Privacy Policy

01 Introduction

NetFortify Solutions is committed to protecting your privacy and handling your personal data responsibly. This policy applies to all personal information we collect through our website, during the delivery of our services, and through any other interactions you have with us.

We comply with applicable data protection laws, including the Personal Data Protection Act of Sri Lanka and, where relevant, the General Data Protection Regulation (GDPR) for clients in the European Economic Area.

LG Lead Generation Form Privacy Notice

When you submit any inquiry form on this website (including the contact form and WhatsApp consultation form), we collect lead information such as your full name, email address, phone number, company, requested services, and project details.

• Purpose: to respond to your inquiry, provide consultation, and deliver requested proposals or service information.
• Legal basis: your consent and our legitimate interest in responding to business inquiries.
• Retention: lead submissions are retained for up to 24 months unless a service contract is established, after which normal service-retention rules apply.
• Consent control: all lead forms include an explicit privacy consent checkbox before submission.
• Withdrawal: you may withdraw consent at any time by contacting us at info@netfortifysolutions.com.

02 Information We Collect

We collect the following categories of information:

Information you provide directly:

• Name, email address, phone number, and company name (submitted via contact forms or consultations).
• Project details, requirements, and descriptions shared during service enquiries or delivery.
• Payment and billing information (processed securely through our financial systems).
• Correspondence sent to us by email, WhatsApp, or other channels.

Information collected automatically:

• IP address, browser type, operating system, and referring URLs.
• Pages visited, time spent on pages, and navigation patterns (via cookies and analytics tools).
• Device identifiers and approximate geographic location derived from IP address.

Information from third parties:

• Business contact details from professional networking platforms (e.g., LinkedIn) when you engage us there.
• Publicly available information relevant to a service engagement.

03 How We Use Your Information

We use the information we collect to:

• Respond to your enquiries, provide consultations, and deliver agreed services.
• Process payments and manage billing for service engagements.
• Communicate with you about projects, updates, or changes that affect you.
• Send service-related notifications and, with your consent, marketing communications about our offerings.
• Improve the functionality, usability, and content of our website based on usage analytics.
• Detect, prevent, and address technical issues and security incidents.
• Comply with legal obligations and enforce our agreements.

Our legal basis for processing includes: performance of a contract (service delivery), legitimate interests (website improvement, security), compliance with legal obligations, and—where required—your consent (marketing communications).

04 Cookies & Analytics

Our website uses cookies and similar tracking technologies to enhance your experience and collect analytical data. Cookies are small text files stored on your device by your browser.

Types of cookies we use:

• Essential cookies: Required for the website to function correctly. These cannot be disabled.
• Analytics cookies: We use Google Analytics (via Google Tag Manager) to understand how visitors interact with our website. This data is aggregated and anonymised where possible. Google Analytics may set cookies and collect your IP address; see Google's Privacy Policy for details.
• Functional cookies: Used to remember preferences or settings that improve your experience.

05 Sharing Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information with:

• Service providers: Trusted third-party vendors who assist in operating our website and delivering services (e.g., cloud infrastructure providers, communication tools, payment processors), bound by confidentiality obligations.
• Professional advisors: Legal, financial, and accounting advisors under obligations of professional secrecy.
• Law enforcement or regulatory authorities: Where required by applicable law, court order, or to protect our legal rights.
• Business transfers: In connection with a merger, acquisition, or sale of assets, where your information may be transferred as part of the transaction.

06 Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, or reporting requirements.

• Contact enquiry data: up to 2 years from last contact, unless a service engagement is initiated.
• Service engagement data: for the duration of the engagement plus up to 7 years to comply with legal and tax obligations.
• Website analytics data: subject to Google Analytics' default retention periods (up to 26 months).

When data is no longer required, it is securely deleted or anonymised.

07 Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Encrypted transmission of data using TLS/SSL.
• Access controls limiting data access to authorised personnel only.
• Regular security assessments of our systems and infrastructure.
• Employee training on data protection and information security practices.

08 Your Rights

Subject to applicable law, you have the following rights in relation to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data where it is no longer necessary or you withdraw consent.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Objection: Object to processing based on our legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us using the details in Section 12. We will respond within 30 days.

09 International Data Transfers

Some of our third-party service providers (including Google Analytics) may process your data outside Sri Lanka. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to maintain the level of protection required under applicable law.

10 Children's Privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such information, please contact us immediately and we will take steps to delete it.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Changes will be posted on this page with an updated Effective Date.

We encourage you to review this policy periodically. Your continued use of our website or services after changes are posted constitutes your acceptance of the revised policy.

12 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your data is handled, please contact us:

• Company: NetFortify Solutions (Private) Limited
• Address: Malabe, Sri Lanka
• Email: info@netfortifysolutions.com
• Phone: +94 74 180 3014