Codsona
Legal & Compliance

PRIVACY POLICY.

Effective: September 18, 2026·Entity: Codsona Digital· Active & Compliant
01

Overview & Commitment

At Codsona Digital ("Codsona", "we", "our", or "us"), we are committed to respecting and protecting the privacy, confidentiality, and proprietary assets of our clients, partners, and website visitors.

This Privacy Policy outlines how we collect, handle, store, and safeguard personal information and enterprise technical data across our official domains (codsona.com, tharindunuwantha.me), our client intake forms, and all associated software engineering engagements.

Core Principle
We do not sell, rent, monetize, or broker your personal information or business project specifications to any third-party advertisers or data brokers under any circumstances.
02

Information We Collect

We only collect information that is strictly necessary to evaluate, scope, communicate, and deliver our digital engineering services:

  • Client Contact Details: Name, business email address, phone/WhatsApp number, company name, and geographic location provided via our project intake forms or direct inquiries.
  • Project Specifications & Scopes: Project goals, architectural preferences, estimated budget ranges, timeline constraints, and preliminary technical documentation shared during discovery.
  • Technical Telemetry & Analytics: Anonymized browser type, operating system, page performance metrics, and general country-level location data collected solely to optimize site performance and responsiveness.
03

How We Use Your Data

We process collected data exclusively for valid business and contractual purposes:

Service Delivery & Scoping

Evaluating project requirements, preparing technical proposals, architectural diagrams, and Statements of Work (SOW).

Client Communications

Responding to technical inquiries, scheduling sprint reviews, and providing support throughout delivery cycles.

Contractual Compliance

Executing non-disclosure agreements (NDAs), master service agreements (MSAs), and invoicing.

System Security & Reliability

Protecting our infrastructure, databases, and client portals against unauthorized access, spam, or vulnerabilities.

04

Client IP & Strict Confidentiality (NDA)

As a software and digital engineering studio, we understand that client proprietary algorithms, codebase repositories, business workflows, and trade secrets demand the highest degree of protection.

  • All proprietary project code, intellectual property, schemas, and assets developed for clients remain the exclusive property of the client upon agreed settlement.
  • We readily execute bilateral Non-Disclosure Agreements (NDAs) prior to receiving confidential technical documentation or database credentials.
  • Production secrets, API tokens, and deployment credentials provided by clients are kept in isolated, encrypted vaults with strict least-privilege access.
05

Data Protection & Infrastructure Security

We implement enterprise-grade technical and organizational measures to safeguard data against accidental loss, unauthorized access, alteration, or disclosure:

TLS 1.3 / HTTPS encryption in transit across all endpoints and web services.
AES-256 encryption at rest for database records and project assets.
Multi-factor authentication (MFA) required on all production infrastructure, cloud consoles, and version control systems.
Zero third-party marketing trackers or intrusive tracking pixels on our core web properties.
06

Your Rights & Inquiries

Regardless of your geographic location, you retain full control over the personal data you share with Codsona:

  • →Right to Access: Request a copy of all personal records or project correspondence held in our systems.
  • →Right to Rectification: Update or correct any contact information or business records.
  • →Right to Erasure: Request permanent removal of your contact details and preliminary inquiry records where no active legal or accounting retention obligation exists.
Privacy Office & DPO Contact

Have questions regarding your data or NDA compliance?

Our engineering and security team is available to review custom NDA requirements, compliance assessments, or data erasure requests.