Privacy policy
What personal data this website collects, why, and what rights you have over it. We keep it short, because we collect very little.
Last updated
Who we are
The data controller for this website is:
- Name
- Pixel and Padlock
- Contact
- Through the contact form or by phone on +94 70 608 9549
What we collect and why
When you send an enquiry, we receive your name, your email address and anything else you choose to tell us in the form: company, project type, budget, timeline and your message. We use it to reply to you and, if you ask, to prepare a quote.
Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). For messages that aren't about a project, our legitimate interest in answering people who write to us (Article 6(1)(f)).
When you visit the site, our host processes technical data such as your IP address, your browser and the pages you request, to deliver the site and keep it secure. Legal basis: our legitimate interest in running a secure website (Article 6(1)(f)).
We count visits and measure page speed with Vercel Web Analytics and Speed Insights. They don't use cookies, don't identify you and only report totals. Legal basis: our legitimate interest in understanding how the site is used (Article 6(1)(f)).
How long we keep it
Enquiries that don't lead to a project are deleted 12 months after our last contact. If we work together, we keep project correspondence for as long as the contract needs it, and invoices for as long as tax law requires.
Our host keeps technical logs for a short period, then deletes them.
Who processes it for us
We don't sell your data or share it for advertising. These providers process it on our behalf, under data processing agreements:
- Vercel Inc.: hosting, technical logs and anonymous statistics.
- Resend: delivering enquiries from the contact form to our inbox.
Both are based in the United States. Transfers are protected by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses.
Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you
- correct it if it's wrong
- delete it
- limit how we use it, or object to our use of it
- send it to you or to someone else in a common format
To use any of these rights, contact us through the contact form or by phone on +94 70 608 9549. We reply within one month, as the GDPR requires.
Complaints
If you're unhappy with how we handle your data, please tell us first. You can also complain to a data protection supervisory authority, such as the one where you live or work.
Cookies
We don't use cookies that need your consent. The cookie policy explains the one thing we store on your device.
Changes to this policy
If we change this policy, we'll update the date at the top of this page.