1. About this policy
Onando IT Solutions (“Onando”, “we”, “our” or “us”) respects your privacy. This Privacy and Cookie Policy explains what information we collect through our website and business interactions, why we use it, how we protect it and the choices available to you.
2. Information we collect
- Contact information: your name, email address, telephone number, company and details included in an enquiry.
- Project and transaction information: requirements, communications, proposals, invoices, payment records and service history.
- Technical and usage information: IP address, browser, device, referring source and site interactions, where analytics or server logs are enabled.
- Communication preferences: whether you choose to receive updates or other communications.
Payment information may be processed by trusted payment providers. We do not intend to store full credit or debit card details on our website.
3. How we use information
- To reply to enquiries and prepare proposals.
- To provide, manage, support and improve websites, software systems and IoT services.
- To administer contracts, invoicing and customer relationships.
- To maintain website security, prevent misuse and diagnose technical issues.
- To meet legal obligations and resolve disputes.
- To send marketing communications where you have consented or applicable law permits.
We do not sell or rent your personal information.
4. Legal bases
Where the GDPR, UK GDPR or similar laws apply, we process data because it is necessary to perform or prepare a contract, because you have given consent, to comply with law, or for legitimate interests such as securing and improving our services. Consent may be withdrawn at any time.
5. Cookies and analytics
Cookies are small files stored by your browser. We may use essential cookies for basic functionality, analytics cookies to understand website performance and preference cookies to remember choices. You can restrict or remove cookies through your browser. Some features may not work correctly when essential cookies are disabled.
6. Sharing and international processing
We may share limited data with vetted hosting, email, analytics, payment, professional-service and technology providers where necessary to operate our business. We may also disclose information where required by law or to protect legitimate rights. Providers are expected to handle data securely and only for agreed purposes. Some providers may process information outside Sri Lanka; where required, appropriate safeguards will be used.
7. Security and retention
We use reasonable administrative and technical safeguards, including access controls, secure hosting practices and encryption where appropriate. No internet transmission is completely secure. We retain information only as long as needed for the stated purposes, contractual obligations, dispute resolution and legal record-keeping.
8. Your rights
Depending on your location, you may have rights to access, correct, delete or restrict personal data; object to certain processing; request portability; withdraw consent; or lodge a complaint with a regulator. California residents may also request details of collected information and opt out of its sale; Onando does not sell personal data.
9. External links
Our site may link to partner or third-party websites. Their privacy practices are outside our control, and you should review their policies when leaving this site.
10. Updates and contact
We may update this policy to reflect changes in technology, services or law. The effective date above will be revised when material changes are published. Questions or privacy requests can be sent to info@onandoit.com or addressed to Onando IT Solutions, 46, Yakinarankatuwa Estate, Asokarama, Ekala, Sri Lanka.