Privacy Policy

Last updated: October 14, 2026

This Privacy Policy describes the policies and procedures of sofianest (“Company”, “We”, “Us” or “Our”) on the collection, use and disclosure of Your information when You use https://sofianest.com/ (the “Website” or “Service”), and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You acknowledge the practices described in this Privacy Policy. Where required by applicable law, We process Your information only where We have a valid legal basis, including Your consent where consent is required.

Interpretation and Definitions

Interpretation

Words with capitalized initial letters have the meanings defined below. These definitions apply whether they appear in singular or plural.

Definitions

  • Account means a unique account created for You to access Our Service or parts of it.
  • Affiliate means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
  • Company refers to sofianest (brand name: sofianest).
  • Cookies are small files placed on Your computer, mobile device or any other device by a website, containing details of Your browsing history on that website, among many other uses.
  • Country refers to Sri Lanka.
  • Device means any device that can access the Service, such as a computer, cell phone or digital tablet.
  • Personal Data (or “Personal Information”) is any information that relates to an identified or identifiable individual. We use both terms interchangeably unless a law uses a specific term.
  • Service refers to the Website.
  • Service Provider means any natural or legal person who processes data on behalf of the Company, including third-party companies or individuals engaged to facilitate the Service, provide it on Our behalf, perform services related to it, or help analyze how it is used.
  • Usage Data refers to data collected automatically, either generated by use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
  • Website refers to sofianest, accessible from https://sofianest.com/.
  • You means the individual accessing or using the Service, or the company or other legal entity on behalf of which that individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Information

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide certain personally identifiable information that can be used to contact or identify You, including but not limited to:

  • Email address
  • First name and last name
  • Billing and order information (such as products or services purchased, billing address and transaction details)
  • Payment information, which is collected and processed by Our third-party payment processors. We do not store full card numbers on Our servers.
  • Communications You send Us, and Your marketing preferences

Usage Data

Usage Data is collected automatically when You use the Service. It may include Your Device’s Internet Protocol (IP) address, browser type and version, the pages You visit, the time and date of Your visit, time spent on pages, unique device identifiers and other diagnostic data.

When You access the Service through a mobile device, We may also collect the type of mobile device, its unique ID, IP address, operating system, mobile browser type and other diagnostic data.

Tracking Technologies, Analytics and Cookies

We use Cookies and similar tracking technologies to track activity on Our Service, store certain information, and improve the Service. These include:

  • Cookies or Browser Cookies. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. If You do not accept Cookies, some parts of Our Service may not work.
  • Web Beacons. Small electronic files (also called clear gifs, pixel tags and single-pixel gifs) that allow Us, for example, to count users who have visited certain pages, measure email engagement and verify system integrity.
  • Analytics tools. We use analytics tools such as Google Analytics to understand how visitors use the Service. These tools may set Cookies and collect Usage Data such as IP address, device information and pages viewed.
  • Advertising and remarketing technologies. We use advertising and remarketing services (see “Advertising and Remarketing” below).

Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on Your device when You go offline, while Session Cookies are deleted when You close Your browser.

Where required by law, We use non-essential Cookies (including analytics, advertising and remarketing Cookies) only with Your consent. You can withdraw or change Your consent at any time through Our cookie preferences tool (where available) or through Your browser or device settings. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

  • Necessary / Essential Cookies Type: Session Cookies. Administered by: Us. Purpose: These Cookies are essential to provide You with services available through the Website, to authenticate users, and to prevent fraudulent use of accounts. Without them, the services You asked for cannot be provided.
  • Cookies Policy / Notice Acceptance Cookies Type: Persistent Cookies. Administered by: Us. Purpose: These Cookies record whether You have accepted the use of Cookies and the consent choices You have made, so We can honor them on future visits.
  • Functionality Cookies Type: Persistent Cookies. Administered by: Us. Purpose: These Cookies remember choices You make, such as login details or language preference, to provide a more personal experience.
  • Analytics / Performance Cookies Type: Persistent Cookies. Administered by: Us and third-party Service Providers (such as Google Analytics). Purpose: These Cookies help Us understand how the Service is used, measure traffic and improve performance.
  • Advertising and Remarketing Cookies Type: Persistent Cookies. Administered by: Third-party advertising partners. Purpose: These Cookies are used to show You ads, measure ad effectiveness, and show You relevant ads on other websites after You have visited Ours.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

  • To provide and maintain Our Service, including monitoring its usage.
  • To manage Your Account: to manage Your registration as a user of the Service and give You access to functionalities available to registered users.
  • To process purchases and payments: to process orders, payments, refunds and the performance of any contract with Us through the Service.
  • To contact You: by email, telephone, SMS or other electronic communication, including push notifications, regarding updates, security notices and informative communications related to the Service, products or contracted services.
  • To send marketing communications: to provide You with news, special offers and general information about goods, services and events similar to those You have purchased or inquired about. We send marketing communications only where permitted by law. Where prior consent is required (for example, in the EEA and the UK), We send them only with Your consent; otherwise, We may send them until You opt out. You may opt out or withdraw consent at any time using the unsubscribe link in any marketing email or by contacting Us.
  • To show ads and measure advertising: to display advertising, including interest-based and remarketing ads, and measure campaign effectiveness.
  • To analyze and improve the Service: for data analysis, identifying usage trends, and evaluating and improving Our Service, products, marketing and Your experience.
  • To manage Your requests: to attend to and manage Your requests to Us.
  • For security and fraud prevention: to detect, prevent and investigate fraud, abuse and security incidents.
  • For business transfers: to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of Our assets, in which Personal Data held by Us is among the assets transferred.

We may share Your Personal Data in the following situations:

  • With Service Providers: such as analytics providers, email delivery providers, payment processors, hosting providers and advertising partners, to monitor and analyze use of the Service, process payments, send communications and deliver advertising.
  • For business transfers: in connection with, or during negotiations of, any merger, sale of Company assets, financing or acquisition of all or part of Our business.
  • With Affiliates: in which case We will require them to honor this Privacy Policy.
  • With other users: if the Service offers public areas, information You share there may be viewed by all users and publicly distributed.
  • With Your consent: for any other purpose with Your consent.

Email Communications

We send emails to users, including transactional emails (such as order confirmations, receipts, account and security notices) and, where permitted, marketing emails. We may use web beacons in emails to understand whether emails are opened and links are clicked. You can unsubscribe from marketing emails at any time; transactional emails related to Your Account or purchases may still be sent.

Payments

If You purchase products or services through the Service, Your payment details are handled by third-party payment processors. We receive limited information about the transaction (for example, confirmation of payment, amount and the last digits of the payment method) but not Your full payment card details. The processors’ use of Your information is governed by their own privacy policies.

Advertising and Remarketing

We show ads on the Service and use remarketing services for marketing and advertising purposes. Remarketing services allow Us and our advertising partners to show You ads based on Your past visits to Our Service. These partners may place Cookies or pixels on Your Device and collect information about Your browsing activity, which may be combined with other information they hold about You.

You can opt out of interest-based advertising by:

Text Messages Privacy Notice

You have the option to receive text (SMS) messages from Us. If You opt in, We will collect and store information You provide in connection with text messaging, such as Your phone number, the date and method of Your consent, and message delivery information.

No mobile information will be shared with or sold to third parties or affiliates for marketing or promotional purposes. Phone numbers and consent records collected for texting are not shared with anyone, except Service Providers that technically need to handle them to deliver the texts.

Consent to receive text messages is not a condition of any purchase or use of Our Service. If You consent, You agree to receive messages related to customer support, account notifications, delivery updates, authentication, security alerts, and marketing and promotional offers.

Reply STOP to opt out. Reply HELP for support. Message & data rates may apply. Messaging frequency may vary. Carriers are not liable for delayed or undelivered messages.

Retention of Your Personal Data

We retain Your Personal Data only as long as necessary for the purposes set out in this Privacy Policy, to comply with legal obligations, resolve disputes and enforce Our agreements. Where possible, We apply shorter retention periods and/or reduce identifiability by deleting, aggregating or anonymizing data. Unless otherwise stated, the periods below are maximums.

