Privacy Policy & Client Data Protection
RDK Software is committed to strict confidentiality, client intellectual property protection, and transparent data processing practices.
1. Information We Collect
We collect only the information necessary to evaluate your engineering requirements and maintain direct communication:
- Personal Contact Details: Your name, work email address, company name, and phone or WhatsApp number submitted through our inquiry forms.
- Project Scoping Data: Project briefs, technical specifications, roadmap notes, and budget parameters provided to draft engineering scopes.
2. Purpose of Data Processing
We process client information strictly to support software engineering engagements:
- Formulating technical proposals, milestone deliverable schedules, and budget estimates.
- Conducting sprint reviews, engineering check-ins, and direct architectural coordination.
- Providing post-launch technical support, lifecycle patches, and maintenance sprints.
3. Cookies, Analytics & Server Telemetry
Our website is an independent showcase engineered without invasive surveillance:
- Zero Tracking Pixels: We do not load third-party marketing cookies, behavioral profiling tools, or retargeting pixels (e.g. Google Analytics, Meta Pixel).
- Hosting Telemetry: Standard, anonymized server-level logs (such as IP address, browser type, and HTTP response codes) are processed by our edge hosting infrastructure (Vercel) solely for network security, DDoS mitigation, and server performance monitoring.
4. Personal Data Security vs. Client Intellectual Property (IP)
We maintain a strict operational distinction between personal contact records and proprietary software assets:
Contact information is encrypted in transit via TLS 1.3 and stored in access-controlled administrative directories. We never sell, rent, or distribute client contact data to third-party marketers or data brokers.
Client repositories, architecture diagrams, and Figma files are isolated within private, MFA-protected version control networks. We claim zero ownership over client IP; 100% of code and assets transfer to the client upon milestone payment.
5. Specific Data Retention Periods
We retain data only for defined operational and legal compliance timeframes:
- Inquiry & Scoping Correspondence: Retained for up to 12 months following the conclusion of project discussions to facilitate future sprints, unless earlier deletion is requested by the client.
- Invoicing & Financial Contracts: Retained for 5 years in compliance with statutory taxation, accounting, and commercial auditing laws in Sri Lanka.
6. Third-Party Integrations
When you initiate a WhatsApp conversation via our click-to-chat links, your transmission falls under WhatsApp's end-to-end encrypted messaging policies. Contact form submissions are securely routed via Resend API relays directly to our engineering leads inbox without secondary retention.
7. Your Rights & Data Deletion
You retain complete control over your personal records. You may request access to, correction of, or permanent deletion of your contact data from our active records at any time by emailing us at info.rdksoftware@gmail.com. Requests are confirmed within 48 business hours.
8. Governing Law & International Standards
This Privacy Policy is governed by and construed in accordance with the laws of the Democratic Socialist Republic of Sri Lanka, including the Personal Data Protection Act (PDPA) No. 9 of 2022.
For our international clients across North America, the UK, the EU, and Australia, we adhere to core global data protection principles, honoring GDPR-aligned standards of data transparency, purpose limitation, and the right to erasure.
9. Contact & Legal Inquiries
For legal notices, privacy requests, or security disclosures, please contact RDK Software directly: