Skip to content
Mihil Holdings

Privacy policy

What we collect, why we collect it, and what we do to keep it safe.

Last updated: 3 August 2026

What we collect

  • Account details — your name, email address, and optionally your phone number, when you register.
  • Listing details — the property information and photographs you submit as a seller.
  • Enquiries — the name, contact details and message you send through an enquiry or newsletter form.
  • Technical data — a hashed form of your IP address and your browser user-agent, kept with each sign-in so we can detect suspicious activity.

How we protect it

Passwords are stored only as bcrypt hashes; we never hold the original. Sign-in tokens are kept in cookies that JavaScript cannot read and that browsers will not send to other sites. Refresh tokens are stored hashed, are rotated on every use, and are revoked site-wide if one is ever replayed. IP addresses are hashed before storage, so our logs cannot be read back as a list of addresses.

What we never do

  • We do not sell your personal information.
  • We do not show your email address or phone number on public listing pages.
  • We do not load third-party trackers or advertising scripts on this site.

Cookies

This site sets cookies for one purpose: keeping you signed in and protecting forms against cross-site request forgery. There are no analytics or advertising cookies, so there is nothing to opt out of.

Your choices

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete your account and its listings. Write to info@mihilholdings.lk and we will respond within thirty days.

Contact

Mihil Holdings (Pvt) Ltd, 123, Main Street, Kuliyapitiya, North Western Province, Sri Lanka. Telephone +94 77 123 4567.