Privacy policy

Aecendir (“we”, “us”, “our”) is an applied AI research and engineering studio based in Sri Lanka. This policy explains how we collect, use, and protect personal data when you visit aecendir.com or communicate with us.

For any questions about this policy or your data, contact our Data Protection Officer using the details at the end of this page.

Information you give us. When you contact us through the form on this site or by email, we collect the details you provide — typically your name, email address, company, and the contents of your message.

Information collected automatically. Like most websites, our hosting infrastructure records basic technical data such as IP address, browser type, pages visited, and timestamps in server logs. If you accept cookies, we may also use analytics cookies to understand how the site is used.

We use personal data only to:

• Respond to your enquiries and correspond with you
• Provide and improve our services
• Keep the website secure and diagnose technical issues
• Meet legal and regulatory obligations

We do not sell personal data, and we do not use it for automated decision-making that produces legal effects about you.

We use a small number of cookies and similar technologies. Strictly necessary cookies keep the site working and remember your consent choice. Optional analytics cookies are set only if you choose “Accept” in the consent banner.

You can change your mind at any time by clearing cookies for this site in your browser; the banner will appear again on your next visit.

We share data only with service providers who help us operate this website (such as hosting and email providers), and only to the extent needed for those services. We may also disclose data where the law requires it.

We keep personal data only as long as necessary for the purposes above — correspondence is typically retained while a business relationship or enquiry remains active, and server logs are rotated on a short cycle.

Depending on your jurisdiction (including under Sri Lanka’s Personal Data Protection Act and the EU/UK GDPR where they apply), you may have the right to:

• Access a copy of the personal data we hold about you
• Ask us to correct or delete your data
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact our Data Protection Officer. We respond to all legitimate requests within 30 days.

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No internet transmission is completely secure, but we work to protect your data in line with industry practice.

We may update this policy from time to time. The latest version will always be published on this page.