Privacy policy

1. Who we are

Westroo Digital (Private) Limited (“Westroo Digital”, “we”, “us”, “our”) is a software company registered in Sri Lanka under company registration number PV00312248, with its registered office at No 42, Madapatha, Piliyandala, Colombo, Sri Lanka.

We develop audio software, music effect plugins and mobile applications. This policy explains what we do with personal information collected through this website, our contact and newsletter forms, and our software.

For any question about this policy, write to [email protected].

2. Information we collect

2.1 Information you give us

• Contact form. Your name, email address, organisation (if provided) and the content of your message.
• Newsletter. Your first name and email address.
• Job applications. Anything you send us when applying for a role, including your CV.
• Correspondence. Records of emails and messages you exchange with us.

2.2 Information collected automatically

• Server logs. Our hosting provider records IP address, browser type, referring page, pages visited and the time of each request. These logs are used for security and troubleshooting.
• Cookies. See section 5.

2.3 Information collected by our software

Our desktop software and mobile applications are built to collect as little as possible. Specifically:

• The software may check for updates so we can notify you of new versions. These checks send only the information needed to compare versions and do not identify you personally.
• If the software encounters a problem, it may send an anonymous crash report to help us fix it. Crash reporting is optional and can be turned off.
• We use no third-party analytics, advertising or tracking in our software or mobile applications.

We do not sell personal information, and we do not use it for advertising.

3. How we use information

• To answer your enquiries and provide support
• To send newsletters you have asked to receive
• To operate, secure and improve this website and our software
• To consider job applications
• To meet legal, accounting and regulatory obligations

4. Legal basis

Where the Personal Data Protection Act No. 9 of 2022 of Sri Lanka applies, we process personal data on the basis of your consent (for example, newsletter subscriptions), the performance of a contract, our legitimate interests in running and securing our business, and compliance with legal obligations. Where the EU or UK GDPR applies to a visitor, we rely on the equivalent lawful bases.

5. Cookies and analytics

This website uses only the cookies necessary for it to function. If you add analytics, embedded video, maps or a chat widget later, list each one here with its purpose and provider, and add a cookie banner where consent is required.

You can block or delete cookies in your browser settings. Doing so does not affect your ability to read this site.

6. Sharing and disclosure

We share personal information only with:

• Service providers who operate parts of our business on our behalf — our web host, email provider and, if used, our newsletter platform. They may process personal information only on our instructions.
• Professional advisers such as accountants and lawyers, where necessary.
• Authorities, where we are required to disclose information by law.

We do not sell, rent or trade personal information.

7. International transfers

Our website and some of our service providers may store data on servers outside Sri Lanka. Where personal information is transferred abroad, we take reasonable steps to ensure it remains protected to a standard comparable to that required under Sri Lankan law.

8. How long we keep information

• Contact enquiries: kept for as long as needed to deal with the matter, then for a reasonable period as a record.
• Newsletter subscriptions: until you unsubscribe.
• Job applications: kept for a stated period after the recruitment decision, then deleted.
• Server logs: kept for the retention period set by our hosting provider.

Set your actual retention periods above before publishing.

9. Security

This site is served over HTTPS, and access to systems holding personal information is limited to people who need it. No transmission over the internet is completely secure, and we cannot guarantee absolute security, but we take reasonable technical and organisational measures to protect the information we hold.

10. Your rights

Subject to applicable law, you may ask us to:

• confirm whether we hold personal data about you, and give you a copy;
• correct information that is inaccurate or incomplete;
• erase information we no longer need to hold;
• restrict or object to certain processing;
• withdraw consent you previously gave, at any time.

Write to [email protected] and we will respond within the period required by law. If you believe we have not handled your request properly, you may complain to the relevant data protection authority.

11. Children

Our website and software are not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed, and material changes will be announced on this page.

13. Contact us

Westroo Digital (Pvt) Ltd
No 42, Madapatha, Piliyandala, Colombo, Sri Lanka
[email protected]