Privacy Policy

At Ciftron (Private) Limited (“Ciftron,” “we,” “us,” or “our”), protecting your personal information is important to us.

This Privacy Policy explains how Ciftron collects, uses, stores, shares, and protects information when you visit www.ciftron.com (the “Site”), contact us, submit information through our website, or otherwise interact with our services.

Ciftron provides performance marketing, digital marketing, web and software development, AI solutions and automation, CRM and funnel development, and related IT and consulting services.

By using our Site or voluntarily providing information to us, you acknowledge the practices described in this Privacy Policy.

01Collection of Personal Information

Depending on how you interact with Ciftron, we may collect information such as:

• First and last name;
• Business or company name;
• Job title or role;
• Email address;
• Telephone number;
• Country, region, or general location information;
• Mailing or business address;
• Information submitted through website forms;
• Information provided when booking a consultation or meeting;
• Information provided through email, chat, social media, or other communications;
• Business information related to an inquiry or requested service;
• Billing or transaction-related information where applicable; and
• Other information you voluntarily provide to us.

You are generally not required to provide personal information simply to browse our Site.

However, certain information may be required when you choose to contact us, request services, book a meeting, submit a form, communicate with our team, or enter into a business relationship with Ciftron.

02Information Collected Automatically

When you visit our Site, certain technical and usage information may be collected automatically through cookies, pixels, analytics technologies, server logs, and similar tools.

This information may include:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Referring website or source;
• Pages visited;
• Time spent on pages;
• Website interactions;
• Approximate geographic location;
• Advertising attribution information;
• Conversion events; and
• Other technical or usage information.

We may use this information to understand how visitors interact with our Site, improve website performance, measure advertising effectiveness, detect technical problems, and improve our marketing and services.

03How We Use Your Personal Information

Ciftron may use personal information to:

• Respond to inquiries and requests;
• Provide information about our services;
• Schedule consultations, meetings, or calls;
• Prepare proposals or discuss potential engagements;
• Provide contracted services;
• Communicate with clients and prospective clients;
• Operate and improve our Site;
• Manage customer and business relationships;
• Maintain CRM records;
• Provide customer or technical support;
• Develop websites, software, funnels, CRM systems, and automations;
• Measure marketing and advertising performance;
• Analyze website traffic and user behaviour;
• Improve our marketing strategies and services;
• Send service-related communications;
• Send marketing communications where permitted by applicable law;
• Prevent fraud, abuse, and security incidents;
• Maintain business and transaction records;
• Comply with legal and regulatory requirements; and
• Protect Ciftron's legal rights, systems, clients, and users.

We may also use aggregated or de-identified information for analytics, business planning, service improvement, and other legitimate business purposes where such information does not reasonably identify an individual.

04Cookies, Pixels and Tracking Technologies

Ciftron may use cookies, tracking pixels, conversion tags, analytics tools, and similar technologies to understand how users interact with our Site and marketing.

These technologies may be used for purposes including:

• Website functionality;
• Analytics;
• Performance measurement;
• Conversion tracking;
• Advertising attribution;
• Retargeting and remarketing;
• Audience measurement;
• Website optimization; and
• Improving the user experience.

Depending on our current technology configuration, these tools may include services provided by companies such as:

• Google, including Google Analytics and Google Ads;
• Meta, including the Meta Pixel and related advertising technologies;
• HighLevel;
• Other analytics, advertising, CRM, and website technology providers.

These third parties may collect or receive information from our Site in accordance with their respective privacy policies.

Where required by applicable law, we may request consent before using non-essential cookies or similar tracking technologies.

You may also control certain cookies through your browser settings. Disabling some cookies may affect certain features or functionality of the Site.

05Advertising and Remarketing

Ciftron may use advertising platforms such as Meta and Google to advertise its services and measure advertising performance.

These platforms may use cookies, pixels, device identifiers, and similar technologies to understand whether users interacted with our advertising or Site.

Information collected through these technologies may be used to:

• Measure advertising conversions;
• Attribute leads to marketing campaigns;
• Create advertising audiences;
• Deliver relevant advertising;
• Retarget previous website visitors; and
• Analyze campaign performance.

