Legal

Privacy Policy

Last updated: 2 September 2026

This Privacy Policy explains how Loomod Ltd (“we”, “us”, “our”) collects, uses, and protects personal data when you visit banksheet.lk or use Banksheet, our bank-statement conversion service.

1. Who we are

Banksheet is a product of LOOMOD LIMITED (trading as Loomod Ltd), a private limited company registered in England and Wales.

• Company number: 16715015
• Registered office: Office 14575, 182–184 High Street North, East Ham, London, United Kingdom, E6 2JA
• Contact: keshan@banksheet.lk

For UK data protection law, Loomod Ltd is the controller of personal data described in this policy, unless we process data solely on a customer’s instructions (in which case we act as a processor).

2. The data we collect

Account and enquiry data

When you request a demo, ask for support, or otherwise contact us, we collect the information you send us. That typically includes your name, email address, organisation, and the content of your message.

Bank statement data

If you use Banksheet, you may upload scanned PDFs of bank statements. Those files can contain names, account numbers, transaction descriptions, amounts, balances, and other financial details. We process this data only to provide the service you requested: extraction, categorisation, and export.

Technical data

Our website and service may automatically collect limited technical information such as IP address, browser type, device type, pages visited, and approximate timestamps. We use this to operate, secure, and improve the service.

3. How we use personal data

We use personal data to:

• respond to demo requests and support enquiries;
• provide, maintain, and improve Banksheet;
• extract transactions from uploaded statements and return structured files to you;
• communicate about the service, including security or account notices;
• comply with law, enforce our terms, and protect our rights and users.

We do not sell your personal data or your bank-statement contents. We do not use uploaded statements to train public models or for advertising.

4. Legal bases (UK GDPR)

Depending on the activity, we rely on:

• Contract — to provide Banksheet and related support when you ask us to process statements or take a demo through to a paid arrangement;
• Legitimate interests — to operate and secure our website, respond to enquiries, and improve the product, where those interests are not overridden by your rights;
• Consent — where we ask for it, for example optional marketing emails (you can withdraw consent at any time);
• Legal obligation — where we must keep or disclose information to comply with UK law.

5. How long we keep data

Enquiry emails and related correspondence are kept for as long as needed to handle your request and for a reasonable period afterwards (typically up to 24 months), unless a longer period is required for legal or accounting reasons.

Uploaded bank statements and extracted output are retained only for as long as needed to complete processing and let you download results, then deleted or irreversibly anonymised, unless you ask us to keep a workspace copy under a paid arrangement or we must retain data to meet a legal obligation.

6. Sharing and processors

We share personal data only with:

• service providers who host infrastructure, email, or security tooling, under contract and only as needed to run Banksheet;
• professional advisers (for example accountants or lawyers) where required;
• authorities if the law requires us to do so.

This website loads fonts from Google Fonts and styling from a third-party CSS CDN. Those providers may process your IP address and technical data according to their own policies.

7. International transfers

Loomod Ltd is established in the United Kingdom. Banksheet is built for customers in Sri Lanka and elsewhere. Personal data may be transferred between the UK and other countries in order to provide the service. Where we transfer personal data outside the UK, we use appropriate safeguards required by UK data protection law, such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses, unless the destination is covered by a UK adequacy regulation.

8. Your rights

Under the UK GDPR you may have the right to access, correct, erase, or restrict processing of your personal data, to object to processing, and to data portability. You may also withdraw consent where processing is based on consent. To exercise these rights, email keshan@banksheet.lk.

You can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to resolve your concern first.

9. Children

Banksheet is intended for businesses and finance professionals. We do not knowingly collect personal data from children.

10. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site after an update means you should review the revised policy.

11. Contact

Questions about this policy or our use of personal data: keshan@banksheet.lk.

Postal correspondence may be sent to Loomod Ltd, Office 14575, 182–184 High Street North, East Ham, London, United Kingdom, E6 2JA.