Legal

Privacy Policy

Last updated: 29 May 2026

This Privacy Policy explains how Evokes Digital Worldwide (Pvt) Ltd ("Evokes", "we", "us" or "our") collects, uses, and protects personal data when you visit evokestech.com (the "Site") or contact us through it.

We are the data controller responsible for your personal data. We are a company incorporated in Sri Lanka, based in Colombo. If you have any questions about this policy or how we handle your data, you can reach us at info@evokestech.com.

We process personal data in accordance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka and its amendments (the "PDPA").

What we collect

We keep data collection to a minimum. When you complete the contact form on the Site, we collect:

  • ·your name;
  • ·your email address;
  • ·your telephone number, if you choose to provide it; and
  • ·the contents of your message.

We do not require you to create an account, and we do not knowingly collect more than you choose to send us.

Like most websites, our hosting infrastructure may automatically record limited technical information, such as your IP address and basic request data, in standard server logs. This is used to operate the Site securely and is not used to identify you personally.

How we use your data, and our lawful basis

We use the personal data you submit only to:

  • ·respond to your enquiry and correspond with you about it;
  • ·provide the services or information you have requested; and
  • ·comply with our legal obligations.

Under the PDPA, our lawful basis for this processing is your consent when you submit the form, our legitimate interest in responding to enquiries about our services, and, where relevant, taking steps at your request before entering into a contract. You may withdraw consent at any time by contacting us, though this will not affect processing already carried out.

How we share your data

We do not sell your personal data, and we do not share it for advertising.

We use trusted third-party service providers to operate the Site and our correspondence, and your data may be processed by them on our behalf. These include our website hosting provider (Vercel) and our email provider (Google Workspace). These providers act under our instructions and are permitted to use the data only to provide their service to us.

We may also disclose personal data where we are required to do so by law, regulation, or a valid order of a competent authority or court.

International transfers

Our hosting and email providers operate servers outside Sri Lanka, including in the United States and other countries. This means your personal data may be transferred to, and processed in, jurisdictions other than Sri Lanka. Where we make such transfers, we take reasonable steps to ensure your data continues to be protected to a standard consistent with the PDPA, including relying on the contractual and security commitments of our service providers.

How long we keep it

We retain enquiry data only for as long as necessary to respond to and follow up on your enquiry, to maintain a record of our correspondence, or to meet any legal requirement. When it is no longer needed, we delete or anonymise it.

How we protect your data

We apply reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we work to safeguard your information appropriately.

Your rights

Subject to the PDPA, you have the right to:

  • ·request access to the personal data we hold about you;
  • ·request correction of inaccurate or incomplete data;
  • ·request that we delete your data, where there is no legal reason for us to keep it;
  • ·object to or request that we restrict certain processing; and
  • ·withdraw consent where our processing relies on it.

To exercise any of these rights, contact us at info@evokestech.com. We will respond within the period required by law.

If you believe we have not handled your data properly, you may lodge a complaint with the Data Protection Authority of Sri Lanka, which oversees compliance with the PDPA.

Children

The Site is intended for businesses and professional audiences. It is not directed at children, and we do not knowingly collect personal data from children.

Links to other sites

The Site may contain links to external websites we do not control. We are not responsible for the privacy practices of those sites, and we encourage you to read their policies.

Changes to this policy

We may update this policy from time to time. The current version will always be posted on this page with the date it took effect.

Contact

Evokes Digital Worldwide (Pvt) Ltd

Colombo, Sri Lanka

Email: info@evokestech.com

Telephone: +94 777 644404

Terms of Service