Privacy Policy

1. Scope & Sri Lankan PDPA Compliance

Welcome to Triple O Nine ("we," "our," "us," or "the Studio"). We are a creative digital media studio operating in Vavuniya, Sri Lanka. This Privacy Policy regulates how we collect, store, process, and protect personal data belonging to clients, partners, website visitors, and end-users.

As a Sri Lankan entity, we strictly align our operations with the Sri Lankan Personal Data Protection Act (PDPA) No. 9 of 2022. We act as both a Data Controller and Data Processor for client engagements, committed to ensuring the safety, confidentiality, and integrity of your personal assets.

2. Information We Collect

To execute branding, web design, and digital media projects, we collect data under two categories:

3. How We Use Your Data

We handle and process your personal and business records on valid legal grounds, including:

• Providing and executing custom graphic designs, website development, video edits, and branding plans.
• Handling ongoing customer service inquiries, request forms, and chat responses.
• Processing client payments, issuing itemized statements, and complying with taxation laws.
• Analyzing performance indicators to maintain website security, speeds, and layout responsiveness.

4. Cookies & Web Tracking

We deploy cookies and tracking pixels to enrich user experience, monitor site performance, and protect interactive widgets (e.g. contact forms and chat triggers):

• Essential Cookies: Critical for core functionality such as user authentication and security forms.
• Analytics Cookies: Track anonymous web traffic patterns to help us analyze navigation patterns and refine layouts.

You can block or disable cookie cookies in your browser settings. Please note that disabling cookies may result in certain interactive features or subpage features functioning incorrectly.

5. Third-Party Integrations

To guarantee optimal website speeds and functional workflows, the Studio integrates select third-party software components. These services process your data under their own respective policies:

• Hosting & Deployment: Our web servers and database deployments are hosted on cloud providers adhering to premium security certificates.
• Asset Storage: Dynamic project assets and media records are managed securely via Cloudinary, preserving image fidelity and scale.
• Web Performance: Analytics integrations monitor site traffic, capturing layout responsiveness data without storing raw personal information.

6. Your Rights & Choices under PDPA

Under Section 10-18 of the Sri Lankan Personal Data Protection Act No. 9 of 2022, you hold specific rights as a Data Subject:

• Right of Access: Obtain confirmation on whether we process your data and request copy decks of your records.
• Right to Rectification: Request corrections to inaccurate, incomplete, or out-of-date records.
• Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of your data when it is no longer required for active contract execution.
• Right to Object: Object to processing carried out for direct marketing or promotional notifications.
• Right to Withdraw Consent: Revoke consent for processing at any time, subject to legal or contractual limitations.

To submit an access or erasure request, contact our Privacy Officer at tripleoninecreative@gmail.com. We will respond within the statutory timeframe.

7. Security & Retention

We store and retain client assets only as long as necessary to complete project specifications, satisfy billing requirements, or comply with corporate tax obligations.

We execute robust technical measures including SSL link encryptions, firewalls, and credential restrictions to guard against unauthorized access, loss, or leakage. However, please note that no internet-facing architecture is 100% immune, and we cannot guarantee absolute data security.

8. Creative Services Terms & Deliverables

To protect creative works developed for our clients, the following conditions govern deliverables and intellectual property (IP):

• Asset Ownership: All custom brand designs, logo assets, animated files, and source code remain the intellectual property of the Studio until final contract payment is settled in full.
• License Grants: Upon project sign-off and final payment settlement, the Studio transfers commercial usage rights and ownership of the final designs to the client.
• Client Material: Clients represent that all assets, logos, and reference materials supplied to the Studio are owned by the client or legally licensed. The Studio assumes no liability for copyright claims arising from client-provided materials.

9. Children's Privacy

Our services, website layout, and branding platforms are strictly designed for businesses and professionals. We do not knowingly solicit or collect personal information from individuals under the age of 13. If you believe a minor has shared personal details with us, contact us immediately to initiate removal.

10. Policy Updates & Version Control

We reserve the right to modify this Privacy Policy at any time. When updates are published, we will modify the "Effective Date" and increment the version reference at the top of the page. Continued use of our platforms or services after changes are posted constitutes acceptance of the updated terms.