Privacy Policy

1. Who we are

Team SYNCODE is a software engineering studio located at 1166 Park Road, Pannipitiya 10230, Sri Lanka. We are the controller of the personal data described in this policy. This policy is written with reference to Sri Lanka's Personal Data Protection Act, No. 9 of 2022 (the "PDPA").

For any privacy question or request, email team.syncode@gmail.com or call +94 77 921 4221.

2. What we collect

We only collect personal data that you choose to give us or that is needed to deliver this website.

• Contact form. Your full name, email address, phone or WhatsApp number (optional), and the message you write.
• Direct contact. If you email, call, or message us on WhatsApp, we receive your contact details and whatever you tell us.
• Technical data. Our hosting provider automatically records standard server logs such as IP address, browser type, the pages requested, and the time of the request.

We do not use analytics or advertising trackers on this website, and we do not knowingly collect sensitive categories of personal data. Please do not include such information in your message.

3. How we use it

• To reply to your enquiry and send you a confirmation that we received it.
• To understand your project and prepare a proposal or quotation.
• To deliver our services and manage our relationship if you become a client.
• To keep the website secure and working properly.

We rely on your consent (given when you submit the form or contact us), on steps taken at your request before entering into a contract, and on our legitimate interest in running and securing our business. We do not sell your personal data, and we do not use it for marketing unless you ask us to.

4. Who we share it with

We share personal data only with service providers that help us operate this website and respond to you:

• Web3Forms, which delivers contact form submissions to our inbox.
• EmailJS, which sends the confirmation email to the address you provide.
• Google, which provides our email inbox and the map embedded on the Contact page.
• Vercel, which hosts this website.
• WhatsApp (Meta), if you choose to message us there.

Some pages load images, 3D content, or scripts directly from third parties (Unsplash, Spline, and unpkg). Your browser connects to those services to fetch the content, so they receive your IP address. Some of these providers are located outside Sri Lanka, which means your data may be processed in other countries. We may also disclose personal data where the law requires it.

5. Cookies

This website does not set cookies for analytics or advertising. The Google Map embedded on the Contact page is provided by Google and may set its own cookies under Google's privacy policy.

6. How long we keep it

We keep enquiries for up to 24 months after our last contact with you, so that we can follow up and keep a record of our conversation. If you become a client, we keep project and billing records for as long as needed to provide the service and to meet legal and accounting obligations. After that we delete the data or make it anonymous.

7. Your rights and how to request deletion

Under the PDPA you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct or complete inaccurate data;
• ask us to delete your personal data;
• withdraw your consent or object to further processing; and
• ask for a review of any decision made solely by automated means (we do not make such decisions).

To make a request, including a request to delete your data, email team.syncode@gmail.com from the address you used to contact us and tell us what you would like us to do. We may ask you to confirm your identity. We will respond within 21 working days. There is no charge for making a request.

If you are not satisfied with our response, you may complain to the Data Protection Authority of Sri Lanka.

8. Security

This website is served over HTTPS, and access to enquiries is limited to the team members who need it. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data and will notify you and the authority of a data breach where the law requires it.

9. Children

This website is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect personal data from them.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.

11. Contact us

You can also reach us through the Contact page.