Pramix Holdings (Pvt) Ltd (“Pramix,” “we,” “us,” or “our”) is a Sri Lanka‑based software development company that builds technology solutions for Recruitment & HR Tech, Education Management, Inventory & Supply Chain Management, Construction & Manufacturing ERP, Travel & Aviation Tech, Finance & Billing Systems, Website Development, and Communication & Enterprise Systems. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit pramixit.com (the “Site”), engage us for services, or use software products we develop and operate on behalf of our clients.

Contents

1. 1. Information We Collect
2. 2. How We Use Information
3. 3. Legal Basis for Processing
4. 4. How We Share Information
5. 5. Cookies & Tracking Technologies
6. 6. Data Retention
7. 7. Data Security
8. 8. International Data Transfers
9. 9. Your Rights
10. 10. Client & End-User Data (Our Software Products)
11. 11. Children’s Privacy
12. 12. Third-Party Links
13. 13. Changes to This Policy
14. 14. Contact Us

1. Information We Collect

We collect information in the following ways:

1.1 Information you provide directly

• Contact details submitted through our Site’s inquiry, quote, or careers forms (e.g. name, email address, phone number, company name).
• Information shared during project consultations, proposals, contracts, or support communications.
• Resumes, portfolios, or other information submitted when applying for a position with us.
• Billing and invoicing details provided by clients for contracted services.

1.2 Information collected automatically

• Log data such as IP address, browser type, device information, pages visited, and time spent on the Site.
• Cookies and similar technologies (see Section 5).
• Approximate location derived from IP address, for analytics purposes.

1.3 Information from third parties

• Information from business partners, subcontractors, or referral sources in connection with a project engagement.
• Publicly available business information (e.g. company registries, LinkedIn) used for B2B outreach.

2. How We Use Information

We use the information we collect to:

• Respond to inquiries and provide quotes for software development services.
• Negotiate, execute, and administer client contracts and statements of work.
• Design, build, test, deploy, and support the software solutions we are engaged to deliver.
• Process payments and maintain financial and billing records.
• Operate, maintain, and improve the Site and our internal systems.
• Communicate updates, invoices, service notices, or (with consent, where required) marketing content.
• Evaluate job applications and manage recruitment.
• Comply with applicable legal, tax, and regulatory obligations in Sri Lanka and other relevant jurisdictions.
• Detect, investigate, and prevent fraud, security incidents, or misuse of our systems.

3. Legal Basis for Processing

Where applicable data protection law requires a legal basis, we rely on one or more of the following:

• Contractual necessity — to perform a contract with you or your organization, or to take steps before entering into one.
• Legitimate interests — such as operating our business, securing our systems, and improving our services, balanced against your rights.
• Consent — for optional communications such as marketing emails, which you may withdraw at any time.
• Legal obligation — to comply with applicable tax, corporate, or regulatory requirements.

4. How We Share Information

We do not sell personal information. We may share information with:

Recipient	Purpose
Employees and contractors	To deliver contracted development, support, and consulting work on a need-to-know basis.
Hosting, cloud, and infrastructure providers	To store data and operate the Site and client systems.
Payment processors and financial institutions	To process invoices and payments.
Professional advisors	Legal, accounting, and auditing support.
Regulatory or government authorities	Where required by Sri Lankan law or a valid legal process.
A successor entity	In connection with a merger, acquisition, or sale of business assets, subject to continued protection of the data.

Any third party that processes data on our behalf is bound by contractual obligations of confidentiality and data protection.

5. Cookies & Tracking Technologies

Our Site may use cookies and similar technologies to:

• Remember your preferences and improve site functionality.
• Analyze traffic and usage patterns (e.g. via analytics tools).
• Support security features.

You can control or disable cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of the Site.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including:

• The duration of a client contract, plus a reasonable period afterward for warranty, support, and legal purposes.
• Periods required by Sri Lankan tax, accounting, and corporate record-keeping laws.
• Job applicant data, retained only as long as reasonably needed for recruitment purposes, unless you consent to longer retention.

When information is no longer required, we securely delete, anonymize, or archive it in line with our internal data retention practices.

7. Data Security

We implement administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including access controls, encrypted connections, and secure development practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

As a Sri Lankan company serving clients in multiple regions, information may be transferred to, stored, and processed in countries other than your own, including countries where our cloud infrastructure or client systems are hosted. Where required, we take reasonable steps to ensure such transfers are subject to appropriate safeguards.

9. Your Rights

Depending on your location and applicable law, you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your information, subject to legal or contractual retention requirements.
• Object to or restrict certain processing activities.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with a relevant data protection authority, where applicable.

To exercise any of these rights, please contact us using the details in Section 14.

10. Client & End-User Data (Our Software Products)

Many of the systems we build — including HR and recruitment platforms, education management systems, inventory and ERP tools, travel and aviation platforms, and billing systems — process data belonging to our clients and their end users (e.g. employees, students, customers, or passengers).

• In these engagements, our client is typically the data controller and Pramix acts as a data processor or service provider, handling data solely under the client’s instructions and the terms of the applicable agreement.
• Questions about how a specific client’s platform handles personal data should be directed to that client/organization, who can involve us as needed.
• We apply appropriate technical and organizational safeguards to any data we process on behalf of clients, consistent with our contractual obligations.

11. Children’s Privacy

Our Site and corporate services are not directed to children under 16, and we do not knowingly collect personal information from children through the Site. Where our software (e.g. education management systems) is used by minors, applicable safeguards and consent mechanisms are governed by our agreement with the relevant client institution.

12. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their respective privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this Policy periodically.

14. Contact Us

Pramix Holdings (Pvt) Ltd

Website: www.pramixit.com

For privacy-related questions, requests, or concerns, please reach out via the contact form on our website or the details provided there.