Last Updated: January 17, 2026
At 3CS Asia (Private) Limited ("3CS", "We", "Us", or "Our"), your privacy is a priority. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website www.3cs.lk or engage our digital services.
We are committed to complying with the Personal Data Protection Act (PDPA) No. 9 of 2022 of Sri Lanka and other applicable international data protection standards.
Information We Collect
We collect information that identifies, relates to, or could reasonably be linked to you ("Personal Data").
- Identity & Contact Data: Name, email address, and phone number provided via our inquiry forms or newsletters.
- Technical & Usage Data: IP address, browser type, device identifiers, and details of how you interact with our website (pages visited, time spent).
- Client Data: Information provided during the course of project briefings, including business requirements and branding assets.
How We Use Your Data
We process your Personal Data based on legitimate business interests, contractual necessity, or your explicit consent. Purposes include:
- Service Delivery: To provide web design, SEO, and digital marketing services.
- Communication: To respond to inquiries and provide project updates.
- Security: To detect and prevent fraudulent activity and ensure the technical integrity of our platforms.
Cookies and Tracking Technologies
We use cookies to enhance your experience.
- Essential Cookies: Necessary for the website to function
- Analytics Cookies: Help us understand audience behavior to improve our UI/UX.
- Marketing Cookies: Used to track the effectiveness of our digital campaigns.
You can manage your cookie preferences through our Cookie Policy page or your browser settings.
Data Sharing and Disclosure
3CS does not sell your Personal Data. We may share information with:
- Service Providers: Trusted partners (e.g., cloud hosting, payment gateways) who assist in our operations under strict confidentiality agreements.
- Legal Compliance: When required by law or to protect the rights and safety of 3CS, our clients, or the public.
- Business Transfers: In the event of a merger, acquisition, or asset sale.
Data Security
As a leader in website security, we implement robust technical and organizational measures to protect your data. This includes:
- SSL/TLS encryption for all data transmissions.
- OWASP-aligned secure coding practices.
- Strict access controls and periodic security audits.
International Data Transfers
As we serve international clients, your data may be processed on servers located outside of Sri Lanka. We ensure that such transfers comply with the PDPA and that adequate safeguards are in place to protect your privacy.
Your Rights
Under the Sri Lanka PDPA, you have the following rights:
- Right of Access: Request a copy of the Personal Data we hold about you.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure: Request the deletion of your data under certain conditions.
- Right to Object: Withdraw consent for marketing or specific data processing.
To exercise these rights, please contact us at privacy@3cs.lk.
Third-Party Links
Our website may contain links to third-party sites (e.g., client portfolios or social media). We are not responsible for the privacy practices of these external sites.
Contact Us
For any questions regarding this Privacy Policy or our data practices, please contact:
