01 Overview
Suwahas Ltd ("Suwahas", "we", "us") is an independent systems engineering practice. We respect your privacy and collect only the information required to operate our website and services, communicate with you, and keep our systems secure.
We do not sell personal information. We do not use personal information for advertising.
02 Scope
This policy applies to:
- The website at suwahas.com.
- The Suwahas Console at portal.suwahas.com and related client applications that let you sign in, including with Google (together, the "Services").
- Email and other direct communication with our engineering team.
Data that we process for clients inside their own systems under an engineering contract is governed by that contract and any associated data processing agreement.
03 Information we collect
Information you provide
- Inquiries: the contact form on this website opens your own email application. We receive only what you choose to send us, such as your name, email address, company, and project details.
- Account information: when you create or use an account on the Services, we collect your name, email address, and authentication details.
Information collected automatically
- Server logs: IP address, browser user agent, requested URL, referrer, and timestamp. These are used for security, abuse prevention, and troubleshooting.
- Local preferences: your light/dark theme choice is stored in your browser's local storage. It is not sent to us.
This website does not use advertising cookies, cross-site tracking, or third-party analytics.
Third-party resources
This website loads fonts from Google Fonts and icons from the jsDelivr CDN. When your browser requests these files, those providers receive your IP address and browser information under their own privacy policies.
04 Google user data
The Services offer "Sign in with Google". If you choose it, Google shares limited information with us after you grant consent. We request only the following scopes: openid, email, and profile.
| Data received | Purpose |
|---|---|
| Google account identifier | Link your Google sign-in to your Suwahas account. |
| Email address and verification status | Identify your account, authenticate you, and send service and security notices. |
| Name and profile picture | Display your identity inside the Services. |
How we use Google user data
We use Google user data only to provide and secure the sign-in and account features you requested. We do not:
- sell Google user data;
- use or transfer it for advertising, retargeting, or interest-based advertising;
- use it to determine creditworthiness or for lending purposes;
- use it to develop, improve, or train generalized artificial intelligence or machine learning models;
- allow humans to read it, except with your explicit consent, when necessary for security purposes, to comply with law, or when the data has been aggregated and anonymized for internal operations.
Storage and protection
Google user data is stored in our account database and transmitted only over encrypted (TLS) connections. We never receive or store your Google password. Access is restricted to authorized engineers who need it to operate the Services.
Sharing
We do not share Google user data with third parties except with infrastructure providers that host the Services on our behalf under confidentiality obligations, or where required by law.
Revoking access
You can revoke the Services' access to your Google account at any time from your Google Account permissions page. To delete the Google user data we hold, see Retention and deletion.
05 How we use information
- To respond to inquiries and provide engineering services you request.
- To create, authenticate, and maintain accounts on the Services.
- To secure our systems, detect abuse, and investigate incidents.
- To send essential service, security, and contractual communications.
- To comply with legal obligations.
07 Retention and deletion
- Account data, including Google user data, is retained while your account is active.
- Server logs are kept for a limited period for security purposes and then deleted.
- Inquiry correspondence is retained as long as needed to handle the inquiry and any resulting engagement.
To delete your account and associated data, email engineering@suwahas.com from the address linked to your account. We complete deletion within 30 days, except where retention is required by law.
08 Security
We apply technical and organizational safeguards appropriate to the data we process. These include encryption in transit, least-privilege access controls, hardened infrastructure, and dependency auditing. No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you as required by law.
09 Your rights
Depending on where you live, including under Sri Lanka's Personal Data Protection Act and the EU/UK GDPR, you may have the right to:
- access the personal information we hold about you;
- correct inaccurate information;
- request deletion;
- object to or restrict certain processing;
- receive a portable copy of your data;
- withdraw consent at any time.
To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request.
10 International transfers
We are based in Sri Lanka and work with clients globally. Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for these transfers.
11 Children
The Services are intended for businesses and professionals. They are not directed at children under 16, and we do not knowingly collect their personal information.
12 Changes
We may update this policy as our services change. The effective date above shows when it was last revised. If changes materially affect how we use Google user data, we will notify affected users and request consent where required.
13 Contact
For privacy questions or requests:
Suwahas Ltd
Colombo, Sri Lanka
engineering@suwahas.com