Privacy Policy

CodeXpress IT Solutions ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.codexpress.lk or use any of our services. Please read this policy carefully. If you do not agree with its terms, please discontinue use of our site immediately.

1Information We Collect

We may collect information about you in a variety of ways including:

1.1 Personal Data You Provide Directly

When you fill out our contact form, request a quote, or communicate with us, we collect personally identifiable information such as:

• Full name
• Email address
• Phone number
• Company or organisation name
• Project description or message content

1.2 Automatically Collected Data

When you visit our website, certain data may be collected automatically by our systems and third-party analytics tools, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Referring URL and pages visited
• Date and time of access
• Device type (desktop, tablet, mobile)

1.3 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyse traffic patterns. You may control cookie preferences through your browser settings, though disabling cookies may affect site functionality.

2How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries, project requests, and support tickets
• To provide, operate, and improve our IT services and website
• To send you service updates, quotes, and relevant business communications
• To send promotional content or newsletters — only with your explicit consent
• To analyse website usage and improve user experience
• To comply with legal obligations and prevent fraudulent activity
• To maintain internal records and business administration

3Legal Basis for Processing (GDPR / Applicable Law)

Where applicable, we process your personal data under the following legal bases:

• Consent — You have given explicit consent for a specific purpose (e.g., newsletter sign-up)
• Contract — Processing is necessary to fulfil a contract or pre-contractual steps
• Legitimate Interest — We have a legitimate business interest, balanced against your rights
• Legal Obligation — We are required by law to process certain data

4Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following limited circumstances:

• Service Providers: Trusted third-party vendors (e.g., hosting providers, email services, analytics tools) who assist in operating our website and services, bound by confidentiality agreements
• Legal Compliance: When required by law, court order, or governmental authority
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred with appropriate notification
• Protection of Rights: When necessary to protect the rights, property, or safety of CodeXpress IT Solutions, our clients, or the public

5Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Contact form submissions and project enquiries are typically retained for up to 3 years to support ongoing business relationships and legal compliance. You may request deletion of your data at any time (see Your Rights below).

6Data Security

We implement appropriate technical and organisational security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for all data transmitted through our website
• Access controls limiting data access to authorised personnel only
• Regular security reviews and vulnerability assessments
• Secure, reputable hosting infrastructure

Note: No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

7Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request that we limit processing of your data in certain circumstances
• Right to Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us at codexpressinfo12@gmail.com. We will respond within 30 days of receiving your request.

8Third-Party Links

Our website may contain links to third-party websites (such as client project demos or social media platforms). We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit.

9Children's Privacy

Our services are intended for businesses and individuals aged 18 years or older. We do not knowingly collect personal data from children under the age of 13. If you believe we have inadvertently collected such data, please contact us immediately and we will promptly delete it.

10Cookies Policy

We use the following types of cookies on our website:

You can opt out of analytics cookies at any time by adjusting your browser settings or using browser extensions like uBlock Origin.

11International Data Transfers

CodeXpress IT Solutions is based in Sri Lanka. Your information may be transferred to and processed in countries outside your country of residence. Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

12Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or services. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of our website after changes constitutes acceptance of the updated policy.

13Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: