.png&w=3840&q=75)
1
Who we are and what this policy covers
This policy explains how Cosmoforge (“we”, “us”) handles personal data of visitors to veloxdms.com. Cosmoforge is registered in Sri Lanka with the Department of the Registrar of Companies, company number PV 17380, No 53 National Housing Scheme, Hirimbura, Galle, Sri Lanka. We are the controller of the data described here.
It does not cover data that our customers store in the Velox platform. For that data, the customer is the controller and we act as its processor under the customer agreement.
2
What we collect
Information you give us
Your name, work email, phone number, company, country and message when you request a demo or contact us.
Information collected automatically
Pages viewed, referring page, approximate location, device and browser type, IP address and cookie identifiers.
Correspondence
Emails and notes from conversations with you.
We do not ask for sensitive data and do not knowingly collect it.
3
Why we use it and our legal basis
Under Sri Lanka's Personal Data Protection Act, we rely on the equivalent grounds of consent, contract, legal obligation and legitimate interests.
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Reply to enquiries and arrange demos | Form details and correspondence | Legitimate interests; steps at your request before a contract |
| Understand and improve the website | Analytics data and cookies | Consent where required (EU and UK); legitimate interests elsewhere |
| Keep the site secure and prevent abuse | IP address and server logs | Legitimate interests |
| Send follow-up information about Velox | Contact details | Consent, or legitimate interests for business contacts, with an easy opt-out |
| Meet legal obligations and handle claims | Any of the above | Legal obligation; legitimate interests |
4
Who we share it with
We do not sell personal data. We share it only with service providers that help us run the website and handle enquiries, under written terms requiring them to protect it.
| Provider | Purpose | Location |
|---|---|---|
| OVH | Website hosting | Singapore |
| Google Analytics | Website analytics | Global, including the US |
| Google Workspace | Receiving and managing enquiries | Global, including the US |
We may also disclose data to professional advisers, where the law, a court or a regulator requires it, or to a successor if the business is sold.
5
International transfers
We are based in Sri Lanka and our providers operate in several regions, so your data may be processed outside your country. Where required by law, we rely on safeguards such as European Commission standard contractual clauses, adequacy decisions or a provider's certified transfer framework.
6
How long we keep it
- Enquiries and correspondence: up to 12 months after our last contact, unless you become a customer.
- Analytics data: 12 months, the retention period set in Google Analytics.
- Server logs: up to 12 months.
We delete or anonymise data when it is no longer needed, or earlier if you ask and no legal reason requires us to keep it.
7
Security
We use access controls, encryption in transit and limited staff access to protect the data. No system is completely secure; if a breach affects your data, we will notify you and regulators where the law requires.
8
Your rights
Depending on where you live, you may have the right to:
- Know what personal data we hold about you and receive a copy.
- Correct inaccurate data and, in many places, have it erased.
- Restrict or object to our use of your data, including for direct marketing.
- Withdraw consent at any time, without affecting earlier use.
- Receive your data in a portable format in the EU and UK.
- Complain to your local data-protection authority.
To use these rights, email info@cosmoforge.com. We will reply within one month, or sooner where the law sets a shorter time. California residents have similar rights under the CCPA/CPRA; we do not sell or share personal data for advertising.
9
Cookies and analytics
We use Google Analytics to count visits and see which pages are useful. It sets cookies and receives your IP address and device information. In the EU and UK, we load it only after you accept analytics cookies in our banner, and you can change your choice at any time.
You can also block cookies in your browser or use Google's Analytics opt-out add-on. We do not use advertising cookies. If that changes, we will update this policy and the banner.
10
Children
The site is for business users and is not directed at children under 16. We do not knowingly collect their data. Tell us if you believe a child has sent us information and we will delete it.
11
Changes to this policy
We will post updates on this page with a new effective date, and tell you directly if a change is significant.
12
Contact
Questions about your privacy?
Contact our privacy lead or reach the Velox team for product enquiries.
Cosmoforge
No 53 National Housing Scheme
Hirimbura, Galle, Sri Lanka