Last Updated: April 2026
SoftSora (PVT) LTD (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, and safeguard information in compliance with the General Data Protection Regulation (GDPR) and ISO 9001 quality management standards.
We collect information that is necessary to provide our enterprise engineering services, including:
Contact Information: Name, business email, phone number, and company name provided via our inquiry forms.
Technical Data: IP addresses, browser types, and usage patterns collected through cookies and analytics to improve site performance.
Project Context: Information shared during consultations regarding AI implementation, Cloud migration, or Staff Augmentation requirements.
Sensitive Data: In cases of healthcare-related projects (e.g., Care Management Systems), we act as a Data Processor, ensuring all sensitive health records are handled under strict role-based access controls.
We process your data based on legitimate business interests and contractual necessity:
To respond to inquiries and provide project consultations.
To deliver and maintain custom software products and cloud infrastructure.
To ensure compliance with regulatory frameworks (e.g., audit trails for Healthcare or Energy sectors).
To improve our website’s user experience and technical performance.
Security is at the core of our engineering discipline. We implement:
Encryption: Data is encrypted both in transit and at rest.
Access Control: Strict role-based access to ensure only authorized personnel handle client data.
DevSecOps: Security testing and vulnerability scanning are embedded into our delivery pipelines.
Audit Readiness: Maintaining comprehensive logs to support auditability for enterprise clients.
If you are visiting from the European Union, you have the following rights under GDPR:
Right to Access: Request a copy of the personal data we hold about you.
Right to Erasure (“Right to be Forgotten”): Request the deletion of your data when it is no longer necessary for business purposes.
Right to Portability: Request the transfer of your data to another organization.
Right to Object: Object to the processing of your data for specific purposes.
We do not sell your personal data. Data may only be shared with:
Cloud Providers: (AWS, Azure, GCP) where infrastructure is hosted.
Legal Authorities: Only when required by law to meet compliance or safety obligations.
Project Partners: Only under strict NDAs and IP ownership agreements as specified in our engagement models.
We use cookies to enhance navigation and analyze site traffic. You can manage your cookie preferences through your browser settings.
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal, tax, or regulatory requirements.
For any questions regarding this Privacy Policy or to exercise your data rights, please contact our Data Protection Officer:
SoftSora (PVT) LTD
Email: solutions@devenv.softsora.com
Address: NO 42, Balapokuna Road, Colombo 05
