Privacy Policy

Last updated at 01.10.2018.

This Privacy Policy ("Privacy Policy") explains how information is collected, used and disclosed by Cashray, a platform owned and operated by Cashray Technologies Lanka (Private) Limited, and applies to information collected when you use or access our online or mobile websites (such as www.cashray.lk), products, services or applications (collectively, “the Services"). We respect the privacy rights of users and recognize the importance of protecting information collected about you.

Please read the following carefully to understand how we will collect, use and maintain your personal information. It also describes your choices regarding use, access and correction of your personal information.

Changes to This Policy

We may change this Privacy Policy from time to time. If we make any changes, we may notify you by revising the "Last Updated" date at the top of this Privacy Policy and, in some cases, we may provide you with additional notice (such as adding a statement to our homepage or sending you an email notification).You understand that the notice is not an obligation of us. If there are material changes to this Privacy Policy, we may notify you more directly by email or means of a notice on the home page prior to the change becoming effective. We encourage you to review our Privacy Policy whenever you access the Cashray Services to stay informed about our information practices and the ways you can help protect your privacy.

If you disagree with any changes to this Privacy Policy and do not wish your information to be subject to the revised Privacy Policy, you will need to deactivate with us and stop using the Cashray Services. Your use of any of the Cashray Services after the posting of such changes shall constitute your consent to such changes.

Information Collected

We may collect certain user information (including personal information and/or sensitive personal information) in the following ways:

Information You Provide To Us. We collect information you provide directly to us including when you visit one of our websites, register for and/or use one of the Cashray Services.

• For example, we collect information when you register with Cashray for an account, create or modify your profile and online account, access and use the Cashray Services, participate in any interactive features of the Cashray Services, participate in a survey, contest, promotion, sweepstakes, activity or event, make a purchase, apply for a job, request customer support, or communicate with us via third-party social media sites.
• The types of information we may collect directly from you include your name, username, email address, your picture, postal address, phone number, information about your data storage preferences, employer’s name, job title, transactional information (including services purchased or subscribed to and billing address) as well as any contact or other information you choose to provide. Please be aware that the information you choose to provide in your Cashray profile may reveal or identify information that is not expressly stated (for example, if you choose to provide your picture, your picture may reveal your gender. We also store the files or other information that you upload or provide to the Cashray Services ("Content") in order to be able to provide you with the features and functionality of the Cashray Service.
• The information of third parties such as name, email address, mobile phone number, etc. as may be provided to enable the functionality and features of the Cashray Service. For example, if you invite a user to Cashray, we will collect their email address and/or mobile phone number in order to provide them with an invite to the Cashray Service.

Information We Collect Automatically When You Use the Cashray Services. When you access or use the Cashray Services, we may automatically collect information about you, including:

• Usage Information: We monitor user activity in connection with the Cashray Services and may collect information about the applications and features you use.
• Log Information: We log information about you when you access and use the Cashray Services including your Internet Protocol ("IP") address, access times, browser type and language, Internet Service Provider ("ISP"), the Web pages that you visit, and the URL of the Web page you visited before navigating to the Cashray Services.
• Device Information: If you access the Cashray Services from a mobile device, we collect information about the device, including the hardware model, operating system and version, unique device identifiers, mobile network information (as allowed by the mobile network) or platform information (as allowed by the specific platform type). We may ask for or access your location-based information from your mobile device with your consent through our mobile apps. If you experience an error or crash in any of the Cashray Services, we may collect data (using first or third party products) and logs from your device including information such as your device’s Internet Protocol (“IP”) address, device name, operating system version, application configuration(s), the time and date, and other statistics.
• Information Collected by Cookies and Other Tracking Technologies:  We (including service providers who are working on our behalf) use various technologies to collect information, which may include saving cookies to your computer or mobile device. Cookies are small data files stored on your hard drive or in device memory that help us to improve the Cashray Services and your experience, customize your experience and preferences, allow you to access and use the Cashray Services without re-entering your member ID and/or password, understand which areas and features of the Cashray Services are most popular and count visits. We may also collect information using web beacons (also known as "tracking pixels"). Web beacons are electronic images (also called "gifs") that may be used in the Cashray Services or in emails that help us to deliver cookies, count visits, understand usage and campaign effectiveness and determine whether an email has been opened and acted upon. For more information about cookies and how to disable them, please see "Your Choices" below.
• Third party cookies: If you sign-up for, access, or log into the Cashray Services using third-party services, those third-party services may use cookies that are subject to those third-party services' own rules and policies. Cashray does not control the use of cookies by such third-party services. For more information around how you may be able to control the use of those cookies and other tracking technologies please see the Opting Out of Cookies and Advertising section below.
• Third Party clear gifs: Our third party partners employ clear gifs (a.k.a. Web Beacons/Web Bugs), images, and scripts that help them better manage content on our website. We do not tie the information gathered to our Customers’ or Users’ personal information.
• Local Shared Objects (“LSO”): We use LSOs such as HTML 5 LSOs to collect and store information in order to provide certain features on our website. Third parties with whom we partner may also use LSOs in order to provide certain features on our website or to display advertising based upon your Web browsing activity. Various browsers may offer their own management tools for removing HTML5 LSOs.
• Advertising Cookies: We partner with third parties to manage our advertising on other websites. Our third parties may use tracking technologies such as cookies to gather information about your activities on this website and other websites you visit in order to provide you advertising based upon your browsing activities and interests.

Opting Out of Cookies and Advertising

You may opt out of behaviorally targeted ads anytime by deleting your browser's cookies. In addition, you may opt-out of interest-based advertising from some third-party partners by visiting  http://preferences-mgr.truste.com/,  http://www.youronlinechoices.eu, or the third-party provider’s websites.

Please note that opting-out will only prevent targeted ads so you may continue to see generic non-targeted ads after you opt-out.

Do Not Track. Some browsers offer a “do not track” (“DNT”) option. Because no common industry or legal standard for DNT has been adopted by industry groups, technology companies or regulators, we do not respond to DNT signals. We will make efforts to continue to monitor developments around DNT browser technology and the implementation of a standard.

Information We Collect From Other Sources. We may also obtain information from third parties and combine that with information we collect through the Cashray Services. For example, we may have access to certain information from a third-party social media service if you create or log into your online account through the service or otherwise provide us with access to information from the service. Any access that we may have to such information from a third-party social media service is in accordance with the privacy policy and authorization procedures determined by the social media service. We protect data obtained from third parties according to the practices described in this policy, plus any additional restrictions imposed by the source of the data.

Use of Information

We may use the information collected for the purpose of providing the Cashray Service and related functionality and services, as described in this Privacy Policy and as permitted by applicable laws. These purposes include circumstances where it is necessary to provide or fulfill Services requested by or for you or where you have given us your express consent.

The information may be used to perform a variety of purposes, including but not limited to:

• Provide, operate, maintain and improve the Cashray Services
• Enable you to access and use the Cashray Services
• Send you technical notices, updates, security alerts and support and administrative messages
• Provide and deliver the services and features you request, process and complete transactions, and send you related information, including purchase confirmations and invoices
• Respond to your comments, questions, and requests and provide customer service and support
• Communicate with you about services, features, surveys, newsletters, offers, promotions, contests and events, and provide other news or information about Cashray and our select partners
• Process and deliver contest or sweepstakes entries and rewards
• Monitor and analyze trends, usage, and activities in connection with the Cashray Services and for marketing or advertising purposes
• Investigate and prevent fraudulent transactions, unauthorized access to the Cashray Services, and other illegal activities
• Personalize and improve the Cashray Services, and provide content, features, and/or advertisements that match your interests and preferences or otherwise customize your experience on the Cashray Services
• Send you push notifications from time-to-time in order to update you about events or activities related to the Cashray Services. If you no longer wish to receive these types of communications, you may turn them off at the device level. To ensure you receive proper notifications, we collect certain information about your device such as operating system and user identification information
• Link or combine with other information we receive from third parties to help understand your needs and provide you with better service
• For other purposes about which we will provide you with prior notice as described in the "Changes to This Policy" section

Processing

By accessing or using the Cashray Services or otherwise providing information to us, you consent to the processing and transfer of information in and to Sri Lanka and other countries and territories, which may have different privacy laws from your country of residence.

Sharing and Disclosure of Information.

We may share personal information of you with a third party especially for the purpose of described in this Privacy Policy or in connection with the Cashray Services. For example, we may share personal information about you including but not limited to as follows:

• Vendors, Consultants and Other Service Providers:  We may share your information with third-party vendors, consultants and other service providers who are working on our behalf and require access to your information to carry out that work, such as to process billing, provide customer support, etc. These service providers are authorized to use your personal information only as necessary to provide services to Cashray and/or Cashray Services

In some cases, we may share your information with third-party vendors to understand which areas and features of the Cashray Services are most popular and/or to improve the overall effectiveness of Cashray's Services and features.

• Compliance with Laws:  We may disclose your information to a third party if (a) we believe that disclosure is reasonably necessary to comply with any applicable law, regulation, legal process or governmental request, (b) to enforce our agreements, policies and Terms of Service, (c) to protect the security or integrity of the Cashray Services, (d) to protect Cashray, our customers or the public from harm or illegal activities, (e) to respond to an emergency which we believe in the good faith requires us to disclose information to assist in preventing the death or serious bodily injury of any person or (f) to any other third party with your prior consent.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Aggregated or Anonymized Data:  We may also share aggregated or anonymized information with third parties that does not directly identify you.

Security

While no service is completely secure, Cashray takes reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. In addition, sensitive information such as credit card number and password that we request from you on the Cashray Services is protected with encryption, such as Secured Socket Layer (SSL) protocol, during transmission over the Internet.

The servers on which personal information is stored are kept in a controlled environment with limited access. While we take reasonable efforts to guard personal information we knowingly collect directly from you, no security system is impenetrable.

You may access your account information and our service only through the use of an individual user ID and SMS Code. To protect the confidentiality of personal information, you must keep your user ID and SMS Code confidential and not disclose it to any other person. Please advise us immediately if you believe your account has been misused. In addition, always logout and close your browser when you finish your session.

If you have any questions about the security of your personal information, you can contact us at [email protected].

Account Information & Retention

Cashray reserves the right to retain your personal information for a period of 5 years or more to satisfy legal requirements such as recordkeeping and tax and credit reporting requirements, as well as for purposes of fraud prevention, audit and data integrity. In addition, Cashray reserves the right to retain, as well as to use and disclose as permitted pursuant to this Privacy Policy, your personal information for such period of time as reasonably needed by Cashray to facilitate activities and transactions for the operation of the Website, improve User experiences on the Website. Cashray reserves the right to retain information that does not directly identify you, for example, aggregated or anonymized data.