PRIVACY POLICY
Last updated Jan 08, 2026
Welcome to IXD Labs. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, share, and protect your data when you visit our website https://ixdlabs.com or engage with our services. We comply with global privacy regulations including:
-
The General Data Protection Regulation (GDPR) – European Union
-
Personal Data Protection Act, No. 9 of 2022 – Sri Lanka
Table of Contents
- 1. INTRODUCTION
- 2. DATA WE COLLECT
- 3. HOW WE USE YOUR DATA
- 4. LEGAL BASIS FOR PROCESSING (GDPR & SRI LANKA PDPA)
- 5. SHARING YOUR DATA
- 6. THIRD-PARTY SERVICES
- 7. DATA STORAGE AND SECURITY
- 8. YOUR RIGHTS AND CHOICES (GDPR & SRI LANKA PDPA)
- 9. DATA RETENTION
- 10. CHILDREN’S PRIVACY
- 11. INTERNATIONAL DATA TRANSFERS
- 12. CHANGES TO THIS POLICY
- 13. CONTACT US
1. INTRODUCTION
IXD Labs ("we", "us", or "our") is a software engineering and digital solutions company specializing in product engineering, digital transformation, and AI & data engineering services. Through our website https://ixdlabs.com, we provide information about our services, share insights through our blog, showcase our work, and enable prospective clients, partners, and candidates to connect with us.
This Privacy Policy outlines how we collect, use, store, share, and protect personal data when you interact with our website or engage with us professionally. By using our website or services, you agree to the terms of this policy and consent to the processing of your data in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR), Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, and other relevant data protection regulations.
2. DATA WE COLLECT
We collect the following types of personal data:
| Category | Details |
|---|---|
| Contact Information | Name, email, phone number, company name, job title (when you contact us) |
| Career Information | Resume/CV, work history, qualifications, portfolio links (when you apply for roles) |
| Communication Data | Messages, inquiries, and correspondence you send us |
| Device & Usage Data | IP address, browser type, OS, pages visited, referring URLs, time spent on pages |
| Cookies & Analytics | Google Analytics identifiers and usage data (see our Cookie Policy) |
All data is collected directly from you when you submit a form, send an email, or browse our website, with your consent where required.
3. HOW WE USE YOUR DATA
We use your data for the following purposes:
-
To respond to your inquiries and provide requested information
-
To evaluate job applications and communicate with candidates
-
To deliver and improve our services to clients
-
To send relevant updates, newsletters, or marketing communications (with your consent)
-
To analyze website usage and improve user experience
-
To ensure legal compliance and protect our legitimate business interests
-
To secure our website and prevent fraudulent activity
We do not sell your personal data.
4. LEGAL BASIS FOR PROCESSING (GDPR & SRI LANKA PDPA)
Depending on your location, our legal basis for collecting and processing your data includes:
| Jurisdiction | Legal Basis |
|---|---|
| European Union (GDPR) | Consent, performance of contract, legal obligation, legitimate interest |
| Sri Lanka (PDPA No. 9 of 2022) | Consent, contract fulfillment, compliance with legal obligations, legitimate interest |
Where consent is required (such as receiving marketing emails or non-essential cookies), you may withdraw it at any time.
5. SHARING YOUR DATA
Your data may be shared with:
-
Trusted third-party service providers (e.g., cloud hosting, email delivery, analytics, recruitment platforms)
-
Professional advisors (e.g., legal, accounting, or compliance consultants) when necessary
-
Legal authorities, when required by law or to protect our legal rights
All third parties are contractually obligated to protect your information and use it only for specified purposes.
6. THIRD-PARTY SERVICES
Our website uses Google Analytics, a web analytics service provided by Google LLC, to understand how visitors interact with our website. Google Analytics may set cookies and collect information such as your IP address, browser type, pages visited, and time spent on the site. This data is processed by Google in accordance with its own Privacy Policy.
You can opt out of Google Analytics tracking by adjusting your cookie preferences or browser settings. For more details, see our Cookie Policy.
7. DATA STORAGE AND SECURITY
We store your data securely using industry-standard encryption and access controls. We also implement physical, technical, and administrative safeguards to prevent unauthorized access, alteration, or disclosure.
Although we strive to use commercially acceptable means to protect your data, no method of transmission or storage is 100% secure.
8. YOUR RIGHTS AND CHOICES (GDPR & SRI LANKA PDPA)
Depending on your country, you have the right to:
| Right | Description |
|---|---|
| Access | Request a copy of your personal data |
| Rectification | Correct inaccurate or incomplete data |
| Erasure (Right to be Forgotten) | Request deletion of your personal data |
| Restriction of Processing | Ask us to limit how we use your data |
| Data Portability | Receive your data in a structured, machine-readable format |
| Object | Object to processing based on legitimate interest or for direct marketing |
| Withdraw Consent | Revoke previously given consent at any time |
| Lodge Complaint | File a complaint with your local Data Protection Authority |
To exercise your rights, email us at hello@ixdlabs.com. We may request verification of your identity before processing your request.
9. DATA RETENTION
We retain your data for as long as necessary to:
-
Fulfill the purposes outlined in this Privacy Policy
-
Comply with legal, tax, or regulatory obligations
-
Resolve disputes and enforce our agreements
Job application data is retained for up to 12 months unless you consent to a longer retention period for future opportunities. You may request deletion of your data at any time by contacting us.
10. CHILDREN’S PRIVACY
Our website and services are not intended for children under 16 years of age (or the equivalent age of digital consent in your jurisdiction). We do not knowingly collect data from children without verified parental consent.
11. INTERNATIONAL DATA TRANSFERS
If you access our website from outside Sri Lanka, your information may be transferred across borders to countries where our service providers operate. We implement safeguards such as:
-
Standard Contractual Clauses (SCCs)
-
Data processing agreements
-
Compliance with local transfer mechanisms (e.g., PDPA, GDPR)
12. CHANGES TO THIS POLICY
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last updated" date. If the changes are significant, we will notify you through our website or via email where appropriate.
13. CONTACT US
If you have questions or want to exercise your data rights, contact us:
Email: hello@ixdlabs.com
Website: https://ixdlabs.com
Mailing Address: No. 113/6, Maharagama Road, Piliyandala 10300, Sri Lanka.