  • Account Information: for the duration of Your Account relationship plus up to 24 months after closure.
  • Customer Support Data: support tickets, correspondence and chat transcripts for up to 24 months after ticket closure.
  • Order and Payment Records: for as long as required by tax, accounting and other applicable laws.
  • Usage Data: website analytics data (cookies, IP addresses, device identifiers) and server logs for up to 24 months from collection, and longer only where necessary for security, fraud prevention or legal compliance.
  • Marketing Data: until You unsubscribe or withdraw consent, after which We keep a minimal record to honor Your opt-out.

We may retain Personal Data beyond these periods where required by law, to establish, exercise or defend legal claims, at Your explicit request, or where data exists in backup systems scheduled for routine deletion. When retention periods expire, We securely delete or anonymize Personal Data. Residual copies may remain in encrypted backups for a limited period and are not restored except where necessary for security, disaster recovery or legal compliance. Anonymized data may be retained indefinitely for research and analytics. You may ask how long We will retain Your Personal Data by contacting Us.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company’s operating offices and in any other places where the parties involved in the processing are located. This means it may be transferred to, and maintained on, computers outside Your state, province, country or other jurisdiction, where data protection laws may differ.

Where required by applicable law, We ensure that international transfers are subject to appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions, and supplementary measures where relevant. We take all steps reasonably necessary to ensure Your data is treated securely and in accordance with this Privacy Policy.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data We have collected about You. You may update, amend or delete Your information at any time by signing in to Your Account (if You have one) and visiting the account settings, or by contacting Us at privacy@sofianest.com. We may need to retain certain information where We have a legal obligation or lawful basis to do so.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement

Under certain circumstances, the Company may disclose Your Personal Data if required by law or in response to valid requests by public authorities (e.g. a court or government agency).

Other Legal Requirements

The Company may disclose Your Personal Data in the good-faith belief that it is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of the Company
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of users of the Service or the public
  • Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us, but no method of transmission over the Internet or method of electronic storage is 100% secure. We use commercially reasonable means to protect Your Personal Data but cannot guarantee its absolute security.

GDPR Privacy (European Economic Area, UK and Switzerland)

Legal Bases for Processing

If You are in the EEA, the UK or Switzerland, We process Your Personal Data on the following legal bases:

  • Consent: for example, non-essential Cookies, analytics, advertising and remarketing, and marketing communications where consent is required.
  • Performance of a contract: to provide the Service, manage Your Account and process purchases.
  • Legitimate interests: for example, securing and improving the Service, preventing fraud, and direct marketing to existing customers where permitted, provided Your rights do not override those interests.
  • Legal obligation: to comply with applicable laws, such as tax and accounting requirements.
  • Vital interests or public interest: in rare cases, where necessary to protect someone’s vital interests.

Your Rights Under the GDPR

Subject to applicable law, You have the right to:

  • Access Your Personal Data and receive a copy of it.
  • Rectify inaccurate or incomplete Personal Data.
  • Erase Your Personal Data (“right to be forgotten”).
  • Restrict the processing of Your Personal Data.
  • Object to processing based on legitimate interests, and to direct marketing at any time.
  • Data portability: receive Your Personal Data in a structured, commonly used, machine-readable format and transmit it to another controller.
  • Withdraw consent at any time, without affecting the lawfulness of prior processing.
  • Not be subject to solely automated decisions with legal or similarly significant effects. We do not make such decisions.
  • Lodge a complaint with Your local data protection supervisory authority.

To exercise these rights, email privacy@sofianest.com. We will respond within one month, which may be extended where permitted by law. We may need to verify Your identity before fulfilling a request.

California Privacy Rights (CCPA / CPRA)

This section applies to California residents and supplements the rest of this Privacy Policy. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, You have the rights described below.

