Privacy

Privacy policy

How Insteller (Pvt) Ltd handles personal information submitted through this website, and what you can ask us to do with it.

Last updated September 2026

This website is operated by Insteller (Pvt) Ltd, a company incorporated in Sri Lanka, with its registered office at 127/1 Dolagawaththa, Mampitiya, Galle, Sri Lanka. In this policy, Insteller, we and us mean that company. Insteller is the controller of the personal information described in this policy.

We are contactable at info@insteller.com or on +94 77 910 3806.

We collect personal information that you choose to give us. In practice that is one of the following.

  • Enquiry form. Your name, work email address, company name, whether you are an agency or a direct client, the roles or capability you need, an indicative team size, and whatever you write in the message field.
  • Email and telephone. Anything you send us directly, including attachments such as a requirement document or a security questionnaire.
  • Server logs. Our hosting provider records standard technical information for each request, including IP address, timestamp, requested page and user agent. This is used to operate and protect the site.

We do not ask for, and would prefer you did not send, sensitive categories of personal information such as health information, government identifiers or payment card details. Do not include confidential client material in a first enquiry.

We use the information you submit to respond to your enquiry, to assess whether we can do the work, to prepare a proposal, and to carry out and administer any engagement that follows. We also keep a record of business correspondence for our own accounting and governance obligations.

Where the General Data Protection Regulation applies, our lawful bases are your consent in submitting an enquiry, our legitimate interest in responding to business enquiries and in maintaining business records, the steps necessary before entering a contract at your request, and compliance with legal obligations. Where Australian privacy law applies, information is collected for the primary purpose of responding to and administering your enquiry, and not used for an unrelated secondary purpose without your consent.

We do not sell personal information. We do not share it for cross-context behavioural advertising. We do not use it for automated decision making or profiling. We do not add enquirers to a marketing list without a separate, explicit request from you.

This website sets no cookies of its own, runs no third-party analytics, no advertising tags, no social media pixels and no session recording. Pages are static files served with self-hosted fonts. Submitting the enquiry form sends your entry to our hosting provider for delivery to us and involves no third-party tracking.

  • Enquiries that do not proceed. Retained for up to twenty-four months from the last contact, then deleted, unless you ask us to delete it sooner.
  • Enquiries that become an engagement. Retained for the life of the engagement and for seven years afterwards, to meet accounting, tax and contractual record-keeping obligations.
  • Server logs. Retained by our hosting provider on its standard schedule, which is short term and measured in weeks rather than years.

We share personal information only where it is necessary, and only with the following.

  • Service providers. Our website host and form handler, our email provider and our accounting software, each acting on our instructions under their own contractual terms.
  • Professional advisers. Our accountants and, where relevant, legal advisers, under a duty of confidence.
  • Where the law requires it. A court, regulator or law enforcement body where we are legally obliged to disclose.

We do not pass your enquiry to any other company for its own marketing. Where a company in the same ownership group would need to be involved in delivering work for you, that involvement is disclosed to you and agreed in writing before it happens.

Insteller is based in Sri Lanka. If you contact us from Australia, the European Union, the United Kingdom, the United States or anywhere else, your information will be transferred to and accessed in Sri Lanka. Our hosting and email providers operate infrastructure in several countries, including within the European Union and the United States, so data may also be processed there.

Sri Lanka has not been the subject of an adequacy decision by the European Commission. Where the General Data Protection Regulation applies to a transfer, we will put appropriate safeguards in place, including standard contractual clauses, on request and as part of any engagement contract. Where Australian Privacy Principle 8 applies, we will take reasonable steps to ensure an overseas recipient does not breach the Australian Privacy Principles, or rely on your consent to the transfer where that is the agreed basis.

This policy covers information collected through this website. It does not cover personal data that we access or process inside a client's systems in the course of delivering engineering work. In that situation the client is the controller, we act as a processor on the client's documented instructions, and the terms are set by the engagement contract and the client's own data processing agreement rather than by this page.

Our practice on client systems, access and confidentiality is described on our security page.

Enquiry data is held in access-controlled business accounts protected by multi-factor authentication, and is available only to the people who need it to answer you. This site is served over HTTPS. We apply the controls described on our security page, and we hold no security certification and do not claim one. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to the law that applies to you, you may ask us to do any of the following.

  • Confirm whether we hold personal information about you, and give you a copy.
  • Correct information that is inaccurate or out of date.
  • Delete information we no longer need to keep.
  • Restrict or object to our use of it, including any use based on legitimate interest.
  • Receive it in a portable, machine-readable form, where that right applies.
  • Withdraw consent at any time, without affecting anything done before you withdrew it.

Write to info@insteller.com. We respond within thirty days. We may ask you to confirm your identity before we act, and we will tell you if a legal obligation prevents us from deleting something.

If you are unhappy with how we have handled your information, contact us first at info@insteller.com so we can try to resolve it. We acknowledge within five business days and respond in writing within thirty days.

We may update this policy as our practice changes or as the law requires. The date at the top of the page shows when it last changed. Material changes affecting information we already hold about you will be notified to you directly.

Insteller (Pvt) Ltd, 127/1 Dolagawaththa, Mampitiya, Galle, Sri Lanka. Email info@insteller.com. Telephone +94 77 910 3806.