Your ability to control personalized advertising may depend on the settings and privacy controls offered by the relevant advertising provider.

06CRM and Marketing Automation

When you submit information through our Site or interact with Ciftron, your information may be stored or processed through customer relationship management and automation platforms.

Ciftron may use platforms such as HighLevel, Zapier, Make, Calendly, Slack, Google services, and other business technology providers to manage inquiries, leads, appointments, communications, workflows, and client relationships.

These providers may process personal information on Ciftron's behalf where necessary to provide their services.

07Artificial Intelligence and AI Service Providers

Ciftron uses artificial intelligence and automation technologies as part of its business operations and services.

This may include technologies provided by OpenAI, Anthropic, and other AI or automation providers.

Depending on the particular workflow or service, information submitted to Ciftron may be processed using AI-assisted systems for purposes such as:

• Content assistance;
• Data processing;
• Workflow automation;
• Customer or business communication assistance;
• Research and analysis;
• Software development;
• Marketing operations; and
• Internal productivity.

Ciftron seeks to use such tools responsibly and will take reasonable steps appropriate to the context when handling personal or confidential information.

Where Ciftron processes client-controlled data through AI or automation platforms, additional obligations may be governed by the applicable client agreement and the terms and privacy practices of the relevant technology provider.

08Payment Processing

Where payments are made electronically, Ciftron may use third-party payment processors such as Stripe or other payment providers.

Payment information submitted through a third-party payment processor is generally processed according to that provider's own privacy and security practices.

Ciftron may receive transaction-related information, such as payment status, transaction identifiers, billing details, or other information necessary for accounting and business administration.

We do not intend to directly store complete payment-card information when payments are processed by an authorized third-party payment provider.

09Sharing Information with Third Parties

Ciftron does not sell or rent customer lists or personal information to third parties for monetary consideration.

We may share or provide access to information to trusted service providers where reasonably necessary to operate our business, Site, or services.

These providers may include:

• Meta;
• Google;
• HighLevel;
• Zapier;
• Make;
• Stripe;
• Slack;
• Calendly;
• OpenAI;
• Anthropic;
• Website hosting providers;
• Cloud infrastructure providers;
• Analytics providers;
• Email and communication providers;
• Software and development platforms; and
• Other contractors or technology providers necessary to deliver our services.

These providers may process information only as permitted by their agreements with us and their applicable terms and privacy practices.

We may also disclose information where reasonably necessary to comply with applicable law, legal process, regulatory requirements, or valid governmental requests.

Information may also be disclosed when reasonably necessary to protect the rights, property, systems, users, employees, or safety of Ciftron or others.

10Client Data

As a digital marketing and technology company, Ciftron may process information on behalf of clients when providing services such as marketing campaigns, CRM development, funnels, automation, software development, websites, analytics, or AI solutions.

In these circumstances, Ciftron may act as a service provider or processor of information controlled by the relevant client, depending on the circumstances and applicable law.

If your personal information was collected by one of our clients and Ciftron processes that information on the client's behalf, requests concerning that information may need to be directed to the relevant client as the organization responsible for determining how the information is used.

Our handling of client-controlled information may also be governed by contracts or data-processing arrangements between Ciftron and the applicable client.

11International Data Transfers

Ciftron is based in Sri Lanka and serves clients internationally, including clients in Canada and the United States.

Our service providers and technology partners may operate servers or process information in multiple countries.

As a result, personal information may be transferred to, stored in, or processed in countries other than the country where you live.

Privacy and data-protection laws may differ between jurisdictions.

Where required by applicable law, Ciftron will take reasonable steps to ensure appropriate protections are used when personal information is transferred internationally.

12Data Retention

Ciftron retains personal information for as long as reasonably necessary for the purposes for which it was collected, including to:

• Provide services;
• Maintain client and business relationships;
• Respond to inquiries;
• Maintain business and financial records;
• Fulfil contractual obligations;
• Resolve disputes;
• Prevent fraud or abuse;
• Enforce agreements; and
• Meet legal or regulatory requirements.

Retention periods may vary depending on the type of information, the nature of the relationship, contractual requirements, and applicable laws.

