Adsprone Digital (Pvt) Ltd · Effective date: 23 September 2026 · Last updated: 23 September 2026
Adsprone Digital (Pvt) Ltd (“Adsprone”, “we”, “us” or “our”) is a digital marketing and e-commerce solutions agency registered in Sri Lanka. We provide website design and development, digital marketing, PPC advertising, search engine optimisation (SEO), graphic design and product photography, and email and SMS marketing services.
This Privacy Policy explains how we collect, use, share and protect your personal data when you visit adsprone.com, contact us, respond to our advertisements (including Facebook and Instagram lead forms), or use our services. We process personal data in line with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (as amended) (“PDPA”) and other applicable laws.
1. Who we are
Adsprone Digital (Pvt) Ltd is the controller of the personal data described in this policy. This means we decide why and how your personal data is processed.
- Company: Adsprone Digital (Pvt) Ltd
- Company registration no.: PV-00269256
- Registered address: 461/B1, Mount Lavinia, Sri Lanka
- Email: info@adsprone.com
- Phone / WhatsApp: +94 773470765
2. Personal data we collect
2.1 Data you give us
When you fill in a form on our website (such as “Request a callback”), submit a Facebook or Instagram lead form, message us on WhatsApp or Messenger, call or email us, or become our client, we may collect:
- Contact details – full name, phone number, WhatsApp number, email address, city.
- Business details – business name, industry or type of business, job title, existing website URL.
- Project details – the service you are interested in (for example, a new website, redesign or e-commerce store), your budget range, preferred start date, and any requirements you share.
- Client account information – billing details, invoices, contracts, and communication history.
- Access credentials – where you ask us to work on your website, hosting, domain, advertising or analytics accounts, the logins or access permissions you provide.
2.2 Data we collect automatically
When you visit our website, we and our technology partners may automatically collect:
- IP address, approximate location, browser type, device type and operating system;
- pages viewed, time spent on pages, links clicked and the website that referred you;
- information from cookies, pixels and similar technologies (see Section 7).
2.3 Data from third parties
- Meta Platforms (Facebook and Instagram) – when you submit one of our lead forms, Meta shares with us the information you entered or confirmed in that form.
- Advertising and analytics platforms – such as Google and Meta, which provide us with aggregated or pseudonymised reports about how people interact with our ads and website.
Referrals – when someone recommends our services to you and shares your contact details with your permission
3. How we use your data
Purpose | Examples |
Respond to enquiries | Call you back, reply to messages, answer questions about our services. |
Assess your project | Understand your requirements, budget and timeline, and prepare quotations or proposals. |
Deliver our services | Design and build websites, manage advertising campaigns, carry out SEO and marketing work. |
Manage our client relationship | Contracts, invoicing, payments, support and project updates. |
Marketing | Send you relevant offers, updates and tips where you have agreed or where the law allows (see Section 6). |
Advertising and measurement | Measure the results of our ads, build audiences and show relevant ads to people who visited our website. |
Improve our website and services | Analyse website usage and fix technical issues. |
Legal and security | Keep accounting and tax records, prevent fraud and misuse, and meet legal obligations. |
We do not sell your personal data.
4. Legal basis for processing
Under the PDPA, we process your personal data only where we have a lawful basis to do so, including:
- Consent – for example, when you submit a lead form, agree to receive marketing messages, or accept non-essential cookies. You can withdraw your consent at any time.
- Contract – where processing is needed to prepare a quotation at your request or to perform a contract with you.
- Legal obligation – where we must keep records or share data to comply with the law.
- Legitimate interests – for example, to run and improve our business, secure our systems and follow up on business enquiries, provided these interests do not override your rights.
5. Facebook & Instagram lead forms
We run advertisements on Facebook and Instagram that may include an instant lead form. When you submit one of these forms:
- the information you enter (such as your name, phone number, email address and answers to our questions about your business, project and budget) is shared with Adsprone Digital (Pvt) Ltd;
- we use it only to contact you about the service you enquired about, to assess whether our services suit your needs, and, if you agree, to send you related marketing messages;
- we may contact you by phone, WhatsApp, SMS or email using the details you provided;
- Meta’s own handling of your data is governed by the Meta Privacy Policy (www.facebook.com/privacy/policy).
If you no longer wish to be contacted, tell us at any time using the details in Section 17 and we will stop.
6. Marketing communications
We run advertisements on Facebook and Instagram that may include an instant lead form. When you submit one of these forms:
- the information you enter (such as your name, phone number, email address and answers to our questions about your business, project and budget) is shared with Adsprone Digital (Pvt) Ltd;
- we use it only to contact you about the service you enquired about, to assess whether our services suit your needs, and, if you agree, to send you related marketing messages;
- we may contact you by phone, WhatsApp, SMS or email using the details you provided;
- Meta’s own handling of your data is governed by the Meta Privacy Policy (www.facebook.com/privacy/policy).
