Privacy Policy

• Enquiries: your name, email, message and any phone number, subject or project details you provide through a form or when you contact us directly.
• Job applications: your name, contact details, the role you apply for, your CV and any LinkedIn profile or cover letter you choose to share.
• Blog comments: your name, email address, comment and submission date. Your name, comment and date may appear publicly; your email address is not shown publicly with your comment. Please avoid sharing private information.
• Client accounts and billing: your contact and company details, service information, invoices, payment references, payment dates, transaction status, receipt notes, review decisions, correspondence and any bank-transfer receipts you upload to our client portal. Passwords used for portal access are stored as password hashes.

Please share only information needed for your enquiry or service. If you provide information about someone else, make sure you are authorised to do so.

We use this information to respond to enquiries, prepare quotations, deliver and support agreed services, manage accounts and invoices, verify payments, send service and security messages, consider job applications and manage comments. We also use technical information to protect the website from abuse, diagnose problems and understand how it is used.

We process information as needed to handle your request, fulfil our agreements, meet legal obligations and operate our services. Where we rely on your consent, you can withdraw it by contacting us. This does not affect processing already carried out or records we must retain.

Our website and portal use essential cookies for functions such as secure sign-in and sessions. Technical data, including IP addresses, browser or device information, application logs and request details, may be processed for security, rate limiting and service operation.

This website uses Google Analytics to understand visits and page use. Analytics may use cookies and collect page, device and usage information. Read how Google uses information from sites that use its services.

You can manage or delete cookies in your browser settings and use Google's Analytics opt-out browser add-on where supported. Blocking essential cookies may prevent account features from working. External images and links may also connect your browser to third-party services with their own privacy practices.

The client portal uses cookies for sign-in sessions, security and the optional "Keep me signed in" feature. The portal does not currently use advertising or analytics trackers. You can read its public policy pages without signing in; blocking portal cookies may sign you out or prevent authenticated features from working.

Our client portal lets clients view invoices and manage payments. We use billing details, transaction references and payment status to reconcile your account. For a bank transfer, authorised staff review the receipt you submit; include only details needed to identify the payment.

Uploaded portal receipts are kept in private storage, with access checked through authenticated routes. Clients can access records linked to their own account; authorised HelloZEE administrators manage accounts and review transfers. A slip is used for verification, and uploading one does not itself confirm payment.

Where online payment is available, the portal uses OnePay. Necessary contact, billing and transaction information is shared with OnePay and its payment partners to process and confirm your payment and help prevent fraud. Card details are entered through the payment provider's checkout; HelloZEE does not collect or store full card numbers or card security codes through that checkout. Never put card credentials, passwords or one-time codes in a receipt, note or support email. OnePay's handling of payment data is described in its Privacy Policy.

Information is available to authorised HelloZEE staff and service providers where needed to do their work. These include hosting and database providers, email delivery services such as Resend for website enquiries and applications, analytics providers and payment providers when you use their services. Portal notifications may also use email and SMS delivery providers.

We do not sell your personal information. We may disclose information when required by law or when necessary to investigate fraud, protect rights or resolve a dispute. Some providers operate outside Sri Lanka, so information may be processed in other countries under applicable data-protection requirements. Public comments and information you share directly on external websites are subject to their respective visibility and policies.

We use reasonable technical and organisational measures to protect personal information and restrict access to people who need it. No online service can guarantee absolute security. Keep your account credentials private and contact us promptly if you suspect unauthorised access.

We keep information for as long as needed for the purpose it was collected, including service delivery, recruitment, accounting, legal obligations and resolving disputes. Retention depends on the type of record and those requirements. Closing an account does not necessarily remove financial records that must be retained. When information is no longer needed, we delete or anonymise it.

You can contact us to ask about the information we hold about you, request access or correction, ask for deletion, or raise an objection to its use, subject to applicable law. We may need to verify your identity before acting on a request. If we need to retain a record for a legal or service reason, we will explain the limitation.

You may choose not to provide optional details. Without information needed for a request, application, service or payment, we may be unable to complete it. Contact us if you want your public comment reviewed or removed, or if you have a privacy concern. You may also raise concerns with the relevant data-protection authority where applicable.

Email privacy requests to the contact below with the subject "Privacy request".

We may update this policy when our services or information practices change. The date at the top shows the latest revision. Our Terms & Conditions explain website use, service agreements and payment terms.

For questions about this policy or your service, contact HelloZEE Private Limited at hello@hellozee.com or +94 77 075 0076.