Your privacy at Possy Online

Who we are

Possy Online provides ERP solutions (Possy ERP, Possy POS and Fawtara e-invoicing) to SMEs, corporate businesses, schools, institutions, NGOs and finance providers in Sri Lanka, the Middle East and Australia. This policy explains what personal information we collect through possy.online, our social media pages and our enquiry channels, how we use it and the choices you have.

Information we collect

• Enquiries: when you use our contact form, WhatsApp, phone or email, we collect your name, organisation, email address, phone number, sector and your message.
• Blog comments: the name and email address you enter, and your comment.
• Website preferences: your light/dark theme, accent colour and country choice, stored in your own browser (see Cookies).
• Basic visit data: pages visited, browser type and approximate location from your IP address, used to keep the site secure and to understand which pages are useful.
• Social media: if you follow, comment on or message our Facebook, Instagram or LinkedIn pages, we see the information those platforms show to page owners, such as your public name and your comment.

We do not ask for payment card details on this website.

How we use it

• To reply to your enquiry, arrange a demo and send you a quotation.
• To provide, set up and support Possy ERP if you become a client.
• To publish and moderate blog comments.
• To improve our website and content.
• To keep our systems secure and prevent spam or abuse.

We do not sell your personal information, and we do not use it for anything unrelated to these purposes without asking you first.

Our social media publishing app

We use our own app (“Possy Social Poster”) with Meta (Facebook and Instagram) and LinkedIn only to publish Possy Online’s own posts to Possy Online’s own pages and profile, and to read whether a post was published successfully.

The app does not log in other people, and it does not collect, store or share personal data of people who view, follow or interact with our pages.

Cookies and browser storage

• possy_prefs (cookie and local storage, 1 year): remembers your theme, accent colour and country choice. It contains no personal details.
• Session cookies set by our website platform, needed for forms and security.
• Use-case country choice (session storage): remembers which country’s examples you picked until you close the tab.

You can delete cookies in your browser settings at any time; the site will then use its default settings.

Who we share it with

Your information is stored in our own Possy ERP system on our servers. We share it only:

• with service providers that help us run our services (for example hosting, email and backup providers), under confidentiality obligations;
• if the law requires it.

How long we keep it

We keep enquiry information for as long as needed to respond and follow up, and for up to three years afterwards, unless you become a client, in which case we keep it for the length of our contract and as required by tax and accounting law. You can ask us to delete it earlier.

Your choices and rights

You can ask us to see, correct or delete the personal information we hold about you, or to stop contacting you. Email info@possy.online and we will reply within 30 days. We aim to follow the data protection laws that apply to you, including Sri Lanka’s Personal Data Protection Act.

Data deletion instructions

To ask us to delete any information we hold about you, including anything connected with our Facebook, Instagram or LinkedIn pages:

1. Email info@possy.online with the subject “Data deletion request”.
2. Include your name and the email address, phone number or social media name you used with us.

We will confirm by email when your data has been deleted, normally within 30 days.

Security

Our website uses encrypted connections (HTTPS), our systems are access-controlled, and we keep regular backups. No method of storage or transmission is completely secure, but we work to protect your information.

Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated: 2 November 2026.