MB Tech

Privacy Policy

Effective Date: January 1, 2024 · Last Revised: December 28, 2025 · Version 2.0

1. Privacy Commitment

MB Technologies Pvt Ltd (hereinafter referred to as "MB Technologies," "the Company," "we," "us," or "our") is a premier technology solutions provider. We recognize that privacy is a fundamental right, and we are committed to being a transparent and responsible steward of the Personal Data entrusted to us.

1.1 Legal Entity Information

MB Technologies Pvt Ltd is a private limited liability company duly incorporated and existing under the Companies Act, No. 07 of 2007 of Sri Lanka.

  • Company Registration Number: PV 00348653
  • Registered Office Address: Level 12, One Galle Face Tower, Centre Road, Colombo 02, Sri Lanka
  • Primary Jurisdiction: Democratic Socialist Republic of Sri Lanka.

1.2 Our Commitment

This Global Privacy Policy ("Policy") describes our practices regarding the collection, use, and disclosure of Personal Data from users of our websites, software products, SaaS platforms, and participants in our corporate events. We adhere to the Sri Lanka Personal Data Protection Act, No. 9 of 2022 (PDPA), the EU General Data Protection Regulation (GDPR), and other applicable global privacy frameworks.

2. Definitions

To ensure transparency and clarity, we define key terms used throughout this Policy as follows:

  • "Personal Data" or "Personal Information" means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
  • "Data Controller" refers to the entity that determines the purposes and means of the processing of Personal Data. For the majority of activities described in this Policy, MB Technologies Pvt Ltd is the Data Controller.
  • "Data Processor" refers to an entity that processes Personal Data on behalf of the Controller.
  • "Processing" means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
  • "Sensitive Personal Data" includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, or data concerning a natural person's sex life or sexual orientation.

3. Scope and Applicability

This Policy applies to Personal Data collected through the following channels:

  1. Digital Properties: Our websites, client portals, microsites, mobile applications, and software platforms owned and operated by MB Technologies.
  2. Offline Interactions: Physical attendance at industry conferences, trade shows, workshops, or visits to our physical office locations.
  3. Business Operations: Communications via email, telephone, video conferencing tools, and standard business correspondence.
  4. Recruitment: The submission of job applications, CVs, and participation in interview processes.

This Policy does not apply to:

  • Third-party websites, products, or services that may be linked to our platforms but are not controlled by MB Technologies.
  • Information that has been irreversibly anonymized or aggregated such that it can no longer be used to identify a specific individual.

4. Categories of Information We Collect

We collect data to operate effectively and provide you with the best experiences with our products and services. The data we collect varies based on the context of your interactions with MB Technologies and the choices you make.

4.1 Information You Provide Directly to Us

We collect information that you voluntarily submit to us. This includes:

  • Identity Data: First name, last name, username, title, date of birth (where required), and gender.
  • Contact Data: Billing address, delivery address, corporate email address, personal email address, and telephone numbers.
  • Professional Data: Company name, job title, department, industry, professional background, and LinkedIn profile URL.
  • Account Registration Data: Usernames, passwords (hashed and salted), security questions, and account preferences for accessing our client portals or SaaS products.
  • Financial and Transaction Data: Bank account details, payment card details (processed via secure PCI-DSS compliant gateways), VAT/Tax ID numbers, and details of payments to and from you.
  • Content and Communications: Information you provide in the content of your communications with us, such as feedback, survey responses, "Contact Us" form submissions, and support ticket descriptions.
  • Recruitment Data: If you apply for a job, we collect your resume/CV, cover letter, educational transcripts, employment history, professional certifications, references, and, where permitted by law, background check information.

4.2 Information Collected Automatically

When you interact with our digital platforms, we use various technologies to automatically collect certain data, often referred to as "Telemetry" or "Usage Data." This includes:

  • Device and Connectivity Data: Information about your device, including Internet Protocol (IP) address, browser type and version, operating system, platform, device type (mobile vs. desktop), screen resolution, and language settings.
  • Usage and Interaction Data: Uniform Resource Locators (URLs) showing the clickstream to, through, and from our website (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
  • Location Data: We may derive your approximate location (e.g., city or country level) from your IP address to localize content and ensure compliance with local laws.

4.3 Information from Third Parties

We may supplement the data we collect with information from third-party sources to improve the accuracy of our records and enhance our services:

  • Publicly Available Sources: Open government databases, professional social networks (e.g., LinkedIn), and corporate directories.
  • Data Brokers and Aggregators: Reputable third-party vendors who provide business contact information for marketing and lead generation purposes, in strict compliance with applicable laws.
  • Partners: If you engage with us through a joint marketing partner or a reseller, they may share your information with us.

5. Cookies and Tracking Technologies

MB Technologies uses cookies, web beacons, pixels, tags, and scripts to personalize your experience, understand usage patterns, and improve the security of our services.

