Privacy Policy

1. Our Privacy Commitment

At NEXTRIXLAB (NEXTRIXLAB), operated by NEXTRIXLAB (PVT) LTD, we are committed to protecting the privacy, confidentiality, and security of our clients, customers, and website visitors.

This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal and business data when you visit our website, purchase digital website templates, request custom design briefs, or communicate with our engineering and billing desks. By using our website and services, you consent to the data practices described in this policy.

2. Information We Collect

When you interact with NEXTRIXLAB, we may collect the following categories of information:

• Personal Identification Details: Name, business or company name, email address, WhatsApp/mobile telephone number, and your province/district in Sri Lanka, provided voluntarily by you during checkout, inquiry forms, or project briefings.
• Billing & Invoice Information: Tax identification/business registration numbers (if applicable), billing address, and transaction records required to generate official Sri Lankan Rupee (LKR) invoices and payment receipts.
• Bank Transfer Deposit Proof: Digital images or PDF copies of bank deposit slips or online banking transaction screenshots voluntarily submitted by you to verify direct bank deposits.
• Technical & Browsing Information: IP address, browser type and version, device hardware specifications, operating system, and referral URLs collected automatically through essential session cookies and server logs.

3. Payment & Credit/Debit Card Data Security

NEXTRIXLAB never captures, processes, or stores your credit card number, debit card number, expiration date, or CVV/CVC security codes on our servers. All payment credential inputs are encrypted and tokenized directly between your browser and the payment provider's secure banking infrastructure.

4. How We Use Collected Information

We use the information we collect solely for legitimate commercial and operational purposes, including:

• Processing orders, verifying payments, issuing licenses, and facilitating access to template code archives.
• Generating and delivering legal VAT/LKR invoices and payment receipts in accordance with Sri Lankan financial regulations.
• Communicating order status confirmations, project progress updates, and support responses via email and WhatsApp.
• Providing AI-powered customer inquiry assistance and project estimation tailored to your specific industry.
• Detecting, investigating, and preventing fraudulent transactions, cyber attacks, and unauthorized distribution of proprietary source code.

5. Information Sharing & Third Parties

We respect your privacy. We do not sell, rent, trade, or monetize your personal information to third parties or advertising brokers under any circumstances.

We only share essential information with trusted third parties strictly necessary to deliver our services:

• Licensed Payment Gateways & Banking Partners: PayHere, Bank of Ceylon (BOC), and Commercial Bank of Ceylon for the purpose of executing and verifying payment settlements.
• Infrastructure & Communication Providers: Cloud hosting infrastructure and email dispatch delivery partners operating under strict data confidentiality agreements.
• Legal & Regulatory Authorities: If required to do so by applicable Sri Lankan statutory law, court subpoenas, or authorized government agencies.

6. Technical Data Security & Safeguards

We maintain industry-standard administrative, physical, and electronic security safeguards designed to protect your data against accidental loss, unauthorized access, modification, or disclosure:

• End-to-end 256-Bit SSL/TLS cryptographic encryption across all website routes, checkout, and admin consoles.
• Bcrypt password hashing, token-based download authentication, and automated rate-limiting against brute force vectors.
• Regular security audits, access control restrictions, and sandboxed storage partitions for customer uploaded assets.

Please note that while we implement robust industry security practices, no method of transmission over the public internet or electronic storage is 100% infallible, and absolute security cannot be universally guaranteed.

7. Cookies & Tracking Technologies

We utilize lightweight cookies and local session storage to provide a seamless browsing experience:

• Essential Cookies: Maintain your login state, shopping cart session, and CSRF security verification tokens.
• Preference Cookies: Remember your light/dark mode UI selection and currency preferences.
• Performance Analytics: Aggregate anonymous usage patterns to help us optimize page speed and navigation flows.

You can choose to disable non-essential cookies via your web browser configuration. However, doing so may impact checkout functionality and interactive UI components.

8. Your Rights & Data Access

Under the Personal Data Protection Act No. 9 of 2022 (Sri Lanka), you are entitled to:

• Request a copy of the personal details stored about you in our systems.
• Request correction or updating of any inaccurate or outdated contact information.
• Request deletion of your profile data, subject to mandatory accounting, billing, and tax record retention required by Sri Lankan law.

9. Changes to this Privacy Policy

NEXTRIXLAB reserves the right to modify or update this Privacy Policy at any time to reflect legislative changes, updated banking compliance guidelines, or enhanced site features. All revisions will be posted on this page with an updated "Last Updated" date. We encourage customers to periodically review this policy.