Privacy Policy

1. Introduction

At Nexturax, we respect your privacy and are committed to protecting the personal data of our website visitors, clients, partners, and job applicants. This Privacy Policy explains how we collect, process, share, and protect your information when you visit our website (https://www.nexturax.com) or engage with our custom software, mobile app, cloud, or AI development services.

Our data processing practices are governed in accordance with the laws of the Democratic Socialist Republic of Sri Lanka, including **Sri Lanka's Personal Data Protection Act (PDPA) No. 9 of 2022**, and we aim to align our procedures with global privacy standards such as the General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

We collect information that you voluntarily provide to us, as well as data that is automatically recorded when you interact with our digital assets.

A. Information You Provide to Us

• Contact Details: Your name, business email address, phone number, physical mailing address, and company name when you fill out contact forms, request estimates, or subscribe to newsletters.
• Project Requirements: Scope definitions, product ideas, target demographics, and technological preferences submitted through consultation requests.
• Employment Applications: Resumes, CVs, portfolios, educational backgrounds, and professional references submitted via our Careers page.

B. Information Collected Automatically

• Log Data: Your Internet Protocol (IP) address, browser type, device details, operating system, referencing/exit URLs, and time stamps.
• Usage Information: Specific page paths visited, interaction durations, click patterns, and feature configurations used on our site.

3. How We Use Information

Nexturax utilizes the collected data for various legitimate business functions, including:

• Service Delivery: Drafting service agreements, developing custom software solutions, configuring cloud networks, and providing maintenance or technical support.
• Communications: Responding to client inquiries, sharing project updates, distributing periodic technology newsletters, and delivering customer service.
• Improvement and Analytics: Evaluating how users interact with our website to optimize layout architectures, page performance, and content value.
• Recruitment: Evaluating prospective job candidates, managing application workflows, and contacting candidates for interview loops.
• Legal Compliance: Meeting statutory duties, preventing malicious or fraudulent activities, and protecting corporate assets.

4. Security & Safeguards

We adopt administrative, physical, and technical security guidelines to protect your personal data from unauthorized access, loss, manipulation, disclosure, or destruction. We utilize HTTPS/TLS encryption across our websites and enforce secure database storage permissions.

However, please be aware that no method of transmission over the internet or system of electronic storage is 100% secure. While we deploy industry-standard measures to safeguard your personal data, we cannot guarantee absolute data security.

5. Sharing & Disclosures

We do not sell, rent, or trade your personal data to third parties. We may disclose data only under the following conditions:

• Trusted Service Providers: Sharing data with third-party vendors (such as hosting networks, email delivery systems, and analytics providers) who work under strict data processing agreements.
• Corporate Reorganizations: In the event of a merger, acquisition, joint venture, or sale of corporate assets, customer data may represent a transferred asset.
• Legal Compliance: If required to do so by Sri Lankan court orders, law enforcement requests, or to enforce our Terms of Service.

6. Cookies & Analytics

We use cookies and web tracking beacons to analyze page metrics and improve user experiences. Cookies are small data fragments saved onto your device browser.

You can modify your browser settings to reject cookies or warn you when cookies are sent. Please note that disabling cookies might disable or limit access to certain portions or functionalities of our site.

7. Your Privacy Rights

Under Sri Lanka's PDPA, you possess legal rights regarding the personal data we hold. These rights include:

• Right of Access: Request a summary of your personal data processed by us and obtain details regarding its processing.
• Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal information.
• Right to Erasure ("Right to be Forgotten"): Request the removal of your personal details where there is no legal reason for us to continue processing them.
• Right to Object: Object to the processing of your data for direct marketing purposes or on grounds relating to your specific situation.
• Withdraw Consent: Withdraw your consent at any time where processing is based on consent.

8. Data Retention

We retain your personal data only as long as is reasonably necessary to fulfill the purposes highlighted in this policy, satisfy our service agreements, manage client disputes, and fulfill administrative or taxation records required under Sri Lankan law.

9. International Transfers

Nexturax uses global cloud computing hosting (such as AWS or Vercel servers) situated outside of Sri Lanka. By utilizing our services or sending us your data, you understand that your information may be transferred and processed in overseas jurisdictions that might deploy differing data protection rules. We verify that overseas processors offer equivalent standards of safety.

10. Children's Privacy

Our website and professional engineering services are not targeted at or intended for children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us immediately to purge the records.