Privacy Policy

1. Who we are

This website is run by the business below. We decide how your personal data is used on it (under Sri Lanka's Personal Data Protection Act, we are the “controller”).

• Business: Orbeon Technology
• Address: 200/13,Peradeniya Road, Kandy, Srilanka
• Email: orbeont@gmail.com
• Phone: 0743937476

2. What we collect

When you send an idea or a message (the box at the top of the home page, or “Contact us”): your name, email and/or phone number, your company or school if you add it, your message, the type of system and budget range you pick, and the short suggestion tags shown with your idea.

When you apply for a job: your name, email, phone if you add it, LinkedIn and portfolio links if you add them, your note, your CV (a PDF) and the role you chose.

Where your visit came from, only if you allow it in the cookie banner: the campaign labels in the link you clicked (for example “facebook / paid / launch”), the website that sent you, and the first page you opened. We save this with your form so we know which posts and ads work. We don't build a profile of you.

Automatically, to run and protect the site: our hosting provider (Cloudflare) processes your IP address and basic browser details to deliver pages and block attacks, and the security check on our forms (Cloudflare Turnstile) looks at browser signals to tell people from bots. We don't use these to identify you.

We don't ask for, and please don't send us, sensitive data such as health information, ID numbers or bank details.

3. Why we use it

• To reply to you about your project or question, and to prepare a quote if you ask for one. We rely on your request (steps before a possible contract) and your consent.
• To consider your job application and contact you about it. We rely on your consent and the steps before a possible employment contract.
• To understand which posts and ads bring people to us, only if you accept it in the cookie banner. We rely on your consent, and you can withdraw it any time.
• To keep the site secure and working. We rely on our legitimate interest in protecting the site and the people who use it.

We don't send you marketing emails or newsletters. If we ever start, we will ask first and every email will have an unsubscribe link.

4. Who can see it

Only the Orbeon team members who need it. Enquiries are visible only to people our admin has given access to customer enquiries; job applications and CVs only to people given access to hiring. Our systems enforce this, it isn't just a setting on a screen. We never sell or rent your data. We would only share it if the law requires us to.

5. Services we use

These companies process data for us so the site can work. Their servers may be outside Sri Lanka; we use providers that protect data with industry-standard security.

• Cloudflare: hosting, domain and the Turnstile security check.
• Supabase: the database and private file storage where enquiries, applications and CVs are kept.
• Google Fonts: delivers the typeface the site uses. Your browser fetches the font from Google, which receives your IP address.
• YouTube (privacy-enhanced mode): only if you press play on a video. Until then nothing is loaded from YouTube.
• Your browser's speech service: only if you press the microphone to speak your idea. Your browser turns speech into text, and some browsers (for example Chrome) send the audio to their maker (Google) to do it. Typing instead sends nothing.

6. How long we keep it

• Enquiries: up to 2 years after our last conversation, unless you become a client (then for as long as we work together and as the law requires for business records).
• Job applications and CVs: up to 12 months after you apply, so we can consider you for the role and similar ones. Ask us any time and we'll delete it sooner.
• Visit source: kept with the form it was sent with; in your browser it's cleared when you close the tab.

7. How we keep it safe

Everything travels over an encrypted connection (HTTPS). CVs are stored privately and can only be opened by authorised team members through short-lived links. Access to every record is checked by the database itself. Our forms are protected against spam and automated abuse. No system is perfectly secure, but we work to keep your data safe and will tell you and the authorities if a breach affects you, as the law requires.

8. Your rights

You can ask us to: tell you what data we hold about you and give you a copy; correct it; delete it; stop or limit using it; and withdraw any consent you gave. You can also complain to Sri Lanka's Data Protection Authority.

Make a privacy or deletion request, or email orbeont@gmail.com. We reply within 21 working days and won't charge you for it.

9. Children

This website is for adults, businesses and organisations. Please don't send us personal data if you are under 18. If you are a student under 18 interested in an internship, ask a parent or guardian to contact us first. If we learn we hold data from a child without that permission, we delete it.

We build systems for schools (for example student results portals). Those systems have their own privacy terms with each school; this policy covers only this website.

10. Changes and contact

If we change this policy we'll update the date at the top. For anything about your data, contact us using the details in section 1.