Your privacy, respected.

Who we are

iVishwa is a web design and development studio based in Sri Lanka ("iVishwa", "we", "us"). We are responsible for the personal information described in this policy. You can reach us at hello@ivishwa.com.

We follow the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka, and we apply the same care to visitors and clients from every country.

What we collect

• Details you choose to share: your name, business name, email address, phone or WhatsApp number, and the project idea you describe to us.
• Project information: files, content, feedback and approvals you share while we work together, and in the client portal.
• Payment records: invoice amounts, dates and payment status. Card payments are handled by our payment provider OnePay. We never see or store your full card number.
• Basic visit statistics: pages viewed, approximate country, device type and loading speed, collected without cookies through Cloudflare Web Analytics.

What stays on your device

The Theme Lab and the project blueprint save your draft in your own browser (local storage) so you do not lose your work. This draft is not sent to us. It only reaches us when you press a button to send it by WhatsApp or email. You can clear it at any time by clearing your browser's site data.

How we use it

• To reply to you, understand your needs and prepare a quote.
• To plan, design, build, launch and support your project.
• To send invoices, receive payments and keep the records required by law.
• To keep our website secure, fast and working well.

We do not sell your personal information, and we do not use it for third-party advertising.

Cookies

Our website does not use advertising or tracking cookies. Our analytics are cookie-free. If the client portal needs a cookie to keep you signed in securely, it is strictly necessary and is used only for that purpose.

Who we share it with

We share information only with trusted services that help us run our business, and only what they need:

• Cloudflare: hosting, security and cookie-free analytics for ivishwa.com.
• OnePay: secure online card payments.
• WhatsApp and email providers: when you choose to contact us through them.
• Font and code libraries (Google Fonts, cdnjs, jsDelivr): your browser loads them directly, so these providers receive your IP address.

We may also disclose information when the law requires it.

How long we keep it

We keep enquiry messages for up to 2 years if no project follows. We keep project and billing records for as long as tax and accounting laws require, and project files for the period agreed in your project. After that we delete or anonymise them.

How we protect it

Our site is served only over HTTPS with strict security headers. Client portal accounts are protected with modern sign-in methods, access controls and encrypted connections. Access to client data is limited to the people working on your project.

Your rights

You can ask us to show you the information we hold about you, correct it, delete it, or stop using it for a particular purpose. You can also withdraw consent at any time. Email hello@ivishwa.com and we will respond within 21 days. If you are not satisfied, you may contact the Data Protection Authority of Sri Lanka.

International transfers

Some of our service providers store data on servers outside Sri Lanka. We choose providers with strong security and privacy protections.

Children

Our services are for businesses and adults. We do not knowingly collect personal information from children under 18.

Changes to this policy

We may update this policy when our services or the law change. The date at the top always shows the latest version.