Legal & Compliance

Privacy & Data Protection Policy

Last Updated: September 2026 • Sri Lanka PDPA No. 9 of 2022 Aligned

Commitment to Transparency: Infinite Creative Web Design ("Infinite", "we", "us", or "our") operates the website https://infiniteweb.dev. We treat your personal data with absolute integrity and confidentiality in strict compliance with the Sri Lanka Personal Data Protection Act No. 9 of 2022 (PDPA) and international best practices (GDPR).

1. Data Controller Information

The designated Data Controller for all operations on this website is:

Organization: Infinite Creative Web Design
Physical Office Address: Tangalle, Southern Province, Sri Lanka
Official Email: infinitedesign768@gmail.com
Telephone / WhatsApp: +94 78 971 4912

2. Information We Collect

We only collect the minimal personal data necessary to provide our web design and development services:

Inquiry & Contact Details: When you submit a project inquiry or contact us via our contact form or WhatsApp, we collect your name, email address, phone/WhatsApp number, project requirements, and budget preferences.
Analytics & Technical Data: When you accept analytics cookies, we collect non-identifiable technical metrics via Google Analytics 4 (GA4), including browser type, screen resolution, operating system, country, and pages visited. IP addresses are anonymized.
Administrator Credentials: For authorized administrative staff, we process email addresses and authentication tokens via Google Firebase Authentication solely for dashboard access.

3. Legal Bases for Processing (PDPA Sri Lanka)

We process your personal information under the following lawful grounds:

Consent: When you voluntarily submit an inquiry form or accept analytics cookies.
Performance of a Contract: To prepare quotes, execute website development contracts, and deliver digital services requested by your business.
Legal Obligations: Compliance with Sri Lankan financial and commercial regulations.

4. How We Use Your Data

Your data is used strictly for:

Responding to client service requests, quotes, and web project consultations.
Delivering website design, PayHere e-commerce integrations, and domain setups.
Ensuring system security, monitoring uptime, and preventing automated spam or abusive traffic.
Improving website performance and usability based on aggregated, privacy-preserving metrics.

We never sell, lease, or monetize your personal information to third-party advertisers.

5. Cookie Policy & Tracking Technologies

We use essential cookies strictly required for website operation and security. Non-essential cookies (such as GA4) are blocked automatically until you explicitly grant consent through our Cookie Consent Banner. You can modify or withdraw your consent at any time by visiting our Cookie Policy page.

6. Data Security & Hosting

We implement multi-layered administrative and technical defenses including 256-bit TLS/SSL encryption, strict Content Security Policies (CSP), HTTP Strict Transport Security (HSTS), rate-limiting, and Google Cloud Firebase secure cloud infrastructure.

7. Your Data Subject Rights

Under the Sri Lanka PDPA No. 9 of 2022, you have the right to:

Access: Request confirmation of whether we hold your personal data and obtain a copy.
Correction: Request rectification of inaccurate or outdated information.
Erasure: Request the deletion of your inquiry data when it is no longer needed for business purposes.
Withdraw Consent: Revoke consent for non-essential communications or cookies at any time.

To exercise any of these rights, contact our Data Protection Officer at infinitedesign768@gmail.com. Requests are responded to within 14 business days.

8. Changes to this Policy

We may update this Privacy Policy periodically to reflect legal or technological developments. Changes will be posted on this page with an updated revision date.