Legal
Privacy Policy
How Alphzen collects, uses, shares, and protects personal data — including your rights under the GDPR, the cookies we use, and how advertising works on our products.
01Who we are
Alphzen (“Alphzen”, “we”, “us”, or “our”) is a software company based in Sri Lanka. We build websites, web applications, custom software, and our own web products.
For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, Alphzen is the data controller for personal data processed through the websites and services described in this policy.
- Email: contact@alphzen.com
- Phone: +947 21444 616
- Website: https://alphzen.com
02Scope of this policy
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and the rights you have over it. It applies to:
- alphzen.com
- tools.alphzen.com
- other Alphzen product subdomains as they launch
- our contact and enquiry channels, including email and our contact form
It does not apply to third-party websites we link to. Those sites have their own privacy practices, and we are not responsible for them.
03Personal data we collect
Information you give us
When you submit our contact form or email us, we collect the details you choose to provide:
- your name
- your email address
- your business or company name (optional)
- the type of project you are interested in
- the content of your message and any information you include in it
Please do not send sensitive personal data (such as health, financial account, or government identification details) through the contact form.
Information collected automatically
When you visit our websites, limited technical data may be collected by us or by our service providers:
- IP address (truncated or anonymised where possible)
- browser type, device type, operating system, and language
- pages viewed, time on page, and referring website
- approximate location derived from IP address (country or region level)
- cookie and similar identifiers, where you have consented to them
Information we do not collect
We do not require you to create an account to use our website or our publicly available tools, we do not knowingly collect data from children, and we do not sell personal data.
04Why we use your data and our legal bases
Under the GDPR we must have a lawful basis for each processing activity. Ours are set out below.
| What we do | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Respond to your enquiry and prepare a quote or proposal | Name, email, business, project type, message | Steps taken at your request prior to entering a contract (Art. 6(1)(b)) |
| Deliver services and manage a client project | Contact and project details | Performance of a contract (Art. 6(1)(b)) |
| Keep our websites secure, available, and free from abuse or spam | Technical and server log data | Legitimate interests in protecting our services (Art. 6(1)(f)) |
| Understand how our websites are used and improve them | Analytics data and cookie identifiers | Your consent (Art. 6(1)(a)) |
| Show advertising on our products and measure it | Advertising cookie identifiers and ad interaction data | Your consent (Art. 6(1)(a)) |
| Meet accounting, tax, and other legal obligations | Transaction and contract records | Legal obligation (Art. 6(1)(c)) |
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that took place before you withdrew it.
06Analytics
We use Google Analytics 4, provided by Google, to understand aggregate website usage. Analytics is loaded only after you consent to analytics cookies. IP anonymisation is enabled, and we do not use analytics data to identify individual visitors.
- Google’s privacy policy: policies.google.com/privacy
- How Google uses data from sites that use its services: policies.google.com/technologies/partner-sites
- Browser opt-out add-on: tools.google.com/dlpage/gaoptout
07Advertising and Google AdSense
Some Alphzen products — for example our developer tools at tools.alphzen.com — may display advertising served by Google AdSense and other third-party advertising vendors.
- Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to our websites or other websites.
- Google’s use of advertising cookies enables it and its partners to serve ads to users based on their visit to our sites and/or other sites on the internet.
- Users may opt out of personalised advertising by visiting Google Ads Settings.
- You can opt out of personalised advertising from other participating vendors at aboutads.info/choices and youronlinechoices.eu.
- Third-party vendors that we do not control may use their own cookies and technologies. Their practices are governed by their own privacy policies, which we do not control.
Visitors in the EEA, UK, and Switzerland
Where advertising is shown to users in these regions, consent for advertising cookies and personalised advertising is collected in line with Google’s EU User Consent Policy before such cookies are set. If you do not consent, you may still see ads, but they will not be personalised.
09International data transfers
We operate from Sri Lanka and use service providers located in other countries, including the United States. This means your personal data may be transferred outside the European Economic Area or the United Kingdom.
Where such transfers take place, we rely on appropriate safeguards under Chapter V of the GDPR, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision where one applies. You can request a copy of the safeguards we rely on by emailing contact@alphzen.com.
10How long we keep data
We keep personal data only as long as we need it for the purpose it was collected, then delete it or anonymise it.
| Data | Retention period |
|---|---|
| Contact form enquiries that do not become projects | Up to 24 months from your last message |
| Client project and communication records | Duration of the engagement plus up to 6 years |
| Accounting and tax records | As required by applicable law, typically 6 years |
| Analytics data | Up to 14 months in Google Analytics |
| Cookie consent record | Up to 12 months, after which we ask again |
11How we protect your data
We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls on our systems and inboxes, reputable infrastructure providers, and limiting access to those who need it.
No method of transmission or storage is completely secure. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours where required, and notify you without undue delay where the risk is high.
12Your rights under the GDPR
If you are in the EEA or the UK, you have the following rights over your personal data:
- Access — obtain confirmation of whether we process your data and receive a copy of it.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — ask us to delete your data where there is no overriding reason to keep it.
- Restriction — ask us to limit how we use your data in certain circumstances.
- Portability — receive data you provided to us in a structured, machine-readable format.
- Objection — object to processing based on our legitimate interests, and to direct marketing at any time.
- Withdraw consent — withdraw cookie or marketing consent at any time, without affecting prior processing.
- Automated decisions — we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any right, email contact@alphzen.com. We respond within one month, and may extend this by two further months for complex requests, in which case we will tell you. We may need to verify your identity before acting.
You also have the right to lodge a complaint with your local data protection authority. In the EEA you can find yours through the European Data Protection Board; in the UK, with the Information Commissioner’s Office. We would appreciate the chance to address your concerns first.
13Rights in other regions
California (CCPA/CPRA)
California residents may request access to, deletion of, and details about the personal information we collect, and may opt out of the “sale” or “sharing” of personal information. We do not sell personal information. Advertising cookies on our ad-supported products may constitute “sharing” under the CPRA; you can disable them through our cookie settings. We will not discriminate against you for exercising these rights.
Sri Lanka
Where the Personal Data Protection Act No. 9 of 2022 applies, data subjects may request access, correction, and erasure of their personal data by contacting us at the address above.
Everyone else
Wherever you are, you can contact us to ask what data we hold about you and to request its correction or deletion, and we will do our best to help.
14Children’s privacy
Our websites and products are intended for businesses and professionals, and are not directed at children. We do not knowingly collect personal data from anyone under 16 years of age. If you believe a child has provided us with personal data, contact us at contact@alphzen.com and we will delete it.
15Links to other websites
Our websites contain links to third-party websites, including client projects and advertisers. Clicking such a link takes you to a site we do not control. We are not responsible for their content or privacy practices, and we encourage you to read their privacy policies.
16Changes to this policy
We may update this Privacy Policy to reflect changes in our practices, our products, or the law. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be highlighted on our website. Please review this page periodically.
17Contact us
For any privacy question, request, or complaint, contact us and we will respond as quickly as we can:
- Email: contact@alphzen.com
- Phone: +947 21444 616
- Contact form: alphzen.com/contact