Privacy Policy

Digimax Global (Pvt) Ltd (company registration PV 00321687) operates this website and is the controller of the personal information described here, in the sense that term is used in Sri Lanka's Personal Data Protection Act, No. 9 of 2022 (the PDPA). Our registered office is Digimax Complex, No.182/1/B, Horana Road, Kesbewa 10300, Sri Lanka.

This policy covers digimaxglobal.net, our enquiry and newsletter forms, and the information we handle when we quote, deliver, install or service a DIGIMAX system. If you contact us on WhatsApp, by phone or by email, the same policy applies to what you tell us.

We collect very little, and almost all of it is information you type into a form yourself.

Information you give us

Your name, phone number and email address; your message; the contact channel you prefer (WhatsApp, call or email); and, depending on the form, your interest area, project type, the product and item code you asked about, and the quantity you need. The newsletter form collects your email address only.

Information from a project or site visit

If we quote or install for you, we also handle your installation address, notes about your space, floor plans or photographs you share with us, and the record of what we supplied and installed. For trade and developer clients this includes the contact details of your site staff.

Technical information

Our servers keep standard access logs: your IP address, the pages you requested, timestamps, the referring page and your browser and device type. These are generated automatically by the web server, not by a tracking script.

Information we never ask for on this site

We do not take payments online and we do not ask for card or bank details, your National Identity Card number, or any of the special categories of personal data listed in the PDPA. Please do not send them through the forms on this site.

• To answer your enquiry and prepare a quotation, which is the whole reason the forms exist.
• To arrange delivery, installation, commissioning and after-sales service, including passing your address and contact number to the technician assigned to your job.
• To handle warranty claims, which means keeping a record of what you bought, when, and what we did about a fault. See our warranty terms.
• To send the monthly newsletter, if you asked for it.
• To keep our own business records: invoices, service history, accounting and tax.
• To keep the site secure and working, for example by using server logs to investigate abuse, spam submissions or an outage.

We do not sell your personal information, we do not rent or trade contact lists, and we do not use your enquiry to build an advertising profile of you.

The PDPA requires us to have a lawful basis for each use of your information. Ours are:

Your consent

Newsletter subscriptions, and marketing messages about products and offers. You can withdraw consent at any time and we stop.

Performance of a contract, or steps leading to one

Quoting, supplying, delivering, installing, servicing and honouring warranty on what you bought.

Our legitimate interests

Responding to an enquiry you sent us, keeping records of our dealings with you, and protecting this site from abuse. We have weighed these against your interests and kept the processing to the minimum that achieves the purpose.

Legal obligation

Accounting, tax and company-law records, and responding to a lawful request from a regulator, court or law-enforcement authority.

We share your information only where it is needed to do the job you asked for, or where the law requires it. In every case the recipient is bound to use it only for that purpose.

Our installation and service team

The technicians assigned to your delivery, installation or service call receive your name, address, phone number and what needs doing.

Service providers who run our systems

Our website hosting and database provider, and Resend, the service that delivers our transactional and newsletter email. They process data on our instructions under contract and cannot use it for their own purposes.

Professional advisers

Our accountants, auditors and lawyers, where they need it to advise us.

Authorities

Regulators, courts or law-enforcement bodies, where we are legally required to disclose, or where we need to establish or defend a legal claim.

Some of these providers store data on servers outside Sri Lanka. Where that happens we rely on the cross-border transfer provisions of the PDPA and satisfy ourselves that the provider offers an appropriate level of protection through its contractual and security commitments.

If our business or a part of it is ever sold or reorganised, customer records may transfer to the buyer. We would tell you, and this policy would continue to apply to information collected before the transfer.

This site runs no advertising trackers, no third-party analytics tag and no social-media pixels. There is nothing on digimaxglobal.net that follows you to other websites, and no cookie banner, because there is nothing to consent to.

The only cookies we set are strictly necessary ones: a session cookie for staff signing in to the private admin area, and, where your browser needs it, a token that protects forms against cross-site request forgery. Neither is used to profile you.

If we later add analytics or advertising cookies, we will update this policy and ask for your consent first, as the PDPA requires. Note that pages on this site can be embedded from third parties, for example the Google Map on our contact page, and those providers set their own cookies under their own policies.

Enquiries that did not become a project

Up to 24 months after our last contact with you, then deleted.

Customer, project and warranty records

For the life of the warranty on what we supplied, plus the period we are required to keep accounting records. For a 25-year Power Glass output warranty, that means we hold the installation record for as long as the cover runs.

Newsletter subscriptions

Until you unsubscribe, after which we keep only the fact that you opted out, so we do not email you again by mistake.

Server access logs

A short rolling window, kept for security and troubleshooting only.

The site is served over encrypted HTTPS connections. Enquiry data is stored in a private database that is not reachable from the public internet, staff accounts are individually credentialled with hashed passwords, and access is limited to the people who need it to do their job. Our admin area is excluded from search engines.

No system is perfect. If a breach ever affects your personal information, we will notify you and the Data Protection Authority as the PDPA requires.

Under the PDPA you can ask us to:

• Confirm whether we hold personal information about you, and give you access to it.
• Correct anything that is inaccurate or incomplete.
• Erase information we no longer have a lawful reason to keep.
• Stop or restrict a particular use, including any use for marketing.
• Withdraw a consent you previously gave, at any time.
• Review a decision, if we ever make one about you by wholly automated means. We do not currently do this.

Write to infor.digimaxglobal@gmail.com or call +94 70 377 7244. We may ask you to confirm your identity so we do not disclose your information to someone else. We will acknowledge your request promptly and answer it within the period the PDPA allows, and in practice within 14 working days. There is no charge for a reasonable request.

If you are not satisfied with how we handled it, you can complain to the Data Protection Authority of Sri Lanka. We would rather you came to us first so we can put it right.

We reply on the channel you chose on the form. If you picked WhatsApp, your message and our reply sit in WhatsApp under its own terms and privacy policy, which we do not control.

Newsletter emails carry an unsubscribe link in every issue. You can also reply to any message from us, or write to infor.digimaxglobal@gmail.com, and ask to be taken off the list. Withdrawing marketing consent does not stop the service messages we need to send about an order, installation or warranty claim in progress.

This site is aimed at homeowners, designers, contractors and developers, not at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us their details, write to infor.digimaxglobal@gmail.com and we will delete them.

We update this policy when our practices or the law change. The date at the top of this page shows the current version. If a change materially affects how we use information we already hold about you, we will tell you directly rather than rely on you noticing a new date.

Email infor.digimaxglobal@gmail.com, call +94 70 377 7244, or write to the Data Protection contact at Digimax Global (Pvt) Ltd, Digimax Complex, No.182/1/B, Horana Road, Kesbewa 10300, Sri Lanka. For anything else, our contact page has every channel and our opening hours.