Privacy policy

02 What we collect

We collect what you give us and what a web server necessarily sees. There is no account to create on this site, and no advertising or analytics tracking on it.

• Enquiry details: your name, email address, company, the roles you are trying to fill, and whatever you write in the message field.
• Correspondence: emails, call notes and anything else exchanged while we discuss a role with you.
• Technical data: the IP address, browser and device your request arrives with, plus the page requested and the time, held in ordinary server logs by our hosting provider.

If you approach us as a candidate rather than as a client, we also collect your CV and the details you send with it. That is handled under this same policy.

03 How we use it

• To reply to your enquiry and arrange a call about the roles you want filled.
• To prepare a written role scope and the all-in cost for you.
• To deliver and administer the service if you go on to engage us.
• To keep the records we are required to keep, and to protect the site against abuse.

We do not sell your data, we do not share it with advertisers, and we do not use it to build a profile of you. We do not add people who have only enquired to a marketing list unless they ask us to.

04 Our basis for using it

Where the UK or EU General Data Protection Regulation applies to you, we rely on legitimate interests to respond to a business enquiry you have sent us, on performance of a contract once you engage us, and on legal obligation for records we must retain. Where we rely on consent, such as for a mailing list, you can withdraw it at any time.

05 Who we share it with

We use a small number of service providers to run the site and the business. They process data on our instructions only.

• Web3Forms, which delivers the enquiry form to our inbox.
• Cloudflare, which hosts and serves this site.
• Google Fonts, which serves the two typefaces used here and receives the request as part of loading them.
• Our email and business software providers.

We may also disclose data where the law requires it, or to establish or defend a legal claim. Beyond that, your details go nowhere else.

06 Where your data is held

We are based in Sri Lanka, and the providers above operate internationally, so your data may be processed outside your own country. Where data protection law requires a safeguard for that transfer, we rely on standard contractual clauses or on the provider’s own approved transfer mechanism.

07 How long we keep it

Enquiries that do not lead to work are kept for up to two years, so we have the context if you come back to us, and are then deleted. Records relating to a client engagement are kept for the length of the engagement and then for the period our accounting and tax obligations require. Server logs are kept for the short period our hosting provider retains them.

You can ask us to delete an enquiry sooner than that and we will, unless we are required to keep it.

08 Your rights

Subject to the law that applies to you, you can ask us to do any of the following.

• Tell you what data we hold about you, and give you a copy.
• Correct anything inaccurate.
• Delete data we no longer have a reason to keep.
• Restrict or object to what we are doing with it.
• Withdraw consent where we relied on it.

Write to info@proactiveit.co and we will respond within one month. There is no charge. If our answer does not satisfy you, you can complain to the data protection authority in your own country.

09 Cookies

This site sets no advertising, analytics or tracking cookies, so there is nothing here for a consent banner to ask you about. Our hosting provider may set a strictly necessary cookie for security and traffic management.

If we add analytics later, this section will be updated first, and consent will be asked for where the law requires it.

10 Security

The site is served over HTTPS, access to enquiry data is limited to the people who need it, and our systems are protected by access control and multi-factor authentication. No system is perfectly secure. If a breach affects your data and the law requires notification, we will tell you and the relevant authority.

11 Changes to this policy

We update this policy when what we do changes. The effective date at the top always reflects the current version. If a change materially affects how we handle data you have already given us, we will tell you directly.