Privacy policy

Webcrab Digital ("we", "us") is a web design, security and software team based in Sri Lanka, registered under RPDS/ADM/RC/01/BRG/04745. We work with clients in Sri Lanka, the United Kingdom, Australia and elsewhere.

We only collect what you choose to send us or what is needed to run this website safely.

• Contact and quote forms: name, email, phone, company, project details and any file you attach.
• Booking requests: name, email, phone, the time you choose and your notes.
• Emergency requests: your website address, what is happening and your contact details. Please never send passwords in a form. We will ask for access through a secure channel.
• Project questionnaire: your answers about your business and project.
• Free security scanner: the website address you enter. See section 5.
• Technical data: your IP address and basic browser details, used to prevent spam and abuse.

• To reply to your enquiry, prepare a quote, or confirm a booking.
• To deliver work you have asked us to do, and to support you afterwards.
• To protect this website from spam, bots and abuse.
• To meet legal, tax and accounting obligations.

We do not sell your information. We do not send marketing email unless you ask for it, and every marketing message will include a way to stop.

We use a small number of trusted providers to run the site. They act on our instructions and only receive what they need.

• Resend: delivers the emails sent when you submit a form.
• Cloudflare Turnstile: checks that a form is submitted by a person, not a bot. It processes technical data such as your IP address.
• Our hosting provider: serves this website.

We may also share information if the law requires it. Some of these providers are outside Sri Lanka, so your information may be processed in other countries. We choose providers that protect data to a reasonable standard.

When you run a scan, our server loads the public home page of the website you enter, once, like a browser, and looks up its public DNS records. It makes no changes and does not try to log in or probe private areas.

We do not store the address you scan or the result. Only scan websites you own or have permission to test. Your IP address is used briefly to limit how many scans can be run.

This website does not use advertising or tracking cookies. It stores your light or dark theme choice in your browser so the site remembers it. Cloudflare Turnstile may set technical cookies or storage to do its security check.

If we add analytics later, we will choose a privacy-friendly option and update this policy first.

Enquiries that do not become a project are kept for up to 24 months so we can follow up if you come back. Client records, quotes and invoices are kept for as long as the law requires for accounting and tax, and for the length of our working relationship. Files you attach are deleted when they are no longer needed for your request.

Forms are sent over an encrypted connection, protected against bots, and limited so they cannot be abused. We restrict access to your information to the people who need it. No system is perfectly secure, so please avoid sending sensitive personal or financial data through a form.

Depending on where you live, you may have the right to:

• See the information we hold about you.
• Ask us to correct it.
• Ask us to delete it.
• Object to or restrict how we use it.
• Receive a copy in a common format.

This website is for businesses and is not aimed at children. We do not knowingly collect information from anyone under 16.

We may update this policy as the site or the law changes. The date at the top shows the latest version. If a change is significant, we will say so on this page.