This privacy policy explains how Technovate Enterprises (Private) Limited (company number PV 00238818, "Technovate", "we", "us") collects, uses and protects personal information when you visit technovatee.com or contact us. We decide how and why this information is used, which makes us its controller.
Who we are and how to contact us
Technovate is a software development company based in Jaffna, Sri Lanka. For any privacy question or request, email [email protected] or call +94 77 640 1234.
Information we collect
- Contact form: your first and last name, email address, company name (optional), the service you are interested in, your budget range and timeline (both optional), and the message you write.
- Messages you send us directly: anything you share by email, phone or WhatsApp, such as your name, contact details and project information.
- Technical data: when you visit the website, our web server and our security and delivery provider, Cloudflare, automatically record basic request data, such as IP address, browser type, the page requested and the date and time, to deliver the website and keep it secure.
We do not ask for sensitive personal information, such as health, religious or financial details, and we ask that you do not include it in your messages.
Why we use your information and our legal basis
The law requires a legal basis for each way we use personal information. These are the purposes we use it for and the basis for each:
| Purpose | Information used | Legal basis |
|---|---|---|
| Replying to your enquiry and preparing a proposal | Contact form details and messages | Steps you ask us to take before entering into a contract |
| Delivering and supporting a project we agree with you | Contact details and project correspondence | Performing our contract with you or your organisation |
| Answering general questions that are not about a project | Contact form details and messages | Our legitimate interest in responding to people who contact us |
| Keeping the website and our inbox secure, including spam filtering | Technical data, IP address and email address | Our legitimate interest in network and information security and preventing abuse |
| Keeping business, tax and accounting records | Correspondence and project records | Complying with our legal obligations |
We do not sell your personal information, use it for advertising, or use it for a new purpose without telling you first.
Do you have to give us your information?
No. Sending us your details is voluntary and is not a legal or contractual requirement. However, we need at least your name, email address and message to reply, so we cannot respond to an enquiry without them.
Automated decisions
We do not make decisions about you based solely on automated processing, and we do not profile visitors. The spam filters used by our contact form provider may automatically flag a message as spam. If you do not hear back from us within one working day, please email us directly.
Who we share information with
We share personal information only with providers and parties that help us run the website, communicate with you or meet our obligations:
- Web3Forms processes contact form submissions on our behalf under its data processing agreement and forwards them to our inbox. It stores submissions encrypted on Amazon Web Services infrastructure and deletes them after a maximum of three years. To block spam, the IP address and email address of the person submitting a form may be checked with the CleanTalk and Akismet spam prevention services. See the Web3Forms privacy policy.
- Zoho Mail, our email provider, stores the messages we send and receive.
- Cloudflare sits in front of our website to deliver it quickly and protect it from attacks. It processes request data, including IP addresses, on our behalf. See Cloudflare's privacy policy.
- Contabo, our server provider, supplies the virtual server that runs the website in a data centre in France. We manage the server ourselves.
- WhatsApp: if you contact us through WhatsApp, your messages are also handled under WhatsApp's privacy policy.
- Professional advisers and authorities: our accountants, auditors or lawyers when needed, and public authorities where the law requires us to share information.
International transfers
Some of these providers process information outside Sri Lanka. For example, Web3Forms operates from India and uses infrastructure in several regions, Cloudflare processes request data in data centres worldwide, including the United States, and our web server is located in France. Transfers relating to your enquiry are necessary to handle the request you made, and we use providers that commit contractually to protecting personal information, as Web3Forms does in its data processing agreement. For information from the United Kingdom and the European Economic Area, Web3Forms relies on Standard Contractual Clauses.
Cookies
We do not use analytics, advertising or tracking cookies on this website. Cloudflare, our security provider, may set strictly necessary cookies (such as __cf_bm) to tell people from automated bots and keep the website secure. If we add analytics in the future, we will update this policy first and, where required, ask for your consent.
How long we keep information
- Enquiries that do not lead to a project: kept until the conversation has ended and we no longer need them to respond or follow up, then deleted.
- Project correspondence and records: kept for the length of the project and any support period, and afterwards for as long as tax, accounting or other legal requirements oblige us to keep business records.
- Contact form copies held by Web3Forms: deleted automatically after a maximum of three years, unless deleted sooner.
- Website request logs on our server: kept for up to 14 days, then deleted automatically.
Your rights
Subject to the conditions and exceptions in the law that applies to you, you can ask us to:
- confirm whether we process your personal information and give you a copy of it,
- correct or complete information that is inaccurate or incomplete,
- delete your information,
- stop using your information where we rely on our legitimate interests,
- withdraw consent where we rely on it, without affecting anything we did before you withdrew it,
- if you are in the UK or EU, also restrict how we use your information or receive it in a portable format.
These rights come from Sri Lanka's Personal Data Protection Act, No. 9 of 2022 and, for people in the UK or EU, the UK GDPR or EU GDPR.
How to make a request
- Email [email protected] and tell us which right you want to use.
- We may ask for information to confirm your identity before we act on the request.
- We will reply in writing without undue delay and within one month. If we need more time, we will tell you before that month ends, and the total time will not exceed three months.
- Requests are free of charge.
- If we refuse a request, we will explain why, unless the law prevents us, and tell you about your right to appeal.
Complaints
If you are unhappy with how we handle your information, please contact us first so we can try to put it right. You can also complain to, or appeal a refused request to, the Data Protection Authority of Sri Lanka. If you are in the UK or EU, you can complain to your local data protection authority.
Security
We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS) and access controls on the accounts we use. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach affects your information, we will notify the Data Protection Authority and you where the law requires it.
Children
This website is intended for businesses and is not directed at children under 16. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed.