Privacy Policy

Information we collect

• Information you give us: your name, email address, phone number, company name and the contents of any message you send through our contact form, newsletter form, email or messaging apps.
• Client and project information: details you share with us during an engagement, including business requirements, documents and any access credentials you choose to provide.
• Billing information: your name, billing address, invoice details and the payment reference for transactions you make with us.
• Technical information: your IP address, browser type, device type, referring page and the pages you view on our website, collected automatically through cookies and similar technologies.

Payment information

We do not collect, process or store your full card details. Online payments are handled by PayHere, our licensed payment gateway partner in Sri Lanka, and by the banks and card networks behind it.

Your card data is entered directly on the gateway's secure, PCI-DSS compliant environment. We only receive confirmation of whether a payment succeeded, the amount, and a reference number.

How we use your information

• To respond to your enquiries, prepare proposals and quotations, and communicate about your project.
• To deliver, support and improve the services and software you have engaged us for.
• To issue invoices, process payments and keep accounting records as required by law.
• To send you newsletters or company updates, where you have asked to receive them.
• To understand how our website is used so we can improve its content and performance.
• To detect, prevent and investigate fraud, abuse or security incidents.

Legal basis and consent

We process your information where you have given us consent, where it is necessary to perform a contract with you, where we have a legitimate business interest in operating and improving our services, or where we are required to do so by law.

By using our website or submitting a form, you consent to the practices described in this policy.

How we share information

We do not sell, rent or trade your personal information. We share it only in the following situations:

• Service providers: payment gateways, email delivery services, hosting and cloud infrastructure providers, and analytics tools that help us run our business. They may access your data only to perform work for us and are bound to keep it confidential.
• Legal requirements: where disclosure is required by law, regulation, court order or a valid request from a public authority.
• Business transfers: if our business is merged, acquired or reorganised, your information may transfer to the new entity under the same protections described here.

Cookies and analytics

Our website uses cookies and similar technologies to keep the site working correctly, remember your preferences and measure traffic. You can block or delete cookies through your browser settings, though some parts of the site may not function as intended if you do.

Data retention

We keep enquiry and project information for as long as needed to serve you and for a reasonable period afterwards, so that we can support work we have delivered. Financial and tax records are kept for the period required by Sri Lankan law.

When information is no longer needed, we delete it or anonymise it.

Data security

We apply industry-standard safeguards including encrypted connections, access controls, least-privilege permissions for our team, and secure hosting environments.

No method of transmission or storage on the internet is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security.

Your rights

• Ask what personal information we hold about you and request a copy.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete information we no longer have a legal or contractual reason to keep.
• Withdraw consent for marketing at any time, using the unsubscribe link in our emails or by writing to us.

Third-party links

Our website may link to third-party sites and tools. We are not responsible for their content or privacy practices, and we encourage you to read their policies before sharing information with them.

Children's privacy

Our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with information, contact us and we will delete it.

Changes to this policy

We may update this policy as our services and legal obligations change. The revised version is posted on this page with a new "last updated" date, and continued use of our website after that means you accept the updated policy.