Last updated: 24 April 2026. This policy is a starting point for transparency. Align it with your actual processing activities, subprocessors, and regional requirements (including GDPR where applicable).
This policy describes how Premier Books (“we”, “us”) handles personal data when you use our websites and Services. The data controller for your information is the entity identified in your agreement or signup experience.
We may collect account details (name, email, organization), billing information, usage and device data, support communications, and content you submit to the Services (for example, accounting records you choose to store).
We collect information directly from you, automatically when you use the product, and in limited cases from third parties such as payment processors.
We use data to provide and improve the Services, secure our platform, communicate with you, comply with law, and enforce our terms. Where required, we rely on appropriate legal bases such as contract performance, legitimate interests, or consent.
Depending on your location, you may have rights to access, correct, delete, or export personal data, and to object to or restrict certain processing. You may also have the right to lodge a complaint with a supervisory authority.
To exercise rights, contact us via Contact. We may need to verify your request.
We retain information for as long as needed to provide the Services and for legitimate business purposes such as backups, security, and legal compliance. Technical and organizational measures help protect data in transit and at rest.
Where we rely on subprocessors (for example, cloud hosting, email delivery, analytics, and payment processing), we require contractual safeguards appropriate to the data involved.
Publish and maintain a subprocessor list with the provider name, purpose, and processing region. Example structure:
| Subprocessor | Purpose | Primary region |
|---|---|---|
| Cloud hosting provider | Infrastructure and storage | Configured deployment region |
| Transactional email provider | Service communications | Configured sending region |
| Payment processor | Billing and payment processing | Provider-documented regions |
Where cross-border transfers apply, use legal transfer mechanisms required by applicable law.
We use cookies and similar technologies as described in our Cookie Policy. You can manage certain preferences through your browser or any cookie banner we provide.
For privacy inquiries, use the contact options on our Contact page. If your organization uses a Data Processing Agreement (DPA), include your tenant and organization details to speed review.
For DPA, data-rights, or subprocessor requests, use privacy@premierbooks.lk. If you use Premier Books through an organization, your administrator may be the first point of contact for account-level requests.