Privacy Policy
Last updated: 9 November 2026. This policy explains how Revox (Private) Limited (“Revox”, “we”) collects and uses personal data through www.revox.io and when you contact us. It is written to meet Sri Lanka's Personal Data Protection Act, No. 9 of 2022, and, where they apply, the EU and UK General Data Protection Regulation.
Who we are
The data controller is Revox (Private) Limited (Company No. PV 96387), 217B, Stanely Thilakarathna Mawatha, Nugegoda 10250, Sri Lanka. Phone
+94 11 281 2917. For privacy, cookie and other legal matters, email
legal@revox.io. For general enquiries, email
hello@revox.io.
What we collect
- Project enquiries. When you use our quote form we collect your first and last name, email address, project description, budget range and how you heard about us.
- Emails and calls. Whatever you choose to send us, such as your name, contact details and message.
- Job applications. Your CV and the details you include when you email careers@revox.io.
- Meeting bookings. When you book a call through our Google Calendar or Calendly booking pages, we receive the name, email address and notes you enter there.
- Website usage (analytics). If analytics is on for you, Google Analytics and Microsoft Clarity collect the pages you view, clicks, scrolling, mouse movement, device and browser type, approximate location and how you arrived. Clarity hides text typed into form fields. See our Cookie Policy for when analytics is on and how to turn it off.
- Technical data. Our hosting provider receives your IP address and browser details to deliver pages and keep the site secure.
We do not ask for sensitive personal data, and we do not knowingly collect data from children under 16.
Why we use it, and our legal basis
| Purpose | Legal basis |
|---|
| Replying to enquiries and preparing quotes or proposals | Steps you ask us to take before a contract, and our legitimate interest in responding to business enquiries |
| Delivering projects for clients | Performing our contract |
| Reviewing job applications | Steps you ask us to take before employment, and our legitimate interest in hiring |
| Website analytics (Google Analytics, Microsoft Clarity) | Your consent in the EEA, UK and Switzerland. Elsewhere, our legitimate interest in understanding and improving our website, which you can turn off at any time |
| Keeping the website secure and working | Our legitimate interest |
| Meeting legal, tax and accounting duties | Legal obligation |
Who we share it with
We do not sell or rent personal data, and we do not use it for advertising. We share it only with service providers who process it for us under contract:
- Vercel Inc. (website hosting)
- Google LLC (Google Analytics, Google Workspace email, Google Calendar booking pages, Google Fonts)
- Microsoft Corporation (Microsoft Clarity)
- Zoho Corporation (Zoho Forms, which receives quote form submissions)
- Calendly LLC (meeting booking)
- Content delivery networks that serve site files (cdnjs by Cloudflare, jsDelivr, Webflow)
We may also disclose data when the law requires it, or to protect our rights or the safety of others.
International transfers
Some of these providers store or process data outside Sri Lanka, including in the United States. Where the law requires it, we rely on safeguards such as the providers' data processing terms and standard contractual clauses.
How long we keep it
- Enquiries and related emails: up to 2 years after our last contact, unless they lead to a contract.
- Client project records: for the length of the contract and as long as tax and accounting law requires afterwards.
- Job applications: up to 12 months after the role is filled, unless you agree to us keeping them longer.
- Google Analytics: up to 14 months. Microsoft Clarity: replays 30 days, heatmaps 9 months.
Your rights
Depending on where you live, you can ask us to:
- give you a copy of the personal data we hold about you
- correct data that is wrong or incomplete
- delete your data
- stop or limit how we use it, or object to processing based on legitimate interests
- move data you gave us to another provider
- withdraw consent at any time (for analytics, use Cookie settings at the bottom of any page)
Email
legal@revox.io to make a request. We may need to confirm your identity, and we will reply as soon as we can and within the time the law allows, normally one month. If you are unhappy with how we handle your data, you can complain to the Data Protection Authority of Sri Lanka or, in the EU or UK, your local data protection authority.
Security
We use HTTPS across the site, limit access to personal data to people who need it, and choose providers with recognised security standards. No system is completely secure, so please do not send sensitive information through the website.
Links to other sites
Our pages link to other websites, such as Foxtale Studio, BetSS.com and app stores. Their own privacy policies apply when you visit them.
Changes to this policy
We will update this page and the date at the top if we change how we handle personal data.
Contact
For privacy, cookie and other legal matters, email
legal@revox.io. For general enquiries, email
hello@revox.io. Our details: Revox (Private) Limited (Company No. PV 96387), 217B, Stanely Thilakarathna Mawatha, Nugegoda 10250, Sri Lanka. Phone
+94 11 281 2917.