If you no longer wish to be contacted, tell us at any time using the details in Section 17 and we will stop.
7. Cookies and tracking technologies
Our website uses cookies, pixels and similar technologies. These may include:
Type | Purpose | Examples |
Strictly necessary | Make the website work, keep it secure and remember your choices. | WordPress session and security cookies |
Analytics | Help us understand how visitors use our website. | Google Analytics 4, Google Tag Manager |
Advertising | Measure ad performance, build audiences and show relevant ads on other platforms. | Meta Pixel and Conversions API, Google Ads tags |
You can control or delete cookies through your browser settings and, where available, through the cookie banner on our website. You can also manage ad preferences in your Facebook ad settings and Google My Ad Center, and opt out of Google Analytics using the Google Analytics opt-out browser add-on. Blocking some cookies may affect how the website works.
8. Who we share data with
We share personal data only where necessary and with appropriate safeguards:
- Service providers – such as website hosting, cloud storage, email and SMS platforms, customer relationship management (CRM) tools, communication tools and payment processors that help us run our business. They may only use your data to provide services to us.
- Advertising and analytics partners – such as Meta and Google, for ad delivery, measurement and analytics.
- Group company – our parent company, Printhub Studios (Pvt) Ltd, where needed to deliver a related service you have requested (for example, printing or branding work) or for internal administration.
- Professional advisers – such as accountants, auditors and lawyers.
- Authorities – where required by law, court order or a lawful request from a government or regulatory body.
- Business transfers – if our business, or part of it, is merged, sold or restructured.
9. Data we handle for our clients
When we build websites, run ad campaigns or manage marketing for our clients, we may process personal data of our clients’ customers (for example, website form submissions, order data, email lists or advertising audiences). In these cases, our client is the controller and we act as a processor, handling that data only on the client’s documented instructions and under our service agreement. If you are a customer of one of our clients, please contact that business directly about its privacy practices.
10. International data transfers
Some of our service providers, including Meta, Google and cloud hosting providers, store or process data on servers outside Sri Lanka. Where personal data is transferred outside Sri Lanka, we take steps to ensure it is protected in line with the PDPA, for example by using reputable providers with appropriate contractual and security safeguards.
11. How long we keep data
- Enquiries and leads that do not become clients: up to 24 months from our last contact, unless you ask us to delete them sooner.
- Client records, contracts and invoices: for as long as required by Sri Lankan tax, accounting and company laws, and for a reasonable period after the relationship ends to handle any claims.
- Access credentials: only for as long as needed to complete the work. We recommend that you change passwords once a project is complete.
- Analytics and advertising data: according to the retention settings of the relevant platform.
When data is no longer needed, we delete it or anonymise it securely.
12. How we protect data
We use reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or alteration. These include secure (HTTPS) connections, access controls, two-factor authentication where available, restricted staff access, and confidentiality obligations. No method of transmission or storage is completely secure, but we work to protect your information and will respond to any data breach as required by law.
13. Your rights
Subject to the PDPA, you have the right to:
- Access – ask for confirmation of whether we process your personal data and receive a copy of it;
- Withdraw consent – at any time, where processing is based on consent;
- Rectification – ask us to correct or complete inaccurate or incomplete data;
- Erasure – ask us to delete your personal data in certain situations;
- Object / restrict – object to certain processing, including direct marketing;
- Automated decisions – ask for a review of decisions made solely by automated means that significantly affect you.
To make a request, contact us using the details in Section 17. We may need to verify your identity before we respond. We will respond within the time required by law.
If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Authority of Sri Lanka (www.dpa.gov.lk).
14. Children’s privacy
Our services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has provided us with personal data, please contact us and we will delete it.
15. Third-party websites
Our website, blog and portfolio may contain links to third-party websites, including websites we have built for our clients. We are not responsible for the privacy practices of those websites. Please read their privacy policies before sharing any personal data.
16. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology or the law. The updated version will be posted on this page with a new “Last updated” date. If the changes are significant, we will take reasonable steps to let you know.
17. Contact us
If you have any questions about this Privacy Policy, or want to exercise your rights, please contact our Data Protection Officer:
Data Protection Officer
Adsprone Digital (Pvt) Ltd
461/B1, Mount Lavinia, Mount Lavinia, Sri Lanka
Email:privacy@adsprone.com
Phone / WhatsApp: +94 773470765