Types of Technologies We Use:

  1. Strictly Necessary Cookies: Essential for the operation of the website (e.g., enabling you to log into secure areas or use a shopping cart). These cannot be switched off.
  2. Performance and Analytics Cookies: Allow us to count visits and traffic sources so we can measure and improve the performance of our site. We use tools like Google Analytics to understand which pages are the most and least popular.
  3. Functional Cookies: Enable the website to provide enhanced functionality and personalization (e.g., remembering your language choice or region).
  4. Targeting and Advertising Cookies: These may be set through our site by our advertising partners to build a profile of your interests and show you relevant adverts on other sites.

Cookie Management:

You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, this may prevent you from taking full advantage of the website. For detailed information, please refer to our dedicated Cookie Policy.

6. Purposes and Legal Bases for Processing

We process your Personal Data only when we have a valid legal ground to do so. The following matrix outlines the purposes for which we process your data and the corresponding legal basis:

  • Service Delivery: Registering you as a new customer, processing orders, delivering software keys, and managing user accounts. Legal Basis: Performance of Contract.
  • Customer Support: Responding to technical issues, "Contact Us" inquiries, and troubleshooting service disruptions. Legal Basis: Performance of Contract; Legitimate Interests.
  • Security & Fraud Prevention: Monitoring network traffic, detecting malicious activity, verifying identity, and protecting our IP. Legal Basis: Legitimate Interests.
  • Marketing & Communications: Sending newsletters, event invitations, and promotional offers relevant to your role. Legal Basis: Consent (where required); Legitimate Interests (B2B contexts).
  • Product Improvement: Using analytics to understand user behavior and improve website UX and product features. Legal Basis: Legitimate Interests.
  • Recruitment: Assessing candidate suitability, scheduling interviews, and managing the hiring pipeline. Legal Basis: Legitimate Interests; Performance of Contract (Pre-contractual).
  • Compliance & Legal: Keeping records for tax, audit, and regulatory reporting purposes. Legal Basis: Legal Obligation.

7. Disclosure and Sharing of Data

MB Technologies does not sell your Personal Data. However, to operate a global business, we may need to share your data with specific categories of recipients:

7.1 Intra-Group Transfer

We may share your Personal Data with our subsidiaries, parent companies, and affiliates within the MB Technologies corporate group. This is necessary for centralized administration, efficient resource allocation, and reporting. All group entities are bound by an Intra-Group Data Transfer Agreement ensuring a uniform standard of protection.

7.2 Third-Party Service Providers (Processors)

We engage trusted third-party vendors to perform functions on our behalf. These vendors are contractually obligated to safeguard your data and process it only upon our instructions. Categories of providers include:

  • Cloud Infrastructure: (e.g., AWS, Microsoft Azure, Google Cloud) for hosting our platforms and storing data.
  • Business Applications: (e.g., Salesforce, HubSpot) for CRM and marketing automation.
  • Communication Tools: (e.g., Zoom, Slack, Microsoft Teams) for facilitating meetings and support.
  • Financial Processors: (e.g., Stripe, PayPal) for secure payment handling.
  • HR Management Systems: For processing applicant and employee data.

7.3 Professional Advisors

We may disclose data to lawyers, auditors, bankers, and insurers where necessary for the purpose of obtaining professional advice, managing risk, or defending legal claims.

7.4 Legal and Regulatory Authorities

We may disclose your Personal Data if required to do so by law or in the good faith belief that such action is necessary to:

  • Comply with a legal obligation, court order, or government request.
  • Protect and defend the rights or property of MB Technologies.
  • Prevent or investigate possible wrongdoing in connection with the Service.
  • Protect the personal safety of users of the Service or the public.

7.5 Business Transfers

In the event that MB Technologies is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your Personal Data may be sold or transferred as part of that transaction. You will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your Personal Data.

8. International Data Transfers

MB Technologies operates globally. Your Personal Data may be transferred to, stored, and processed in a country different from your country of residence. This includes transfers to our headquarters, data centers in the United States, and support teams in other jurisdictions.

Transfers from the EEA and UK:

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, we ensure that transfers of Personal Data to third countries (countries outside these regions) are subject to appropriate safeguards:

  • Adequacy Decisions: We rely on decisions by the European Commission where the destination country is deemed to provide an adequate level of data protection.
  • Standard Contractual Clauses (SCCs): Where no adequacy decision exists, we utilize the Standard Contractual Clauses approved by the European Commission (and the UK Addendum) in our agreements with third parties to ensure your rights are protected.
  • Supplementary Measures: We implement technical measures, such as encryption during transit and at rest, to further protect data moving across borders.

9. Data Retention Practices

We adhere to the principle of storage limitation. We retain Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by law.

Retention Criteria:

  • Customer Data: Retained for the duration of the active business relationship plus a period of time to handle queries, warranties, or legal claims (typically 7 years for tax and contract liability purposes).
  • Marketing Data: Retained until you withdraw consent or opt-out. We may retain a "suppression list" of email addresses to ensure we do not contact you again after you have opted out.
  • Recruitment Data: For unsuccessful candidates, we typically retain data for 12 months (or as mandated by local labor laws) to consider you for future roles, unless you object.
  • Log Data: Technical logs are usually retained for a short period (e.g., 90 days) for security auditing, after which they are overwritten or anonymized.

