1. Who we are
Bello Hospitality (“Bello”) is a product of Wysda Corporation (Pvt) Ltd, a company incorporated in Sri Lanka (“Wysda Corporation”, “we”, “us”). This policy explains how we handle personal data when you visit bellohq.com, book a demo, contact us or use Bello.
We play two different roles, depending on whose data it is:
- For our own customers, website visitors and people who contact us, we decide how and why the data is used. We are the controller of that data.
- For the guest, customer and staff data a hotel or restaurant keeps in Bello, the business decides how it’s used and we process it on their behalf. Our Data Processing Agreement covers that work.
2. What we collect
When you visit this website. Our hosting provider keeps short-lived technical logs, such as your IP address, browser type and the pages you asked for, to keep the site secure and working. We don’t use advertising or analytics cookies, and we don’t build profiles of visitors.
When you book a demo or contact us. Your name, email address, phone number, business name and anything you choose to tell us. Demo bookings are made through Cal.com, our scheduling provider.
When you become a customer. The names, email addresses and phone numbers of the people who use your account, your business details, the plan you’re on, and billing records. Card payments are processed by Payments.lk and OnePay. We never see or store your full card number.
When you use Bello. Information about how the service is used, such as sign-ins, the device used and actions taken, which we keep for security, support and Bello’s own records of who did what.
Data your business keeps in Bello. Guest names, contact details, identity document details, stays, orders and preferences; staff names, contact details, attendance and payroll; supplier details; and documents you upload, such as bills and receipts. Your business decides what goes in, and we process it only to provide Bello to you.
3. How we use it, and why
- To provide Bello and the features you switch on, under our contract with you.
- To bill you and keep financial records, because tax and company law require it.
- To support you, answer your questions and tell you about changes to the service.
- To keep Bello and this website secure, prevent misuse and fix problems, which is in our and our customers’ legitimate interest.
- To send you news about Bello, only if you’ve agreed to it. You can stop these at any time.
Bello AI. When you use AI features, such as reading a bill from a photo or asking Bello a question, we send only what’s needed for that task to our AI service providers. We don’t allow your data to be used to train AI models for anyone else.
5. Where your data is stored
Bello’s data is stored on servers in Singapore, Germany and Finland. That means personal data may be transferred outside Sri Lanka. When it is, we use providers that apply strong physical and technical security, data is encrypted while it travels over the internet, and we put contracts in place that protect it as Sri Lanka’s Personal Data Protection Act requires.
6. How long we keep it
- Customer accounts and the data in them: for as long as you use Bello. After you cancel, you have 30 days to download your data, and we then delete it within a further 60 days, unless the law requires us to keep part of it.
- Invoices and payment records: for as long as tax and company law require.
- Demo bookings and enquiries: up to two years after we were last in touch, unless you become a customer.
- Website and security logs: a short time, usually no more than 30 days.
- Backups: deleted data can remain in backups for up to 30 days before it is overwritten.
7. How we protect it
Every business’s data is kept separate from every other business on Bello. Data is encrypted while it travels over the internet, backed up every night, and only seen by people who need to see it. Staff access is limited by role, and important actions are recorded. You can read more on our security page. No system is perfectly secure, so if a breach affects your personal data, we’ll tell you and the Data Protection Authority as the law requires.
8. Your rights
Under Sri Lanka’s Personal Data Protection Act, you can ask us to:
- tell you what personal data we hold about you, and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, where we don’t need to keep it;
- stop using your data for a purpose you’ve consented to, or object to how we use it;
- review a decision made about you only by automated means.
Write to hello@bellohq.com. We’ll reply as quickly as we can, and within the time the law allows. If your data is kept in Bello by a hotel or restaurant, for example as a guest, please ask that business first, and we’ll help them respond. If you’re not happy with our answer, you can complain to the Data Protection Authority of Sri Lanka.
10. Children
Bello is a service for businesses and isn’t meant for anyone under 18. Businesses that keep details of younger guests in Bello are responsible for doing so lawfully.
11. Changes to this policy
We’ll update this policy when our services or the law change, and show the date of the latest version at the top. If a change is significant, we’ll tell our customers before it takes effect.
12. Contact us
Wysda Corporation (Pvt) Ltd, Sri Lanka. Email hello@bellohq.com with any question about privacy or your personal data.