KnoxSphere Labs

Legal

Privacy Policy

Last updated: 11 August 2026 · Applies to knoxsphere.lk and related KnoxSphere Labs pages.

KnoxSphere Labs (“we”, “us”, or “our”) operates the website https://knoxsphere.lk. This Privacy Policy explains what personal data we collect, how we use it, the cookies and advertising technologies we use (including Google AdSense), and the rights you have under the EU General Data Protection Regulation (GDPR) and similar laws.

1. Who We Are (Data Controller)

The data controller for this website is:

If you have questions about this policy or wish to exercise your privacy rights, please email us at the address above.

2. Scope

This policy covers visitors to knoxsphere.lk, including users in the European Economic Area (EEA), United Kingdom, and Switzerland. Product-specific platforms we build (for example Mutual Match, GlobalVisionTech, KnoxSphere.Finance, or Pisgah.Invoice) may have their own privacy notices where they process personal data as a separate service.

3. Personal Data We Collect

3.1 Information you provide

  • Contact form data — name, email address, subject, inquiry type, and message content when you contact us.
  • Consent preferences — your choices about cookies and advertising (stored locally in your browser and, where applicable, communicated to advertising partners).

3.2 Information collected automatically

  • Technical data — IP address, browser type and version, device type, operating system, referring URL, pages viewed, and timestamps.
  • Cookies and similar technologies — small files or identifiers used for site functionality, analytics, and advertising (see Section 5).
  • Advertising identifiers — when ads are shown, Google and its partners may process identifiers and browsing activity as described in Google’s policies.

We do not intentionally collect special-category (sensitive) personal data through this marketing site.

4. How We Use Personal Data & Legal Bases (GDPR)

Purpose Legal basis
Operate and secure the website Legitimate interests (Art. 6(1)(f)) — reliable hosting and security
Respond to contact inquiries Legitimate interests, or steps prior to a contract (Art. 6(1)(b)/(f))
Store essential site preferences Legitimate interests / necessity for service (strictly necessary cookies)
Analytics, measurement, and non-essential cookies Consent (Art. 6(1)(a)) where required
Personalised advertising (e.g. Google AdSense) Consent (Art. 6(1)(a)) for EEA/UK users where required
Non-personalised advertising where permitted Legitimate interests and/or consent, depending on configuration and local law
Comply with legal obligations Legal obligation (Art. 6(1)(c))

Where we rely on consent, you may withdraw it at any time using the cookie settings on this site (and, where shown, Google’s consent tools) without affecting the lawfulness of processing before withdrawal.

5. Cookies & Similar Technologies

We use cookies and similar technologies in these categories:

  • Strictly necessary — required for basic site operation and to remember your cookie consent choice. These do not require consent under ePrivacy rules.
  • Preferences — optional settings that improve experience.
  • Analytics — help us understand traffic and usage (only with consent where required).
  • Advertising — used by Google AdSense and partners to deliver, measure, and (if you allow) personalise ads.

When you first visit from a region where consent is required, we show a consent message so you can Accept all, Reject non-essential, or review this policy before deciding. You can change your mind later via .

6. Google AdSense & Advertising

This website may use Google AdSense and related Google advertising services to display ads and support our work.

  • Google and its advertising partners may use cookies, device identifiers, and other technologies to serve ads, limit how often you see an ad, and measure effectiveness.
  • For users in the EEA, UK, and Switzerland, Google requires a consent experience for personalised ads and certain data uses. We publish an EU / European regulations consent message on this site and may also use Google’s certified Consent Management Platform (CMP) / Funding Choices tools when AdSense is fully enabled.
  • If you reject non-essential cookies or decline personalised ads, you may still see ads that are less relevant (non-personalised), where permitted.
  • Third parties, including Google, may store or read cookies on your device subject to your choices and their own policies.

Learn more:

7. Sharing of Personal Data

We may share personal data with:

  • Hosting and infrastructure providers that store and deliver this website.
  • Google and advertising partners when ads or measurement tools are active.
  • Professional advisers or authorities where required by law or to protect our rights.

We do not sell your personal data. Where vendors process data on our behalf, we take reasonable steps to ensure appropriate safeguards.

8. International Transfers

Our service providers (including Google) may process data in countries outside the EEA/UK. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms described by those providers.

9. Data Retention

  • Contact form messages — retained only as long as needed to respond and keep a reasonable business record (typically up to 24 months unless a longer period is required).
  • Server / security logs — retained for a limited period for security and operations.
  • Consent records — kept as needed to demonstrate compliance.
  • Cookies — expire according to their individual lifetimes or when you clear them / withdraw consent.

10. Your Rights (GDPR / UK GDPR)

If you are in the EEA, UK, or a similar jurisdiction, you may have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase data (“right to be forgotten”) in certain cases
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with your local supervisory authority

To exercise these rights, contact privacy@knoxsphere.lk. We may need to verify your identity before responding.

11. Children’s Privacy

This website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete it.

12. Security

We use reasonable technical and organisational measures to protect personal data (for example HTTPS, access controls, and hardened hosting). No method of transmission or storage is completely secure; please use the site accordingly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site after updates constitutes notice of the revised policy, except where consent is required for new processing.

14. Contact

For privacy requests or questions:

This page is provided to help visitors understand our practices and to support compliance expectations for services such as Google AdSense. It is not legal advice. You should review and adapt contact details, retention periods, and vendor lists to match your final production setup.