Categories of Personal Information We Collect

  • Identifiers: name, email address, IP address, online identifiers and device identifiers. Collected: Yes.
  • Customer records and commercial information: billing details, purchase history and transaction records. Collected: Yes.
  • Internet or other network activity: browsing history, interactions with the Service and with ads. Collected: Yes.
  • Geolocation data: approximate location derived from IP address. Collected: Yes.
  • Inferences: preferences and characteristics drawn from the information above for analytics and advertising. Collected: Yes.
  • Sensitive personal information (such as precise geolocation, government IDs, or financial account log-in credentials): We do not intentionally collect this, and We do not use or disclose sensitive personal information for purposes other than those permitted by the CPRA.

We collect this information directly from You, automatically from Your Device, and from Service Providers (such as analytics and payment providers). We use and disclose it for the business and commercial purposes described in “Use of Your Personal Data” above, and may disclose it to Service Providers, advertising partners, Affiliates and as required by law.

Sale and Sharing of Personal Information

We do not sell Personal Information for money. However, because We use advertising, analytics and remarketing technologies, some of Our data practices (such as making identifiers and browsing activity available to advertising partners) may be considered a “sale” or “sharing” for cross-context behavioral advertising under California law. We do not knowingly sell or share the Personal Information of consumers under 16 years of age.

You have the right to opt out of the sale or sharing of Your Personal Information. To do so, use the “Do Not Sell or Share My Personal Information” link or cookie preferences tool on Our Website (where available), or email privacy@sofianest.com. We also honor opt-out preference signals such as Global Privacy Control (GPC) where required by law.

Your California Rights

  • Right to know the categories and specific pieces of Personal Information We have collected, the sources, the purposes, and the categories of third parties to whom We disclose it.
  • Right to delete Personal Information We have collected, subject to exceptions.
  • Right to correct inaccurate Personal Information.
  • Right to opt out of the sale or sharing of Personal Information.
  • Right to limit the use and disclosure of sensitive personal information, where applicable.
  • Right to non-discrimination: We will not discriminate against You for exercising Your rights.

To submit a request, email privacy@sofianest.com. We will verify Your identity before responding, and We aim to respond within 45 days (extendable once by a further 45 days where permitted). You may use an authorized agent to submit a request on Your behalf, and We may require proof of their authorization. You may make up to two “right to know” requests in a 12-month period.

Under California’s “Shine the Light” law (Civil Code Section 1798.83), California residents may request information about disclosures of Personal Information to third parties for their direct marketing purposes. Contact Us at the email above to make such a request.

CalOPPA (California Online Privacy Protection Act)

CalOPPA requires commercial websites and online services that collect Personal Information from California residents to post a privacy policy. In accordance with CalOPPA:

  • You may visit Our Website anonymously, without providing Personal Data.
  • A link to this Privacy Policy is available on Our Website, and any significant changes will be posted on this page.
  • You can review and request changes to Your Personal Information by contacting Us at privacy@sofianest.com or through Your Account settings.
  • Do Not Track: Our Website does not currently respond to “Do Not Track” browser signals, as there is no uniform standard for them. We do, however, honor Global Privacy Control signals where required by applicable law.
  • Third-party tracking: We allow third parties, such as analytics and advertising partners, to collect information about Your online activities over time and across websites, as described in this Privacy Policy.

Children’s and Minors’ Privacy

The Service is not directed to, and We do not knowingly collect Personal Information from, anyone under the age of 16.

If You are a parent or guardian and believe Your child has provided Us with Personal Information, please contact Us. If We become aware that We have collected Personal Information from anyone under 16, We will take steps to remove it from Our servers as soon as reasonably possible.

Some countries and states set a higher age at which an individual can consent to the processing of their own Personal Information. Where We rely on consent and the applicable law sets an age higher than 16, We may require the consent of that user’s parent or guardian.

Links to Other Websites

Our Service may contain links to websites not operated by Us, including advertisers’ sites. If You click a third-party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over, and assume no responsibility for, the content, privacy policies or practices of third-party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page, and by email and/or a prominent notice on Our Service prior to the change becoming effective, and We will update the “Last updated” date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically. Changes are effective when they are posted on this page.

Contact Us

If You have any questions about this Privacy Policy or wish to exercise Your privacy rights, You can contact Us: