Privacy Policy

This Privacy Policy explains how UniPOS collects, uses, stores and protects personal information when you visit theunipos.org, contact us, or use our software products and services.

UniPOS is operated in Sri Lanka as part of the DotcomOne Group of Companies. By using this website or our services, you agree to the practices described in this policy.

Information we collect

We collect only what we need to respond to you and to provide our software. Depending on how you interact with us, this may include:

Contact details you give us — name, email address, phone or WhatsApp number, business name and position.
Enquiry and order information — the plan or licence you are interested in, your requirements, and any messages you send us.
Business and transaction data you enter into your UniPOS workspace, such as products, stock, customers and sales records.
Payment information — handled by our payment partners. We receive confirmation and reference details, but we do not store full card numbers.
Technical information — IP address, browser and device type, pages viewed, and approximate location derived from your IP.
Communications — records of emails, WhatsApp messages and live-chat conversations with our team.

How we use your information

To respond to enquiries, provide quotations and arrange product demonstrations.
To create your account, activate your licence and deliver the software you purchase.
To provide support, troubleshoot issues and improve our products.
To process payments, issue receipts and manage renewals or upgrades.
To send service messages such as maintenance notices and updates to these policies.
With your consent, to share product news and offers. You can opt out at any time.
To detect, prevent and investigate fraud, abuse or security incidents.
To comply with legal, tax and accounting obligations.

Legal bases for processing

Where data-protection law requires it, we rely on the following grounds: performance of a contract (delivering software and support you have requested), legitimate interests (operating and improving our business securely), your consent (marketing communications and non-essential cookies), and legal obligation (tax and regulatory record-keeping).

We do not sell, rent or trade personal information. We share it only with:

Service providers who help us operate — hosting and cloud infrastructure, payment gateways, email delivery, analytics and our live-chat provider. They are bound by contract to handle data securely and only for the purpose we instruct.
Professional advisers such as accountants, auditors and lawyers, where necessary.
Authorities, where disclosure is required by law or a valid legal request.
Successors in the event of a merger, acquisition or restructuring, under equivalent confidentiality terms.

Cookies and tracking technologies

This website uses a small number of cookies and similar technologies — for example to remember your preferences, keep the site secure and understand which pages are useful. Our live-chat and font providers may set their own cookies when those features load.

You can block or delete cookies in your browser settings. Some parts of the site may not work as intended if you do. We do not serve third-party advertising cookies.

Data retention

We keep personal information only as long as we need it for the purpose it was collected, or as required by law. Enquiries that do not become customers are normally removed within 24 months. Customer and billing records are retained for the period required by Sri Lankan tax law. Data in your workspace remains yours and can be exported or deleted on request.

How we protect your data

We apply technical and organisational safeguards, including encryption in transit, access controls, least-privilege permissions and regular backups. No method of transmission or storage is completely secure, so while we work to protect your information we cannot guarantee absolute security.

Your rights

Subject to applicable law, you may:

Request a copy of the personal information we hold about you.
Ask us to correct information that is inaccurate or incomplete.
Ask us to delete information we no longer need or have no lawful reason to keep.
Object to or restrict certain processing, including direct marketing.
Withdraw consent you previously gave, without affecting processing that already took place.
Ask for your data in a portable, machine-readable format.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting, and we will respond within 30 days.

International transfers

Some of our service providers may store or process data outside Sri Lanka. Where that happens, we take reasonable steps to ensure your information continues to receive an appropriate level of protection, including contractual safeguards with those providers.

Children's privacy

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with information, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services or the law. The revised version will be published on this page with a new "last updated" date. Material changes will be highlighted on our website where appropriate.

Contact us

If you have a question about this policy or how your information is handled, contact UniPOS at:

WhatsApp / phone: +94 70 128 2176
Website: theunipos.org