Privacy Policy
This policy explains how SoftSora (Pvt) Ltd ("SoftSora", "we", "us") collects, uses and protects personal data when you visit softsora.com or contact us. We act as the data controller for the personal data described here.
We aim to handle personal data lawfully, transparently and to the standard the EU General Data Protection Regulation (GDPR) expects, for every visitor, wherever they are.
Who we are
SoftSora (Pvt) Ltd, No 42, Balapokuna Road, Colombo 05, Sri Lanka. For any privacy question or request, contact privacy@softsora.com.
[If you offer services into the EU, add your EU representative details here as required by GDPR Article 27.]
What data we collect
We keep data collection to a minimum. Depending on how you use the site, this may include:
- Contact details you provide: name, company, email, and the content of your enquiry, when you use our contact form or email us.
- Technical data: limited information your browser sends, such as IP address, device and browser type, used to operate and secure the site.
- Communications: records of correspondence when you contact us, so we can respond and keep a history of the conversation.
How we use your data
- To respond to your enquiry and discuss a possible engagement.
- To operate, secure and improve the website.
- To meet legal, accounting and regulatory obligations.
Legal bases (GDPR Article 6)
- Legitimate interests: to respond to enquiries and run our business and website securely.
- Consent: where you opt in, for example to receive a report or communications. You can withdraw consent at any time.
- Legal obligation: where we must retain or disclose data to comply with the law.
Cookies
We use only the cookies needed for the site to function. We do not load analytics or advertising cookies without your consent. See our Cookie Policy for details and choices.
Sharing and processors
We do not sell personal data. We share it only with service providers who help us run the site and our business (for example hosting and email), under contracts that require them to protect it. [List your key processors here, for example hosting and email providers.]
International transfers
We operate across Sri Lanka, Japan and the EU, so data may be processed outside your country. Where personal data of EU or UK individuals is transferred, we rely on appropriate safeguards such as Standard Contractual Clauses. EU data hosting is available on request for client engagements.
How long we keep data
We keep personal data only as long as needed for the purpose it was collected, to meet legal obligations, or to resolve disputes, then delete or anonymise it.
Your rights
Subject to applicable law, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data, or complete incomplete data.
- Erase your data, or restrict or object to its processing.
- Receive your data in a portable format.
- Withdraw consent, and lodge a complaint with your data protection authority.
Security
We maintain technical and organisational measures appropriate to the risk, aligned with an ISO 27001-aligned framework, to protect personal data against loss, misuse and unauthorised access.
Contact and changes
For any request or question, contact privacy@softsora.com. We may update this policy from time to time; the date below shows the latest version.