01 Overview & Scope
The Conquest ("Conquest", "we", "us", or "our") operates as an independent digital creative and engineering studio headquartered in Colombo, Western Province, Sri Lanka. This Privacy Policy governs all personal data, project specifications, and telemetry gathered through our web platforms, commercial inquiries, client collaboration portals, and direct correspondence channels.
We recognize that ambitious enterprises entrust us with sensitive brand roadmaps, unreleased product architectures, and proprietary visual assets. Our privacy infrastructure is engineered to uphold rigorous data protection standards in accordance with Sri Lanka’s Personal Data Protection Act (PDPA) No. 9 of 2022, the European General Data Protection Regulation (GDPR), and prevailing international privacy frameworks.
02 Information We Collect
We collect only the minimum necessary information required to evaluate, formulate, and execute creative digital services:
- Commercial Inquiry Data: Full name, corporate email address, contact telephone or WhatsApp number, company name, project brief parameters, estimated budget ranges, and delivery timelines submitted through our contact interfaces.
- Creative & Technical Assets: Brand guidelines, source media, 3D assets, vector logos, API credentials, staging environment access, and codebase repositories provided voluntarily by clients for project execution.
- Telemetry & Device Telematics: Anonymized HTTP request headers, browser user-agent strings, screen resolution metrics, and referrer pathways collected automatically to optimize visual layout rendering and prevent automated abuse.
03 Purpose & Lawful Basis
Conquest processes personal and commercial data strictly under legitimate legal bases:
- Contractual Performance: Formulating milestone proposals, drafting Scope of Work (SOW) documents, executing engineering deliverables, and fulfilling contractual obligations.
- Legitimate Interests: Securing our digital web horizons against brute-force attacks, auditing production deployment health, and maintaining agency correspondence records.
- Explicit Consent: Where you have explicitly opted into project correspondence, communication channels, or direct scheduling requests.
04 Mutual NDAs & Confidentiality
Strict Non-Disclosure Standard: Conquest executes bilateral Non-Disclosure Agreements (NDAs) prior to receiving proprietary source code, confidential brand strategy roadmaps, or unreleased product prototypes.
Any proprietary assets shared during pitch sessions or active sprints remain the exclusive intellectual property of the commissioning client. Conquest personnel, technical contractors, and visual artists are bound by stringent confidentiality agreements. We never monetize, rent, or distribute client trade secrets.
05 Third-Party Processors
To deliver modern web performance and real-time correspondence, we partner with verified infrastructure vendors who maintain SOC-2 and ISO-27001 certifications:
- Inquiry Relays: Formspree / Cloudflare Email Routing for encrypted form dispatch and rate-limited spam filtration.
- Real-Time Messaging: Meta Platforms / WhatsApp Business API for instant client correspondence where initiated by the user.
- Cloud Delivery: Content delivery networks (CDNs) and edge caches for ultra-fast static file distribution and asset delivery.
06 International Data Transfers
Because Conquest collaborates with international enterprises across the United Kingdom, North America, Europe, Australia, and the Middle East, data submitted through our digital infrastructure may traverse secure international communication backbones. In all cross-border transmissions, we ensure Standard Contractual Clauses (SCCs) and encrypted transfer protocols (TLS 1.3) are maintained.
07 Data Security & Retention
We implement defense-in-depth security architectures including cryptographic transit encryption, strict least-privilege access controls, and air-gapped cold backups for master production repositories.
Project inquiry data is retained for the duration of the commercial relationship plus a standard statutory period of 24 months to satisfy fiscal accounting and legal audit obligations, after which it is permanently purged.
08 Your Legal Rights
Under applicable data privacy laws, you maintain the following fundamental entitlements regarding your personal data:
- Right of Access: Request a comprehensive export of personal records maintained by Conquest.
- Right of Rectification: Request correction of inaccurate, outdated, or incomplete contact details.
- Right of Erasure ("Right to be Forgotten"): Request immediate destruction of your contact data, subject to active contractual or statutory retention mandates.
- Right to Restrict or Object: Restrict processing or object to any non-essential commercial communication.
09 Cookie Preferences
Conquest avoids invasive marketing trackers and third-party tracking pixels. We employ only essential functional cookies required for session integrity, theme preferences (light/dark/sunset state), and load balancer routing. You can manage or disable cookies via your browser settings at any time without compromising core site functionality.
10 Contact & Data Governance
To exercise any statutory data rights, request an NDA prior to disclosing confidential project briefs, or address privacy concerns, please contact our Data Governance Officer:
The Conquest — Legal & Data Compliance
Colombo, Western Province, Sri Lanka
Direct Email: hi@conquest.bz
Direct WhatsApp: WhatsApp: +94 77 22 72 154
