Privacy Policy

1. Who we are

A Ceylon LK (“A Ceylon”, “we”, “us”) is a software studio based in Colombo, Sri Lanka. We are the data controller for personal information collected through this website (aceylon.lk) and through our client and candidate workflows.

For any privacy question, contact us at hello@aceylon.lk or call +94 77 668 1248.

2. What we collect

• Contact details— name, email, phone, and company, when you fill in the contact form, request a proposal, or apply to a role.
• Project information— the brief, budget range, deadline and source you tell us about when starting a project.
• Technical data— IP address, browser type, device, referring URL and pages viewed, collected through privacy-respecting analytics.
• Cookies — see our Cookie Policy for details.

3. Why we use it

• To respond to enquiries and prepare proposals.
• To deliver the services you have engaged us for.
• To assess job applications and contact candidates.
• To improve our website, content and service quality (aggregated analytics only).
• To meet legal, accounting and tax obligations.

4. Legal basis

We process your data on the basis of your consent (e.g. submitting the contact form), the performance of a contract (when you become a client), our legitimate interests (running and improving our studio), and legal obligations (tax, accounting and audit).

5. Sharing your data

We do not sell personal data. We share it only with trusted processors that help us run the studio — email, hosting, analytics, payment, and communication providers — under data processing agreements that require equivalent protection.

6. International transfers

Some of our processors are based outside Sri Lanka. Where data is transferred, we rely on appropriate safeguards such as standard contractual clauses or recognised adequacy frameworks.

7. How long we keep it

Enquiry data is kept for up to 24 months after the last interaction. Client data is kept for the duration of the engagement plus the period required by Sri Lankan tax and accounting law (up to 7 years). Candidate data is kept for up to 12 months unless you ask us to remove it sooner.

8. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, where applicable.
• Withdraw consent at any time.
• Object to processing or request restriction.
• Receive your data in a portable format.
• Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, email hello@aceylon.lk. We respond within 30 days.

9. Security

We use industry-standard safeguards: TLS for data in transit, access controls, least-privilege permissions, audited cloud infrastructure and regular review of our processes. No system is perfectly secure, so we keep our practices under continuous review.

10. Children

Our services are not directed at children under 16. We do not knowingly collect data from children. If you believe we have, write to us and we will delete it.

11. Changes to this policy

We may update this policy as the studio evolves or the law changes. The “last updated” date at the top will reflect any change. Material updates will be highlighted on this page.

12. Contact

Questions, requests or complaints can be sent to hello@aceylon.lk or by post to: A Ceylon LK, Colombo, Sri Lanka.