Privacy Policy

Last updated: 7 July 2026

01 Introduction

Bastel Pvt Ltd ("Bastel", "we", "us", "our") respects your privacy. This policy explains what information we collect when you register as an Exporter/Importer, use our contact form, or sign up for launch notifications, and how that information is used, stored, and protected.

02 Information We Collect

When you submit a registration, we collect:

• Identity & contact details — full name, company name, email address, phone/WhatsApp number, and country/location.
• Business identifiers — TIN/VAT number and Business Registration (BR) number, where you choose to provide them.
• Trade information — trade type (exporter/importer/both), primary trade category, relevant commodity, shipment volume, preferred freight mode, target trade countries, and any additional requirements you describe.
• Commodity images — up to two product photos you upload with your registration.

When you use our contact form or "Notify Me" form, we collect your name, email address, and message/preferences. We also automatically log basic technical information (such as page visited and timestamp) via client-side logging for troubleshooting purposes; this is stored only in your own browser's local storage, not on our servers.

03 How We Use Your Information

• To review and process your Exporter/Importer registration and get in touch with you regarding it.
• To prepare freight, customs, and trade documentation on your behalf where you engage us to do so.
• To send you a confirmation email when your registration is received.
• To respond to contact form enquiries and, where applicable, notify you about the launch of new Bastel services.
• To maintain accurate records for compliance with Sri Lankan trade and business regulations.

We do not sell your personal information to third parties, and we do not use your data for advertising purposes.

04 Third-Party Services

To operate this website and process registrations, we rely on the following trusted service providers, each of which processes data on our behalf under their own security safeguards:

• Supabase (database hosting) — stores your registration, contact, and notify-list records securely.
• Google Drive — stores the commodity images you upload with your registration, in a private, access-controlled folder managed by Bastel.
• Gmail / SMTP — used to send you registration confirmation emails.
• EmailJS — used to deliver messages submitted through our contact form.
• Vercel — hosts this website and its backend services.

05 Data Storage & Security

Your data is transmitted over encrypted (HTTPS) connections and stored in access-controlled databases and cloud storage. Access to registration data is restricted to authorised Bastel personnel who need it to process your registration or provide the services you request.

06 Data Retention

We retain registration and related records for as long as your registration remains active and for a reasonable period afterward, to meet legal, accounting, and business-record requirements under Sri Lankan law. You may request deletion of your data at any time as described in Your Rights below.

07 Cookies

We use a minimal, functional cookie/local-storage consent mechanism to remember your cookie preference and to support basic site functionality (such as the chat widget and activity logging). We do not use third-party advertising or tracking cookies.

08 Your Rights

You may, at any time, contact us to:

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate details on your registration.
• Request deletion of your registration and associated data, subject to any legal retention requirements.
• Withdraw consent to future contact (e.g. unsubscribe from launch notifications).

To exercise any of these rights, email us at bastel.pvt.ltd@gmail.com.

09 Children's Privacy

Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal information from children.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The "Last updated" date at the top of this page will be revised accordingly.

11 Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us: