Privacy Policy

1. Who we are

XLOXI PVT LTD is a Shopify development and digital technology company based in Kanagarayankulam, Vavuniya 43000, Sri Lanka. We provide Shopify store setup, theme customization, Liquid development, web and ecommerce development, SEO, digital marketing and related services to clients in Sri Lanka and internationally.

For privacy-related questions, contact us at info@xloxi.com.

2. Information we collect

We collect information you provide directly and information collected automatically when you use our website.

• Identity and contact details: name, email address, phone or WhatsApp number, company name and project details submitted via contact, quote or newsletter forms.
• Business information: website URL, service interests (for example Shopify, SEO or digital marketing), budget range and message content you choose to share.
• Technical data: IP address, browser type, device information, pages visited, referring URL and approximate location derived from IP.
• Usage data: interactions with pages, forms and links on xloxi.com, collected through cookies, analytics and similar technologies.
• Communication records: emails, WhatsApp messages and support correspondence related to your enquiry or project.

3. How we use your information

We use personal information for legitimate business purposes, including:

• Responding to enquiries, quote requests and consultation bookings.
• Delivering Shopify, website, ecommerce, SEO and digital marketing services you engage us for.
• Sending newsletters and service updates where you have subscribed or given consent.
• Improving website performance, content and user experience.
• Measuring traffic and campaign effectiveness with analytics tools such as Google Analytics.
• Protecting our website, preventing fraud and complying with applicable laws in Sri Lanka and other relevant jurisdictions.

4. Legal bases for processing

Depending on your location and the context, we process personal data based on one or more of the following: your consent (for example newsletter signup), performance of a contract or pre-contractual steps (quote and project delivery), our legitimate interests in operating and improving our business, and legal obligations.

5. Cookies and analytics

We use cookies and similar technologies to operate the site, remember preferences and understand how visitors use xloxi.com.

If Google Analytics is enabled, it may collect aggregated usage statistics such as page views, session duration and device type. Analytics is configured with your Measurement ID managed in our admin settings. You can control cookies through your browser settings; disabling cookies may affect some site features.

6. Sharing of information

We do not sell your personal information. We may share data with trusted processors who help us operate our business, only as needed and under appropriate confidentiality obligations.

• Hosting, email and infrastructure providers (for example website hosting, transactional email and cloud storage).
• Analytics and advertising platforms when enabled (for example Google Analytics).
• Professional advisers and authorities where required by law or to protect our legal rights.
• Project collaborators or subcontractors engaged to deliver services you requested, under confidentiality terms.

7. International transfers

Because we serve clients internationally and use cloud tools, your information may be processed on servers outside Sri Lanka. Where we transfer data internationally, we take reasonable steps to ensure appropriate safeguards consistent with applicable data-protection expectations.

8. Data retention

We retain personal information only as long as needed for the purposes described in this Policy — for example, while an enquiry or project is active, for accounting and legal retention periods, or until you unsubscribe from marketing. When data is no longer required, we delete or anonymise it where reasonably practicable.

9. Data security

We implement reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure or destruction. No method of transmission over the internet is fully secure; we cannot guarantee absolute security but continuously work to reduce risk.

10. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, object to or restrict certain processing, and withdraw consent where processing is based on consent (for example marketing emails).

To exercise these rights, email info@xloxi.com with “Privacy Request” in the subject line. We may need to verify your identity before responding.

11. Children’s privacy

Our website and services are directed to businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

12. Third-party links

xloxi.com may link to third-party websites, apps or social platforms. Their privacy practices are governed by their own policies. We are not responsible for the content or privacy of external sites.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the website after updates constitutes acceptance of the revised Policy where permitted by law.

14. Contact us

If you have questions about this Privacy Policy or how XLOXI PVT LTD handles personal data, contact us at info@xloxi.com or write to Kanagarayankulam, Vavuniya 43000, Sri Lanka.