Privacy Policy

Innaun Private Limited ("Innaun", "we", "us", or "our") operates the website at innaun.com. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that data. By using our website or contacting us, you agree to the practices described below.

1. Who we are

Innaun IT is operated by Innaun Private Limited (Sri Lanka) and Innaun Limited (United Kingdom). Innaun Private Limited is a company registered in Sri Lanka, headquartered at 94/1, Galle Road, Colombo-06, Sri Lanka. We provide web development, design, digital marketing, and IT infrastructure services to clients in Sri Lanka and the United Kingdom.

For data-related enquiries, contact us at: info@innaun.com

2. Information we collect

Information you provide directly

When you fill in a form on our website, we collect the information you submit, which may include:

• Name and contact details (email address, phone number)
• Company or business name
• Project details, budget, and timeline preferences
• CV or resume documents (career applications only)
• Messages and correspondence

Information collected automatically

We use Plausible Analytics — a privacy-first analytics tool that does not use cookies and does not collect any personally identifiable information. Plausible measures aggregate page views, referral sources, and device types only. No individual user tracking occurs.

Our website is served via Cloudflare Pages, which may log basic server-side request data (IP addresses, request timestamps) for security and performance purposes. This data is processed by Cloudflare under their own privacy policy.

Cookies

We use a minimal cookie consent banner. Our analytics (Plausible) are cookie-free. If you load the interactive Google Map on our Contact page, Google may set its own cookies — this only happens if you choose to load the map by clicking the "Load interactive map" button.

3. How we use your information

We use the information you provide to:

• Respond to your enquiry or quote request
• Process and evaluate job applications
• Communicate with you about your project or service
• Send occasional updates if you have opted in (you may unsubscribe at any time)
• Improve our website and services based on aggregated, anonymised analytics

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your data for automated decision-making or profiling.

4. Legal basis for processing (UK & EU)

For individuals in the United Kingdom and European Union, we process personal data under the following lawful bases:

• Contractual necessity — to provide services you have engaged us for
• Legitimate interests — to respond to your enquiries and improve our services
• Consent — where you have explicitly opted in (e.g., marketing communications)
• Legal obligation — where required by applicable law

5. How we store and protect your data

Form submissions are processed via Formspree, a secure form backend service. Formspree transmits your data over encrypted HTTPS connections and stores it in accordance with their security practices and privacy policy.

We store contact and project information in our internal systems, which are password-protected and accessible only to authorised team members. We retain enquiry data for up to 3 years to maintain records of client interactions, unless you request earlier deletion.

Job application data (including CVs) is retained for 6 months after the position is filled, after which it is securely deleted unless you consent to being kept on file for future opportunities.

6. International data transfers

As a company with operations in Sri Lanka and the United Kingdom, your data may be accessed by team members across these locations. All access is subject to the security measures described above. Third-party services (Formspree, Cloudflare, Plausible) may process data in their respective jurisdictions — each operates under its own privacy framework appropriate to UK GDPR, GDPR, and relevant international standards.

7. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at info@innaun.com. We will respond within 30 days. If you are in the UK and believe we have mishandled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Third-party links

Our website may contain links to third-party websites (client sites, social media, external resources). We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any site you visit.

9. Children's privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top of this page. Significant changes will be communicated via our website. Continued use of our website after any changes constitutes acceptance of the updated policy.

11. Contact us

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your data, please contact us:

Innaun Private Limited
94/1, Galle Road, Colombo-06
Sri Lanka
Email: info@innaun.com
Tel: +94 11 227 8788