Privacy Policy

We collect information you provide directly to us, including:

• Contact information — your name, email address, phone number, and message when you use our contact form.
• Payment information — when you complete a payment, your first name, last name, email, and phone number are submitted to PayHere (our payment processor). DuNous does not store card numbers or bank details directly.
• Career applications — your name, email, portfolio URL, and uploaded CV when you apply for a position.
• Usage data — page views, browser type, and referring URLs collected through standard server logs.

We use the information we collect to:

• Respond to your enquiries and provide requested services.
• Process payments securely via PayHere and send you payment confirmation.
• Review job applications and communicate with candidates.
• Improve our website, services, and user experience.
• Comply with legal obligations and resolve disputes.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Payments on DuNous are processed by PayHere (payhere.lk), a PCI-DSS compliant payment gateway. When you click "Proceed to Payment", you are redirected to PayHere's secure hosted checkout page.

PayHere processes your card details, billing address, and transaction information under their own Privacy Policy. DuNous only receives a payment notification (amount, currency, order ID, and your name/email) confirming whether the transaction succeeded.

PayHere uses MD5 hash verification on all server-to-server notifications to prevent tampering — this means the payment data we receive has been cryptographically verified by PayHere before we record it.

Our website uses only essential cookies required for the site to function (e.g., security tokens). We do not use third-party advertising trackers. If we add analytics in the future, this policy will be updated.

We retain your contact and enquiry information for up to 3 years to support any follow-up on a project or dispute. Payment records (order ID, amount, confirmation) are retained for 7 years for accounting and legal compliance. You may request earlier deletion (see Section 7).

We implement industry-standard security measures including HTTPS/TLS encryption, server-side environment variable protection for API secrets, and access controls. However, no method of transmission over the Internet is 100% secure.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at info@dunous.com.

Our website may contain links to third-party websites (e.g., LinkedIn, PayHere). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

We may update this Privacy Policy periodically. The "Effective date" at the top of this page will reflect the latest revision. Continued use of our website after changes constitutes your acceptance of the revised policy.

Questions or concerns about this Privacy Policy? Reach us at: