Privacy Policy

Yakku is a creative digital agency in Colombo, Sri Lanka, working across software, marketing, film and sound. This policy explains what information we collect through this website and in the course of client work, why we collect it, and the choices you have. You can reach us about any of it at [email protected].

The enquiry form. When you send us an enquiry we receive what you type: your name, email address, phone number if you give it, your company, the services and the kind of business you select, a budget band if you choose one, and your message. The form delivers this to our studio inbox by email. We use it to reply to you and, if we go on to work together, to prepare a scope.

Direct contact. If you email, call or message us on WhatsApp, we hold the correspondence for as long as the conversation and any work that follows it need.

Technical information. Like every website, our host records standard server logs (IP address, browser, pages requested, time) to keep the site running and secure. The site stores one flag in your browser's session storage so the opening animation plays once per visit; it holds no personal information and is cleared when you close the tab.

Analytics. The site is built to measure which pages and services visitors find useful. No third-party analytics provider is connected at the time of this policy. If we connect one, we will update this page to name it and say what it collects.

Some work in our portfolio plays through YouTube's embedded player on its privacy-enhanced domain, which means YouTube sets no cookies until you press play. Once you play a video, YouTube's own privacy policy applies. Links to WhatsApp, Instagram, Facebook and to our clients' websites take you to services we do not control.

When we build software, run campaigns or produce film and sound for a client, we may handle information about that client's customers on the client's behalf: for example, the records inside a booking system we built, or the audience data inside an advertising account we manage. In that work we act on the client's instructions, under the written scope and agreement for the project, and we do not use that information for anything else.

• To reply to enquiries and to talk with you about a project.
• To prepare, deliver and invoice work you have engaged us for.
• To keep the website secure and working.
• To understand which pages and services are useful, in aggregate.
• To meet legal and accounting obligations.

We do not sell personal information and we do not send marketing email to people who have not asked for it.

Enquiries are delivered through Google's email service to our studio inbox. Our website is hosted by a third-party hosting provider that processes server logs on our behalf. Where a project requires it, we work with named production partners (for example our audio partner, Busy Bee Studios) who receive only what the project needs. We share information with authorities where the law requires it. We do not otherwise share personal information.

Enquiries that do not lead to work are kept for up to twelve months in case you come back to us, then deleted. Records of client work are kept for the life of the engagement and for as long afterwards as our accounting and legal obligations require. Server logs are kept for the short rolling period our host sets.

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it, and we will do so unless we have a legal reason to keep it. You can also object to a particular use. Write to [email protected] and we will answer within a reasonable time. We handle personal information in line with Sri Lanka's Personal Data Protection Act, No. 9 of 2022, and with the laws of any other country where a client requires it.

The site is served over HTTPS. Access to our inbox and to client systems is limited to the people who need it and protected by passwords and, where available, two-factor authentication. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we take reasonable steps and we will tell you if a breach affects you.

This website is for businesses and adults. We do not knowingly collect information from anyone under 18. If you believe a child has sent us information, tell us and we will delete it.

When we change this policy we will change the effective date at the top of the page. If the change is significant we will say so on this page.