Last updated: 10 October 2026
1Overview
WebCrest Solutions is a web development agency based in Sri Lanka. We design and build WordPress websites, UI/UX designs and e-commerce stores for businesses. This policy applies to our website and to the communication we have with you when you enquire about, or buy, our services.
By using our website you agree to the practices described here. If you do not agree, please do not submit your details through the site.
2Information we collect
We only collect what we need to reply to you and deliver your project.
| Type | Examples | How we get it |
|---|---|---|
| Contact details | Name, email, phone number, company name | Contact or project enquiry forms, email, WhatsApp |
| Project details | Business goals, budget range, design preferences, references | Forms, calls, messages, meetings |
| Technical data | Browser, device type, approximate location, pages visited | Automatically, through cookies and server logs |
| Billing details | Invoice name, address, payment reference | When you hire us for a service |
We never ask for card numbers or passwords through our contact forms or chat. If a payment gateway is used, the payment is processed on the gateway's own secure page.
3How we use your information
- To answer your questions and prepare quotations or proposals.
- To plan, design, develop, launch and support your website.
- To send invoices, project updates and service-related notices.
- To understand how visitors use our site so we can improve speed, layout and content.
- To protect the website against spam, abuse and unauthorised access.
- To meet legal, tax and accounting obligations.
We do not sell, rent or trade your personal information. We do not send marketing emails unless you have asked to hear from us.
4Cookies
Cookies are small text files stored on your device. Our WordPress site uses them for three purposes:
- Essential: keep the site working, remember security checks and login sessions for site administrators.
- Performance: anonymous statistics that show which pages are useful and which are slow.
- Functional: remember simple choices, such as a dismissed message.
You can block or delete cookies in your browser settings. Essential features may stop working if you block all cookies.
5Third-party services
To run our business we rely on trusted providers. They receive only the data needed for their task and are expected to protect it.
- Web hosting and email: store the website files, databases and business email.
- WhatsApp: when you tap a WhatsApp button, you are taken to WhatsApp, which handles your messages under its own privacy policy.
- Analytics and fonts: tools used to measure traffic and load fonts, such as Google services.
- Payment gateways: used only when you pay for a service online.
Links on our site may lead to other websites, including client projects in our portfolio. We are not responsible for their privacy practices.
6Client project data
When we build a website for you we may receive logos, images, content, hosting logins and admin access. We treat these as confidential.
- Access details are used only for your project and are shared with no one outside our team.
- We ask clients to share credentials through private channels, never in public posts or comments.
- When the project ends, we recommend you change all passwords we used, and we will remove your files from our working storage on request.
- Portfolio work is shown only with the client's permission.
7Data retention
We keep enquiry details for as long as needed to respond and for a reasonable period afterwards in case you return. Client and billing records are kept for as long as accounting and legal rules require. After that, we delete or anonymise the data.
8Security
We protect your data with practical, layered safeguards:
- HTTPS (SSL) encryption on the entire website.
- Regularly updated WordPress core, themes and plugins.
- Strong passwords, limited user roles and protection against spam and brute-force login attempts.
- Regular backups and restricted access to servers and files.
No method of transmission or storage is completely risk-free, so we cannot guarantee absolute security. If a breach affecting your data occurs, we will inform you promptly and take steps to limit the harm.
9Your rights
Subject to applicable Sri Lankan law, you may ask us to:
- Tell you what personal data we hold about you.
- Correct data that is wrong or incomplete.
- Delete your data when we no longer need it.
- Stop using your data for a purpose you did not agree to, or withdraw your consent at any time.
Send your request to the email below. We may ask you to confirm your identity first, and we aim to reply within 14 days.
10Children
Our services are intended for businesses and adults. We do not knowingly collect information from anyone under 18. If you believe a child has sent us their data, contact us and we will delete it.
11Changes to this policy
We may update this policy when our services or the law change. The date at the top of this page shows the latest version. Significant changes will be highlighted on the website.
12Contact us
Questions about privacy or your data? Reach us any time.