Capital IT Investments

Last updated: November 22, 2025

This Privacy Policy explains how Capital IT Investments (“we”, “us”, “our”) collects, uses, discloses, and protects your information when you visit our website https://www.capitalitinvestments.com, engage with our services, or communicate with our team.

By accessing our website or using our services, you agree to the practices described in this Privacy Policy. If you do not agree with this Policy, please discontinue use of our website and services.

1. Information We Collect

We may collect the following categories of information:

Contact Information: Name, email address, phone number, company name, and any other details you provide when you submit a contact form, email us, or request a consultation.
Business & Project Information: Details about your business, your technology stack, project requirements, and other information you voluntarily share so we can analyse, design, and deliver solutions.
Technical & Usage Data: IP address, browser type, device information, pages visited, time spent on pages, and other diagnostic and analytics data captured via cookies, logs, and similar technologies.
Career & Recruitment Data: CVs, portfolios, career history, qualifications, and other information you send to careers@capitalitinvestments.com or through any recruitment form or channel we provide.

2. How We Use Your Information

We use the information we collect for purposes such as:

Responding to your inquiries, requests, and support tickets.
Analysing your requirements and proposing suitable IT solutions.
Providing, operating, and improving our software, consulting, and cloud services.
Managing our business relationship and project communications.
Processing job applications and assessing candidates for roles within our team.
Monitoring usage, performance, and security of our website and systems.
Complying with legal, regulatory, and contractual obligations.
Sending important notifications related to services, security, or policy updates.

3. Legal Basis for Processing (where applicable)

Depending on your location, we may process your personal data on one or more of the following legal bases:

Contract: To perform our obligations under a contract with you.
Legitimate Interests: To operate and improve our business and services in a way that is proportionate and respects your privacy rights.
Consent: Where you have explicitly given consent (for example, subscribing to a mailing list or opting in to certain communications).
Legal Obligation: To comply with applicable laws and regulations.

4. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your experience, analyse traffic patterns, and improve site performance. Cookies are small text files stored on your device. You can control or disable cookies through your browser settings, but some features of the website may not function properly if cookies are disabled.

5. How We Share Your Information

We do not sell your personal information. We may share your information with:

Service Providers & Partners: Trusted third parties that support our operations (for example hosting providers, communication tools, analytics, or security services), bound by confidentiality and data protection obligations.
Project-Related Third Parties: When required for the execution of a project, such as integration partners or subcontractors, under appropriate agreements.
Legal & Compliance: Where required to comply with a legal obligation, enforce our agreements, or protect our rights, users, or systems.
Business Transfers: In the context of a merger, acquisition, or restructuring, where your data may be transferred as part of the business assets, subject to appropriate safeguards.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this Policy, including:

Project and contract data: for the duration of the engagement and for a reasonable period afterward.
Support and communication records: as needed to manage ongoing relationships and resolve issues.
Recruitment data: for the duration of the recruitment process and for a limited period afterward, unless you request deletion earlier.
Where required by law: for the periods mandated by applicable regulations.

7. Data Security

We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, misuse, or alteration. This includes access controls, security monitoring, and secure development practices for our systems and solutions. However, no method of transmission or storage over the Internet is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

Our infrastructure, partners, and clients may be located in different countries. As a result, your information may be transferred and processed outside your country of residence. When we transfer data, we take steps to ensure that appropriate safeguards are in place in line with applicable data protection requirements.

9. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, such as:

Right to access the personal data we hold about you.
Right to request correction or update of inaccurate or incomplete data.
Right to request deletion of your data, subject to legal and contractual obligations.
Right to object to or restrict certain types of processing.
Right to withdraw consent where processing is based on your consent.

To exercise these rights, please contact us using the details in the “Contact Us” section below. We may need to verify your identity before processing your request.

10. Children’s Privacy

Our services are not directed to children, and we do not knowingly collect personal information from individuals under the age of 16. If you believe a child has provided personal information to us, please contact us so we can take appropriate steps to remove the information.

11. Third-Party Websites and Services

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of those third parties. We encourage you to review the privacy policies of any external sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or internal practices. The “Last updated” date at the top of this page indicates when the Policy was last revised. We encourage you to review this page periodically.

13. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, you can reach us at:

General Inquiries: info@capitalitinvestments.com
Support & Service Requests: support@capitalitinvestments.com
Careers & Recruitment: careers@capitalitinvestments.com

Capital IT Investments
Colombo, Sri Lanka

Privacy Policy