Privacy Policy

1. Scope and responsibility

LetsCrak is responsible for the personal information it uses to handle enquiries and its direct customer relationships. This policy covers letscrak.com, communications with us, and information needed to sell and support our services and premium app access.

It does not describe every permission or data flow inside our apps or websites we build for clients. Consult the privacy notice for the relevant app or client service for that information. When we process a client's data only on their instructions, the project agreement governs that processing.

2. Information we handle

• Enquiries: your name, email address, project type, optional budget and timeline, and the project description you provide through the form.
• Customer communications: contact details, messages, support requests, and files you choose to share with us.
• Projects and services: instructions, approvals, deliverables, and the account or technical information needed to carry out your agreed work or support a service.
• Orders and billing: billing details, the product or service purchased, amount, currency, invoice or transaction reference, payment status, subscription period, and cancellation or refund records.
• Website usage and technical information: pages visited, interactions, browser and device information, referring sources, approximate location, and cookie identifiers through Google Analytics. Hosting and security systems may also process connection information such as IP addresses, request times, and error logs.

Please only send information needed for your request. Do not include passwords, full payment-card numbers, card security codes, or unrelated sensitive personal information in the enquiry form.

3. Why we use it

We use information to respond to you, prepare quotes, fulfil orders, deliver and maintain services, activate premium access, administer renewals, investigate problems, handle refunds, and keep necessary business records. Technical and usage information helps us understand website use and investigate security or reliability problems.

Where applicable data protection law requires a legal basis, we rely on steps requested before a contract and performance of that contract, legal record-keeping duties, our legitimate interests in operating and protecting the service, or consent where required. Where we rely on consent, you may withdraw it for future processing.

4. Enquiry forms and communications

The enquiry form sends the information you enter to our configured form-delivery service or, when email submission is used, opens your email application to contact hello@letscrak.com. Email and form providers process the communication to deliver it to us. Sending an enquiry does not by itself subscribe you to marketing messages.

5. Payments and recurring billing

For a purchase paid through Payments.lk, the payment provider processes the customer and transaction details needed to collect the payment and handle recurring authorisations, refunds, fraud checks, or disputes. Card entry and processing take place through the provider's checkout, not our enquiry form.

We use payment references and status information to reconcile your invoice and supply your purchase. Full card numbers and card security codes are not required in our customer correspondence. The provider's own processing is explained in the Payments.lk Privacy Policy. If an app store bills your purchase, its privacy and billing policies also apply.

6. Google Analytics and cookies

We use Google Analytics to understand visits and interactions with our website. It can use cookies and identifiers alongside device, browser, usage, and approximate location information to produce reports. Google processes that information as described in its Privacy Policy and its explanation of data from sites using Google services.

Our Cookie Policy explains browser controls and Google's analytics opt-out tool. This policy does not treat visiting the site as consent to every use of cookies.

7. Who receives information

Information needed to operate the service is processed by the people carrying out your work and relevant service providers, including website hosting, email and form delivery, project infrastructure, Google Analytics, and payment processors. The information shared depends on the task: for example, a payment processor needs billing information, while a hosting provider processes website requests.

We may also disclose relevant records to professional advisers, authorities where legally required, or a party handling a payment dispute. Providers may process information outside Sri Lanka under their service arrangements. Where applicable law requires safeguards for an international transfer, those requirements apply.

8. Retention and security

Enquiry information is retained as needed to respond and manage follow-up. Client records are retained for delivery, support, and the ongoing business relationship. Invoices, payment records, and relevant correspondence may need to remain longer for accounting, legal obligations, or an unresolved dispute. Analytics retention depends on the settings of the analytics service; browser cookie lifetimes are separate from those settings.

When handling a deletion request, we assess whether records are still needed for these purposes and explain any reason we need to keep them. Deleting correspondence does not necessarily delete records a payment provider is independently required to retain.

No internet transmission or storage system is completely secure. Contact us if you believe information connected with our service has been disclosed or used improperly. Use an agreed secure method, rather than the enquiry form, when project work requires access credentials.

9. Your choices and requests

Email hello@letscrak.com to request access to your information, correction, deletion, or a restriction on its use, or to raise a privacy concern. Depending on the law that applies, you may also have rights to object or obtain a portable copy. Describe your relationship with us and what you need; we may ask for proportionate verification before releasing or changing personal information.

We handle requests in accordance with applicable law and explain any necessary exception. You may also raise a concern with the relevant data protection authority. Withdrawing permission for optional processing does not cancel a purchase or erase records we must retain.

10. Updates

We update this notice when our services or data practices change and show the revision date above. Where required, we provide additional notice or obtain consent before using information for a new purpose.