Privacy Policy

1. Who we are

ASRON (Pvt) Ltd ("ASRON", "we", "us") is a software company registered in Sri Lanka, with its office at Level 05, Parkland Building, 33 Park Street, Colombo 02. This policy explains how we handle personal data when you use our website, contact us, or use our products and services. For any privacy question, write to consult@asron.co.

2. Data we collect

• Information you give us — name, email, phone, company, and message content when you submit a contact, career, or newsletter form.
• Product account data — account details and business data you store inside ASRON products (e.g. sales records in ASRON POS). You control this data; we process it only to provide the service.
• Technical data — IP address, browser type, device, and pages viewed, collected through server logs and (with your consent) analytics cookies.

3. How we use it

• To respond to inquiries and deliver the services you've requested.
• To operate, secure, back up, and improve our products.
• To send the newsletter you subscribed to — every email includes one-click unsubscribe.
• To meet legal and accounting obligations.

We do not sell personal data. Ever.

4. Cookies

We use two kinds of cookies and similar storage: essential (theme preference, cookie choice — required for the site to function) and analytics (aggregate usage measurement, set only if you choose "Accept all" in the cookie notice). You can change or withdraw consent by clearing site data in your browser; the notice will reappear.

5. Sharing

We share data only with service providers who help us operate (cloud hosting, email delivery, payment processing), each bound by contract to protect it; and with authorities where the law requires. Client business data stored in ASRON products is never shared with other clients or third parties for their own purposes.

6. Security & retention

Data is encrypted in transit (TLS) and at rest, access is role-restricted and logged, and backups are tested regularly. We keep personal data only as long as needed for the purpose it was collected, then delete or anonymise it. Product data is deleted or returned to you within 60 days of contract end, at your choice.

7. Your rights

You may request access to, correction of, or deletion of your personal data, object to processing, or ask for a copy in portable format. Email consult@asron.co and we will respond within 30 days. If you believe we've mishandled your data, you may also complain to your local data protection authority.

8. Children

Our website and services are directed at businesses and are not intended for children under 16. School ERP processes student records strictly under the instructions of the educational institution, which remains the data controller.

9. Changes

We'll post any changes to this policy here and update the date above. Material changes affecting product customers are notified by email at least 14 days in advance.