This policy explains what personal information Avenstra Software (“we”, “us”) collects through the website avenstra.lk, why we collect it, and the choices you have.
1. Who we are
Avenstra Software is a software engineering company based in Sri Lanka. We are responsible for the personal information described in this policy. You can contact us at info@avenstra.lk.
2. What this policy covers
This policy covers the website avenstra.lk and the emails you send us. It does not cover the systems we build or run for our clients: those are covered by each client’s agreement with us.
3. Information we collect
- Information you send us. When you send the contact form, our website emails your name, company, email address, project type and message to our inbox. The website itself does not keep a copy. When you email us directly, we receive what you send.
- Technical information. Like most websites, our web server records basic technical details of each visit: your IP address, the date and time, the page requested, the referring page and your browser type. We use them only to run the website and keep it secure. To stop automated spam, the server also counts the contact form requests from each IP address.
We do not collect payment details, and the website has no user accounts or passwords. Please do not send us sensitive personal information, such as health or financial details, through the form or by email.
4. How we use your information
- To reply to your enquiry and discuss a possible project with you.
- To run, maintain and protect the website, including finding and stopping misuse.
- To keep business records and to meet our legal obligations.
We do not sell your information, we do not add you to a mailing list, and we do not use your information for automated decisions about you.
5. Cookies and tracking
This website does not set cookies. It does not use analytics or advertising tools, and it does not track you across other websites. If this changes, we will update this policy first.
6. Services we use
- Hosting. The website runs on servers provided by Amazon Web Services (AWS).
- Email. Our email is provided by Microsoft 365. Emails you send us are stored there.
- Sending the contact form. Enquiries from the form are sent to our inbox through Microsoft 365. The service may keep a delivery record for a limited time under its own policy.
- Fonts. The website loads its fonts from Google Fonts. When a page opens, your browser connects to Google’s servers, which can see your IP address. Google’s privacy policy applies to that connection.
These providers process information to deliver their service to us, and they may store it outside Sri Lanka.
7. Sharing your information
We share personal information only:
- with the service providers listed above;
- with our employees and contractors who need it to respond to you, under a duty of confidentiality;
- when the law requires it, or to protect our rights, our users or the public;
- as part of a merger, sale or reorganisation of our business, in which case this policy continues to apply.
8. Information stored outside Sri Lanka
Our providers may store and process information in other countries. When this happens, the information is protected by the providers’ own security measures and their agreements with us.
9. How long we keep information
- Enquiries and emails: as long as we need them to deal with your enquiry and any project that follows, and after that only as long as our business and legal records require.
- Server records: for a limited time, normally no longer than 90 days, unless we need them to look into a security problem.
- Spam checks: the count of form requests per IP address is kept only in the server’s memory, for about 10 minutes, and then deleted.
10. How we protect information
We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS) and access limited to the people who need it. No way of sending information over the internet is completely secure, and this includes email.
11. Your rights
Under Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, and other laws that may apply to you, you can ask us to:
- tell you whether we hold personal information about you, and give you a copy of it;
- correct information that is wrong or incomplete;
- delete information we no longer need;
- stop or limit our use of your information, or withdraw a consent you have given.
To make a request, email info@avenstra.lk. We may need to confirm who you are before we act on it. We will reply as soon as we can, and within the time the law requires. If you are not satisfied with our reply, you can complain to the data protection authority in your country.
12. Children
This website is meant for businesses. It is not directed at children under 18, and we do not knowingly collect their personal information.
13. Links to other websites
This website may link to other websites. We do not control them and are not responsible for their content or how they handle your information. Please read their own privacy policies.
14. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If a change is important, we will make it clear on this page.
15. Contact us
Avenstra Software, Sri Lanka
Email: info@avenstra.lk