1. Introduction

At Octick, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website, services, or interact with us.

2. Data We Collect

Name, email, phone number, address.
Company information.
Billing and payment details.
Project requirements and communication records.
Technical data (IP address, browser type, device information, cookies).

We do not knowingly collect personal data from minors under the age of 18.

3. How We Use Your Data

Provide services and customer support.
Process payments and invoices.
Communicate project updates and proposals.
Improve our website and services.
Comply with legal obligations.

4. Legal Basis for Processing (GDPR Compliance)

Performance of a contract.
Compliance with legal obligations.
Legitimate business interests.
Consent (where applicable).

5. Data Sharing

We do not sell your personal data.

We may share data with:

Authorized employees, contractors, and subcontractors.
Third-party service providers (e.g., payment processors, hosting providers, marketing tools).
Legal authorities when required by law.

6. International Data Transfers

If you are located outside Sri Lanka, your data may be transferred to, processed, and stored in countries where we or our service providers operate. We ensure adequate protection through contracts and safeguards compliant with Sri Lanka's Personal Data Protection Act and applicable international regulations like GDPR and CCPA.

7. Data Retention

We retain personal data as long as necessary to:

Fulfill service obligations.
Comply with legal and accounting requirements.
Resolve disputes.

Data will be securely deleted or anonymized when no longer required.

8. Your Rights

You have the right to:

Access your personal data.
Request correction or deletion.
Object to or restrict processing.
Data portability.
Withdraw consent (where applicable).

Requests can be made by contacting us directly.

9. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

SSL encryption.
Access controls.
Secure servers.
Employee confidentiality agreements.

However, no method of transmission or storage is 100% secure.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of third-party websites.

11. Cookies

We use cookies and similar technologies for analytics, performance monitoring, and service improvements. You may disable cookies through your browser settings.