Privacy Statement

We may collect personal information when you:

• Visit or interact with our website
• Contact us or submit an enquiry
• Request a quotation
• Request information about our products or services
• Purchase or use our products and services
• Request technical support or after-sales services
• Request information relating to solar or technology solutions
• Apply for employment with us
• Communicate with us through email, telephone, WhatsApp, social media, or other communication channels

The information we collect may include, but is not limited to:

• Identity and contact details: Name, email address, telephone number, residential or business address
• Customer and service details: Information relating to enquiries, quotations, orders, projects, installations, warranties and support requests
• Technical or project information: Information required to assess or provide IT, solar, renewable-energy, or other technical solutions
• Recruitment information: CVs, educational qualifications, employment history, skills and other information provided during recruitment
• Usage information: Information about how you interact with our website, including IP address, browser type, device information, pages visited and website activity
• Other voluntary information: Information you provide through forms, surveys, enquiries, feedback, or communication with us

Some information may also be collected automatically through cookies and similar technologies.

Where applicable, personal information is processed for legitimate and specified purposes and in accordance with applicable data-protection requirements.

We may use your personal information to:

• Provide and manage the products or services you request
• Respond to enquiries and requests for information
• Prepare quotations and proposals
• Process orders and customer requests
• Assess technical or solar-energy requirements
• Arrange consultations, installations, site visits, or technical services
• Provide customer service, warranty assistance and technical support
• Communicate important service, project, or company updates
• Process payments and maintain relevant business records
• Process employment applications
• Improve our website, products, services and customer experience
• Conduct website analytics and measure performance
• Maintain the security of our website and information systems
• Send relevant promotional or marketing communications where permitted
• Meet applicable legal, regulatory, contractual and administrative requirements

Depending on the circumstances, processing may be based on your consent, contractual requirements, legal obligations, or legitimate business purposes permitted by applicable law.

Xcelen Information Technologies (Pvt) Ltd. does not sell, rent, or trade your personal information.

We may share personal information, where reasonably necessary, with:

• Authorized employees and relevant departments within Xcelen Information Technologies (Pvt) Ltd.
• IT, cloud-hosting, website and technical service providers
• Solar installation, engineering and technical partners where necessary to provide requested services
• Suppliers, contractors and authorized service providers
• Marketing, communications and analytics service providers
• Professional advisers, auditors, or consultants where appropriate
• Payment or financial service providers where applicable
• Government authorities, regulators, courts, or law-enforcement agencies where required by law

Where third-party service providers process personal information on our behalf, we expect them to implement appropriate confidentiality, security and data-protection safeguards and to use the information only for authorized purposes.

Our website may use cookies and similar technologies to improve website functionality, understand website usage, analyze performance and provide a better user experience.

Information collected through cookies and website interactions may be used for purposes such as:

• Understanding visitor preferences and website behaviour
• Monitoring website traffic
• Improving website functionality and performance
• Remembering certain user preferences
• Measuring the effectiveness of digital marketing activities
• Providing relevant content or advertising where applicable

Where consent is required, relevant cookies or technologies will be used based on your consent.

Types of cookies we may use include:

• Necessary Cookies: Required for the proper operation and security of the website
• Performance and Analytics Cookies: Help us understand how visitors use our website
• Functionality Cookies: Remember user choices and preferences
• Advertising and Targeting Cookies: May be used for relevant advertising and campaign measurement where applicable

You may manage or disable cookies through your browser settings or through a cookie-preference tool provided on our website, where available.

Xcelen does not intend to use solely automated decision-making that produces legal or similarly significant effects on individuals unless such processing is specifically disclosed and conducted in accordance with applicable law.

Subject to applicable data-protection laws and relevant legal limitations, you may contact us regarding personal information that we hold about you.

Depending on the applicable legal framework, you may be able to request:

• Access to Personal Information: Request information regarding personal data that we hold about you
• Correction or Completion: Request correction of inaccurate or incomplete personal information
• Withdrawal of Consent: Withdraw consent where processing is based on your consent
• Objection to Processing: Raise an objection regarding certain processing activities where applicable
• Erasure: Request deletion of personal information where applicable and legally permitted
• Marketing Preferences: Request that we stop sending promotional communications

Certain requests may be restricted where retaining or processing the information is necessary to comply with legal requirements, fulfil contractual obligations, maintain business records, protect security, or establish or defend legal claims.

Where applicable under Sri Lankan data-protection law, individuals may also have the ability to raise concerns or complaints with the Data Protection Authority of Sri Lanka.

If you wish to make a privacy-related request, please contact us using the contact information provided below.

We implement reasonable and appropriate technical and organizational measures designed to safeguard personal information against:

• Unauthorized access
• Unauthorized disclosure
• Accidental loss
• Misuse
• Alteration
• Destruction
• Cybersecurity threats

Our security measures may include access controls, authentication procedures, secure systems, software updates, backups, monitoring and appropriate internal controls.

Although we take reasonable measures to protect personal information, no method of electronic transmission or digital storage can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected or to meet applicable legal, contractual, accounting, warranty, regulatory, security and operational requirements.

Retention periods may vary depending on the type of information and its purpose.

When personal information is no longer reasonably required, we may securely delete, anonymize, or otherwise dispose of it in accordance with applicable requirements.

We may update this Privacy Statement periodically to reflect:

• Changes to our products and services
• Changes to our website or technology
• Changes to our information-handling practices
• Legal or regulatory developments
• Changes to applicable data-protection requirements

Any updated version will be published on this page together with the revised Last Updated date.

We encourage visitors to review this Privacy Statement periodically.

If you have questions, concerns, or requests regarding this Privacy Statement or how Xcelen Information Technologies (Pvt) Ltd. handles your personal information, please contact us.

When submitting a privacy-related request, please provide sufficient information for us to identify you and appropriately respond to your request.