Legal

Privacy Policy

Trinova Digitals (Pvt) Ltd · Last updated: September 2026

1. Who We Are

Trinova Digitals (Pvt) Ltd ("Trinova," "we," "us") is a company registered in Sri Lanka (Registration No. PV00360664). This policy covers the local division, Trinova Digitals Local, serving Sri Lankan businesses.

Contact: deva@trinovadigitals.com

2. What Information We Collect

a) Provided directly: name, business name, phone number/WhatsApp, email, and any details shared during consultation.

b) Collected automatically: IP address, pages visited, referral source, browser/device info, via analytics.

c) We do NOT collect: payment card details, or any sensitive personal data beyond what's needed to deliver the service.

3. How We Use Your Information

  • To respond to inquiries and deliver contracted services
  • To send updates about our services (only where you've agreed to this)
  • To improve the site based on traffic patterns
  • To meet legal obligations under Sri Lankan law

We do not sell your personal information to any third party.

4. Legal Basis for Processing — Sri Lanka's Personal Data Protection Act

Sri Lanka's Personal Data Protection Act No. 9 of 2022 (PDPA) governs how we handle your data. Under the PDPA, we process personal data on the following bases:

  • Consent — for marketing communications and promotional messaging
  • Contract performance — to deliver services you've engaged us for
  • Legitimate interest — for basic site analytics and inquiry handling

The PDPA specifically regulates direct marketing communications (Part IV) — we only send promotional messages (SMS, email, WhatsApp) to those who have opted in, and honor opt-out requests promptly.

5. Cookies

Essential cookies only for site function, plus analytics cookies (with consent) to understand traffic. No advertising or retargeting cookies beyond what Meta's own ad platform requires for campaign delivery.

6. Third-Party Services

  • Meta (Facebook/Instagram): ad delivery, subject to Meta's privacy policy
  • WhatsApp Business: for client communication
  • Vercel: hosting, processes server logs including IP addresses
  • Google: Business Profile and site analytics, if used

7. Data Retention

  • Inquiry correspondence: retained 24 months from last contact
  • Client project data: retained for the engagement plus 36 months for accounting purposes

8. Your Rights Under the PDPA

You may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Withdraw consent to marketing at any time

To exercise these rights, contact deva@trinovadigitals.com. We aim to respond within 30 days.

9. Data Security

We use reasonable technical measures to protect your data, including HTTPS/TLS encryption on all data in transit. No method of transmission over the internet is 100% secure.

10. Cross-Border Data Transfers

Some data processing (e.g. hosting, ad platforms) may occur outside Sri Lanka. We rely on the PDPA's adequacy provisions and standard safeguards for any such transfers.

11. Children's Privacy

This site is not directed at individuals under 18. We do not knowingly collect data from minors.

12. Changes to This Policy

Updates will be posted on this page with a revised effective date.

13. Contact

Trinova Digitals (Pvt) Ltd · Reg. No. PV00360664
deva@trinovadigitals.com