Data Processing
Last updated: 8 August 2026
This Data Processing notice describes how KORDEX handles personal data in client engagements and platform operations. It complements our Privacy Policy and any Data Processing Agreement (DPA) signed with a client.
This page provides general information for website visitors and clients. It is not formal legal advice. Project contracts and local counsel guidance take precedence for specific engagements.
1. Roles
When you are our client and we process personal data on your instructions within a delivered system, you are typically the controller and KORDEX is the processor. For our own website, CRM, billing, and marketing records, KORDEX is usually the controller.
2. Scope of processing
Processing activities may include hosting, storage, transmission, backup, support access, migration, analytics configuration, and integration work necessary to deliver the contracted software or website services.
3. Instructions & purpose limitation
As a processor, we process personal data only on documented client instructions, for the purposes defined in the services agreement, and not for unrelated marketing of our own products unless separately authorized.
4. Subprocessors
We may use infrastructure and tooling providers (for example cloud hosting, email, or monitoring). We remain responsible for ensuring appropriate contractual and security safeguards with subprocessors involved in client data processing.
5. Security measures
We apply access controls, least-privilege practices, encryption in transit where appropriate, and operational procedures designed to protect confidentiality, integrity, and availability of systems under our control.
6. International transfers
Data may be processed in Sri Lanka and in other locations where our infrastructure or subprocessors operate. Where required, we use appropriate contractual or legal transfer mechanisms.
7. Breach notification
If we become aware of a personal data breach affecting client data we process, we will notify the client without undue delay and cooperate on investigation and remediation as required by contract and law.
8. Contact
For questions about this policy, contact KORDEX Software Solutions at sales@kordexitsolutions.com or rizwan@kordexitsolutions.com, call 0707 654 654 / 0773 987 823, or write to our head office in Pelawatte, Sri Lanka.