Privacy Policy

Last Updated: February 8, 2026

Cybernetics IT Consulting (PVT) Ltd. (“we,” “us,” or “our”) operates the website cbnit.lk (the “Site”). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Site and the choices you have associated with that data under the Sri Lanka Personal Data Protection Act, No. 9 of 2022 (PDPA).

By accessing or using this website, you agree to be bound by these Terms. If you disagree with any part of these terms, you must not use our website.

1. Information We Collect

We collect several different types of information for various purposes to provide and improve our service to you.

Identity Data: Name, job title, and company name.
Contact Data: Email address (specifically through our contact forms or when you email us at privacy@cbnit.lk) and phone numbers.
Technical Data: IP address, browser type, time zone setting, and location data collected via cookies.
Usage Data: Information about how you use our website and services.

2. Legal Basis for Processing

Under the Sri Lanka PDPA, we process your personal data only when:

We have your explicit consent.
It is necessary for the performance of a contract with you.
It is necessary for compliance with a legal obligation in Sri Lanka.
It is for our legitimate interests (e.g., improving our IT consulting services), provided these do not override your fundamental rights.

You may view and print pages for personal use.
You must not republish, sell, or duplicate any material from this website without express written consent.

3. Purpose of Data Collection

We use your data to:

Provide and maintain our consulting services.
Notify you about changes to our services.
Provide customer support and respond to inquiries.
Monitor the usage of our Site to detect and prevent technical issues.

4. Data Retention and Security

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We implement appropriate technical and organizational measures (such as encryption and access controls) to protect your data against unauthorized access, loss, or destruction.

5. Your Rights Under Sri Lanka PDPA

As a data subject in Sri Lanka, you have the following rights:

Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request that we correct any inaccurate or incomplete information.
Right to Erasure: You can request the deletion of your data under certain conditions.
Right to Object: You can object to the processing of your data for direct marketing.
Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time.

6. Disclosure to Third Parties

We do not sell your personal data. We may share your information with trusted third-party service providers (e.g., cloud hosting) who assist us in operating our website, provided they agree to keep this information confidential and comply with the PDPA.

7. Cross-Border Transfers

If we transfer your data outside of Sri Lanka, we ensure that the recipient country provides an adequate level of protection as required by the Data Protection Authority of Sri Lanka or that appropriate safeguards are in place.

8. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer at:

Cybernetics IT Consulting (PVT) Ltd. Email: privacy@cbnit.lk Website: cbnit.lk