Legal

Privacy Policy

Last updated: 9 October 2026. This policy explains what personal data we collect when you use our website, why we collect it, and the choices you have.

1. Who we are

WizCode (PVT) Ltd ("WizCode", "we", "us" or "our") is a software development and digital services company based at 561/1, Madiwela Road, Thalawatugoda, Sri Lanka. We are the controller of the personal data collected through wizcode.lk.

We process personal data in line with the Personal Data Protection Act No. 9 of 2022 of Sri Lanka and, where it applies to visitors from other regions, other applicable data protection laws.

2. Information we collect

We only collect the information we need to respond to you and run this website:

  • Contact and project enquiries: your name, company name, email address, phone number, the services or products you are interested in, budget range, preferred deadline and any message you send us.
  • Blog comments: your name, email address, optional phone number and the comment you post. If you comment anonymously, we do not ask for your name or email.
  • Location (optional): if you allow it in your browser, your approximate location is used to show local time, sky and weather visuals. This happens in your browser and is only sent to the weather and geocoding providers listed below. You can decline or withdraw permission at any time.
  • Technical data: standard server logs such as IP address, browser type, pages visited and timestamps, used for security and to keep the site running.

3. How we use your information

  • To respond to your enquiry and prepare proposals, quotations and project plans.
  • To communicate with you about a project or service you have asked about.
  • To publish and moderate blog comments.
  • To maintain, secure and improve our website and services.
  • To meet our legal, accounting and regulatory obligations.

We do not sell your personal data, and we do not use it for automated decision-making or profiling. We will only send you marketing messages if you have asked us to, and you can opt out at any time.

4. Legal basis for processing

We process your data based on your consent (for example when you submit a form or allow location access), to take steps at your request before entering into a contract, to comply with legal obligations, and for our legitimate interests in operating and securing our business, where those interests are not overridden by your rights.

5. Sharing your information

We only share personal data where it is needed:

  • Service providers who host our website, servers and email on our behalf, under confidentiality obligations.
  • Open-Meteo (weather) and BigDataCloud (reverse geocoding), only if you allow location access. They receive your coordinates, not your name or contact details.
  • Professional advisers or authorities where required by law, or to protect our rights, property or safety.

Some of these providers may process data outside Sri Lanka. Where this happens, we take reasonable steps to make sure your data stays protected.

6. Cookies and local storage

We do not use advertising or third-party tracking cookies. Your browser's local storage keeps a few settings on your device, such as your location permission choice and display preferences, so the site works the way you left it. You can clear them at any time through your browser settings.

7. How long we keep your data

Enquiry data is kept only as long as needed to handle your request and any project that follows, and afterwards for as long as legal or accounting rules require. Blog comments stay published until you ask us to remove them or we remove them during moderation. When data is no longer needed, we delete or anonymise it.

8. How we protect your data

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and limiting access to staff who need it. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate or incomplete data.
  • Ask us to delete your data.
  • Withdraw your consent at any time, without affecting processing that happened before you withdrew it.
  • Object to or ask us to restrict certain processing.
  • Make a complaint to the Data Protection Authority of Sri Lanka.

To exercise any of these rights, contact us using the details below. We may need to verify your identity first.

10. Children's privacy

Our website and services are not aimed at children under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, please contact us and we will delete it.

11. Third-party links

Our website links to other sites, such as our social media pages. We are not responsible for their privacy practices, so please read their own privacy policies.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the "Last updated" date at the top.

13. Contact us

For questions about this policy or your personal data, contact us at: