Privacy Policy
Last updated: 21 May 2026. This policy explains how BYS IT Consultancy collects, uses, and protects your personal information.
1. Who We Are
BYS IT Consultancy ("we", "us", "our") is a technology services company based in Sri Lanka. We provide web development, mobile and desktop app development, UI/UX design, SEO, GEO, system architecture, and maintenance services. Our website is located at bysitconsultancy.com.
This Privacy Policy applies to all information collected through our website and any related services, communications, or projects.
2. Information We Collect
Information You Provide Directly
When you fill out our contact form or reach out to us via WhatsApp, we may collect:
- Your name
- Your email address
- Your phone number (if provided)
- Your company or organisation name
- Project details and messages you send us
Information Collected Automatically
When you visit our website, certain technical data may be collected automatically, including:
- Your IP address and approximate location (country/region)
- Browser type and version
- Pages visited and time spent on each page
- Referring website or source
- Device type (desktop, mobile, tablet)
3. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your enquiries and project requests
- To provide and deliver our services
- To send project updates, quotes, or relevant communications
- To improve our website and understand how visitors use it
- To comply with legal obligations
We will never use your personal information to send unsolicited marketing emails or sell it to third parties.
4. Data Sharing
We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:
- Service providers: Trusted third-party tools we use to operate our business (e.g. email, analytics, hosting) under strict confidentiality obligations.
- Legal requirements: If required by law, court order, or regulatory authority in Sri Lanka.
- Business transfers: In the unlikely event of a merger or acquisition, your information may be transferred to the successor entity.
6. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Enquiry data is typically retained for up to 2 years after our last communication. You may request deletion at any time (see Section 7).
7. Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal data
- Withdraw consent for any data processing based on consent
- Object to certain uses of your data
To exercise any of these rights, please contact us using the details in Section 11. We will respond within 30 days.
8. Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Third-Party Links
Our website may contain links to external websites (e.g. client websites, WhatsApp). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: