Privacy Policy & Data Protection Notice
Last revised: 13 November 2026 · Conforming to Sri Lanka Personal Data Protection Act (PDPA)
Ceylon Gem Passport is committed to the protection of individual privacy and commercial confidentiality. This notice outlines how information is gathered, managed, and controlled across our documentation platform.
1. Separation of Working Records and Public Snapshots
A fundamental engineering tenet of our architecture is that internal business documents — including miner payment vouchers, pithead acquisition invoices, counterparty identification, and reserve prices — remain permanently segregated within encrypted private object storage. Public QR verification endpoints strictly return whitelisted snapshots explicitly authorized by the issuing organisation.
2. Cross-Border Processing & Storage Boundaries
Platform servers and relational databases reside in isolated VPCs hosted in the Singapore (ap-southeast-1) region. Access is strictly governed by cryptographic Row Level Security (RLS).