Web Craft FactoryClient LoginSoon

Web Craft Factory

Privacy Policy

Version 1.0 · Effective 1 November 2026

This policy explains what personal data we collect when you contact us or work with us, why we use it and who we share it with. It is written to follow Sri Lanka's Personal Data Protection Act No. 9 of 2022.

1. What we collect

Your WhatsApp phone number and profile name, and the messages, voice notes, photos and files you send us.

Details about your business and project that you tell us or our assistant, such as your business name, location, the pages you need and your budget.

If you came from one of our ads, the ad you clicked.

Payment slips you send us and the payment details we confirm against our bank.

A record of each time you agree to a quote: your number, name, the date and time, and the versions of our terms and this policy.

2. Why we use it

To answer you, prepare quotes, design and build your website, and keep you updated about your project.

To issue invoices, confirm payments and manage renewals.

To keep proof of what we agreed, and to meet our legal and accounting obligations.

To understand which of our ads bring customers, using counts rather than individual profiles.

3. Who we share it with

We do not sell your data. We use these service providers to run our service:

Meta (WhatsApp Business Platform), to exchange messages with you. Twilio, to send SMS when WhatsApp can't reach you. OpenAI, which powers our chat assistant (we ask it not to store conversations). Microsoft Azure, which hosts our server and database. Cloudflare, which hosts website previews and live websites and stores encrypted database backups. Google Drive, which holds a second backup copy.

Some of these providers process data outside Sri Lanka. We only use providers that protect data with appropriate security.

4. How long we keep it

We keep project, invoice and agreement records for as long as needed for the project, renewals and our legal and tax obligations (generally at least 6 years).

Chats with people who did not become customers are kept for up to 12 months and then deleted.

Backups are kept for 30 days.

5. Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it where we are not required to keep it. You can also ask us to stop sending you messages other than those about an active project or invoice.

To make a request, message us on WhatsApp or email us. We will reply within 21 days.

6. Security

Our server and backups are access-controlled and encrypted in transit. Your project page and invoices are only reachable through a private link that we send to you, so please don't share it.

7. Contact and changes

Questions about this policy can go to the contact details below. We may update this policy; each version is numbered and dated on this page.

Who we are

Web Craft Factory
Sri Lanka
hello@webcraftfactory.com · WhatsApp

See also: Terms of Service