When information is no longer reasonably required, we may securely delete, anonymize, or otherwise dispose of it, subject to legal and technical requirements.

13Your Privacy Rights

Depending on where you live and the laws applicable to your information, you may have certain rights concerning your personal information.

These may include the right to:

• Request access to personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of certain personal information;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent;
• Request information about how your data is used;
• Request data portability where applicable; and
• Opt out of certain marketing communications.

These rights are not absolute and may be subject to legal exceptions, verification requirements, contractual obligations, or other applicable limitations.

To make a privacy request, contact:

info@ciftron.com

We may need to verify your identity before completing certain requests.

14Canada Privacy Rights

Ciftron serves clients and users in Canada and recognizes that Canadian privacy requirements may apply to certain processing activities.

Where applicable, Ciftron will handle personal information in accordance with relevant Canadian privacy requirements, including applicable federal or provincial privacy legislation.

Canadian users may contact us to request access to or correction of personal information, withdraw consent where applicable, or raise concerns regarding our handling of their information.

15United States Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy legislation.

Depending on the jurisdiction and whether the relevant law applies to Ciftron's processing activities, these rights may include access, correction, deletion, portability, and certain opt-out rights.

We will respond to valid privacy requests as required by applicable law.

16Right to Deletion

Where applicable, you may request that Ciftron delete personal information associated with you.

We may be unable or legally permitted not to delete certain information where retention is necessary to:

• Complete or administer a transaction;
• Provide contracted services;
• Maintain required business or financial records;
• Detect or prevent fraud or security incidents;
• Exercise or defend legal rights;
• Comply with applicable law;
• Resolve disputes;
• Enforce contractual obligations; or
• Fulfil another lawful purpose permitted by applicable privacy legislation.

17Email and Marketing Communications

Ciftron may contact you by email, telephone, SMS, messaging platforms, or other communication channels where appropriate and permitted by applicable law.

Communications may include:

• Responses to inquiries;
• Appointment confirmations;
• Service updates;
• Project communications;
• Business announcements;
• Marketing information; and
• Promotional offers.

Where required, marketing communications will be sent with appropriate consent or another lawful basis.

You may unsubscribe from promotional email communications by using the unsubscribe mechanism provided in the applicable email or by contacting us.

Opting out of marketing communications does not necessarily prevent us from sending important transactional, contractual, account-related, or service communications.

18Security

Ciftron takes reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, misuse, or loss.

These measures may include access controls, authentication procedures, secure third-party services, internal access restrictions, and other safeguards appropriate to our operations.

However, no internet transmission, cloud platform, database, or electronic storage system can be guaranteed to be completely secure.

Accordingly, Ciftron cannot guarantee absolute security of personal information.

19Data Breaches

If Ciftron becomes aware of a security incident involving personal information, we may investigate the incident and take reasonable steps to contain and address it.

Where required by applicable law, Ciftron may notify affected individuals, clients, regulators, or other appropriate parties.

20Children's Privacy

Ciftron's Site and business services are not directed toward children.

We do not knowingly collect personal information from children through the Site for the purpose of marketing or providing our business services.

If you believe that a child has provided personal information to Ciftron without appropriate authorization, please contact us at info@ciftron.com so that we can review the matter.

21Third-Party Links

Our Site may contain links to websites, platforms, or services operated by third parties.

Ciftron is not responsible for the privacy practices, security, content, or policies of third-party websites.

We encourage users to review the privacy policies of third-party services before providing personal information to them.

22Business Transfers

If Ciftron is involved in a merger, acquisition, restructuring, financing, sale of assets, or other business transaction, personal information may be transferred as part of that transaction where permitted by applicable law.

Any recipient of such information will be expected to handle it in accordance with applicable privacy requirements.

23Changes to This Privacy Policy

Ciftron may update this Privacy Policy from time to time to reflect changes in our business, technologies, services, legal requirements, or privacy practices.

Updated versions will be published on this page with a revised Effective Date where appropriate.

We encourage users to review this Privacy Policy periodically.

24Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or Ciftron's handling of personal information, please contact:

Ciftron (Private) Limited
Jaffna, Sri Lanka

Website: www.ciftron.com
Email: info@ciftron.com
Telephone: +94 70 588 8756