Once the retention period expires, MB Technologies will securely delete or anonymize your Personal Data in a manner that ensures it is unrecoverable.

10. Security of Your Information

We treat the security of your data with the utmost seriousness. MB Technologies employs a defense-in-depth approach comprising administrative, technical, and physical safeguards designed to protect Personal Data from accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use.

Our Security Measures Include:

  • Encryption: Using Transport Layer Security (TLS) 1.2 or higher for data in transit and AES-256 encryption for data at rest.
  • Access Control: Implementation of strict Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA) for all personnel accessing our systems.
  • Vulnerability Management: Regular penetration testing, vulnerability scanning, and code reviews.
  • Physical Security: Hosting data in Tier III or IV data centers with 24/7 biometric access controls and surveillance.
  • Employee Training: Mandatory data privacy and security awareness training for all employees upon hire and annually thereafter.

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your Personal Data, we cannot guarantee its absolute security.

11. Your Privacy Rights

Depending on your jurisdiction, you may have specific rights regarding your Personal Data. MB Technologies respects these rights and provides mechanisms for you to exercise them.

11.1 Rights under GDPR (EEA/UK)

  • Right to Access: You have the right to request a copy of the Personal Data we hold about you.
  • Right to Rectification: You can request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): You can ask us to delete your data where legal grounds for retention no longer exist.
  • Right to Restriction: You can ask us to suspend processing your data in certain scenarios.
  • Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format to transfer to another controller.
  • Right to Object: You may object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time.

11.2 Rights under CCPA/CPRA (California Residents)

If you are a resident of California, you have the right to:

  • Know what personal information is being collected about you.
  • Know whether your personal information is sold or disclosed and to whom.
  • Say "No" to the sale of personal information (Note: MB Technologies does not sell data).
  • Access your personal information.
  • Request deletion of your personal information.
  • Equal service and price, even if you exercise your privacy rights.

11.3 How to Exercise Your Rights

To exercise any of the rights listed above, please submit a Data Subject Access Request (DSAR) via email to privacy@mbtechnow.com.

We will acknowledge your request within 48 hours and strive to provide a substantive response within 30 days. In complex cases, we may extend this period as permitted by law. We may request specific information from you to help us confirm your identity and ensure your right to access your Personal Data.

12. Children's Privacy

Our Website and Services are directed toward business professionals and are not intended for children under the age of 16. MB Technologies does not knowingly collect or solicit Personal Data from anyone under the age of 16.

If you are a parent or guardian and believe that your child has provided us with Personal Data without your consent, please contact us immediately. If we become aware that we have collected Personal Data from a child under the age of 16 in violation of applicable law, we will take steps to delete such information from our files.

13. Third-Party Links and Integrations

Our Services may contain links to other websites, or we may integrate third-party applications (e.g., social media plugins like the "LinkedIn Share" button). Please be aware that MB Technologies is not responsible for the privacy practices or the content of such other sites.

When you leave our digital platforms, we encourage you to read the privacy statements of each website that collects Personal Data. This Policy applies solely to information collected by MB Technologies.

14. Specific Notice for Recruitment (Candidate Privacy)

For individuals applying for employment at MB Technologies, the following additional provisions apply:

  • Source of Data: We may collect data from recruitment agencies, background check providers (where legal), and public profiles (LinkedIn).
  • Purpose: Data is used to manage the application process, assess qualifications, and for diversity and inclusion monitoring (on an aggregated, voluntary basis).
  • Retention: If hired, your data becomes part of your employee record. If not hired, we retain data for a limited period for future consideration unless you opt out.

15. Automated Decision Making

MB Technologies generally does not make decisions that produce significant legal effects concerning you based solely on automated processing, including profiling. If we deploy such technologies in the future (e.g., for automated credit scoring or candidate filtering), we will provide explicit notice and the opportunity for human intervention.

16. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological advancements.

When we make changes, we will revise the "Last Revised" date at the top of this Policy. For material changes that significantly affect your rights, we will provide more prominent notice, such as sending a direct email notification or displaying a banner on our website. Your continued use of the Services following the posting of changes constitutes your acceptance of such changes.

17. Dispute Resolution and Jurisdiction

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, we encourage you to contact us first.

  • EEA/UK Residents: You have the right to lodge a complaint with your local Data Protection Authority (DPA) (e.g., the ICO in the UK, the CNIL in France).
  • General Jurisdiction: Except where prohibited by applicable law, this Policy and any disputes arising out of it shall be governed by the laws of the jurisdiction in which MB Technologies is incorporated, without regard to its conflict of law principles.

18. Contact Information

MB Technologies welcomes your comments, questions, and concerns regarding this Privacy Policy. If you wish to contact us regarding our data practices or to exercise your rights, please use the following details:

MB Technologies Private Limited privacy@mbtechnow.com www.mbtechnow.com

For Security Vulnerability Reporting:

If you believe you have found a security vulnerability in one of our products or platforms, please contact our security team directly at security@mbtechnow.com.