Privacy Policy
Effective 10 August 2026
Parallel Labs ("we," "us," "our") is an engineering studio based in Sri Lanka. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding that information.
This policy applies to our website, our communications with clients, and the services we provide. It does not apply to products we build for clients — those products are governed by the client's own privacy policy.
Information We Collect
Information you provide directly:
- Contact details — name, email address, phone number, company name — when you reach out through our website, email, or other channels.
- Project information — business requirements, content, branding assets, technical specifications, and credentials shared during a project engagement.
- Billing information — invoicing details such as name, address, and payment references. We do not store credit card numbers directly.
Information collected automatically:
- Website analytics — pages visited, time on site, referral source, browser type, device type, and general geographic region. This data is collected through Google Analytics and is aggregated and anonymised.
- Cookies — small files stored on your device to support site functionality and analytics. You can disable cookies in your browser settings, though some site features may not function as expected.
How We Use Your Information
We use the information we collect for the following purposes:
- To communicate with you about inquiries, proposals, and ongoing projects.
- To deliver the services described in our project agreements.
- To send invoices and process payments.
- To improve our website and understand how visitors use it.
- To comply with legal obligations.
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
Third-Party Services
We use the following categories of third-party services to operate our business. These services may process your data in accordance with their own privacy policies:
- Analytics: Google Analytics — to understand website traffic and visitor behaviour.
- Hosting and Infrastructure: Cloud hosting providers (e.g. Vercel, AWS, DigitalOcean) — to host our website and, where applicable, client projects during development.
- Communication: Google Workspace (Gmail) — for email correspondence and internal collaboration.
- Development Tools: Code repositories, project management platforms, and deployment services used in the normal course of software development.
We select providers that maintain reasonable security practices. However, we are not responsible for the privacy practices of third-party services.
Client Projects and Your Data
When we build software for a client that collects data from the client's own users (e.g. a web app with user accounts), the client — not Parallel Labs — is the data controller for that end-user data. We act as a data processor, handling that data only as directed by the client and only for the purpose of building and maintaining the project.
Once a project is delivered and handed over, the client assumes full responsibility for the data their product collects and for maintaining their own privacy policy.
Data Retention
We retain your information for as long as necessary to fulfil the purposes described in this policy:
- Active projects and Care Plans: Data is retained for the duration of the engagement.
- After a project ends: Project files, communications, and related data are retained for forty-five (45) days after the project concludes or a Care Plan is cancelled, after which they are deleted.
- Invoicing and financial records: Retained as required by applicable tax and accounting laws (typically 5–7 years).
- Website analytics: Aggregated analytics data is retained according to Google Analytics' default retention settings.
Data Security
We take reasonable measures to protect your information, including:
- Encrypted connections (HTTPS) on our website and services.
- Access controls — project data is accessible only to team members working on your project.
- Secure storage of credentials and sensitive project information.
- Regular backups during active projects.
No method of storage or transmission is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
International Data Transfers
We are based in Sri Lanka and serve clients internationally. Your information may be stored and processed in Sri Lanka or in the countries where our third-party service providers operate (including the United States and the European Union). By engaging our services, you acknowledge that your data may be transferred to and processed in these locations.
Where applicable, we rely on standard contractual clauses or equivalent safeguards provided by our service providers to protect data transferred internationally.
Your Rights
Regardless of where you are located, you have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your personal information, subject to any legal obligations we have to retain certain records.
- Object to or restrict certain processing of your information.
- Withdraw consent where processing is based on your consent.
To exercise any of these rights, contact us at the email address below. We will respond within thirty (30) days.
Cookies
Our website uses cookies for analytics and basic site functionality. By using our website, you consent to the use of cookies as described here. You can manage or disable cookies through your browser settings.
We do not use cookies for advertising or tracking across third-party websites.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically. For active clients, we will notify you of material changes by email.
Contact
For questions, concerns, or requests related to your privacy, contact us at: teamparallellabs@gmail.com