, unless a longer retention period is required by law.

6. Your Rights as a Data Subject

Under the Sri Lanka PDPA, you have the following rights:

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You can update or correct your information via the eCloud.lk Client Console.
  • Right to Erasure: You may request the deletion of your data, subject to our legal obligations to retain certain records (e.g., tax invoices).
  • Right to Object: You may opt-out of marketing communications at any time.

7. Cookies and Tracking

We use cookies to improve your client console experience and analyze site traffic. You can manage cookie preferences through your browser settings; however, disabling cookies may limit your ability to use certain features of the eCloud.lk client console.

8. Contact Our Data Protection Officer (DPO)

For any questions regarding this policy or to exercise your data rights, please contact us: [email protected]