Privacy Policy

This Privacy Policy explains how Code Studio Global (Pvt) Ltd (“Code Studio Global”, “Zimozo”, “we”, “us” or “our”), the operator of the Zimozo business platform, handles personal information you share with us through our websites, lead forms, advertisements, messaging channels and services.

Last updated: 18 October 2026.

1. Who we are

Zimozo is a cloud business management platform (point of sale, inventory, accounting, CRM, HR and related modules) owned and operated by Code Studio Global (Pvt) Ltd, a company incorporated in Sri Lanka. We operate the websites zimozo.lk, zimozo.com and zimozo.qa, and serve customers in Sri Lanka, Qatar and other countries. Code Studio Global is the controller responsible for the personal information described in this policy.

2. The information we collect

Information you give us

• Contact and enquiry details — your name, phone number, email address, business or company name, and anything you choose to tell us when you contact us, request a demo or a quotation, or fill in a form.
• Advertising lead forms — when you submit one of our lead forms on Facebook or Instagram (Meta Lead Ads), on TikTok, or on our websites, we receive the details you entered on that form, which typically include your name, phone number, email address and business name.
• Messaging — when you message us on WhatsApp, SMS or email, we receive your message, your phone number or email address, and our conversation history so we can assist you.
• Account and service data — if you become a customer, the information needed to set up and run your Zimozo account.

Information we collect automatically

• Usage and device data — basic technical information such as your IP address, browser type, pages viewed and referring source, collected through standard web logs and cookies to keep our sites secure and working.

3. How we use your information

• To respond to your enquiry, arrange demonstrations and prepare quotations or proposals.
• To provide, operate, support and improve the Zimozo platform and our services.
• To send you information you have asked for, and — where you have agreed, or where permitted by law — relevant updates about our products and offers. You can opt out at any time.
• To keep our websites and services secure, prevent fraud and misuse, and meet our legal and accounting obligations.

4. Our lawful basis and your consent

We process your information on the basis of your consent (for example, when you submit a lead form or opt in to messages), to take steps at your request before entering into a contract, to perform a contract with you, and to pursue our legitimate interest in running and growing our business responsibly. Where we rely on consent, you may withdraw it at any time by contacting us or by using the opt-out methods below.

5. How we share your information

We do not sell your personal information. We share it only with:

• Service providers who act for us, such as Meta Platforms (Facebook and Instagram, including WhatsApp Business), TikTok, SMS gateways (for example Hutch in Sri Lanka, and Twilio), email providers, our hosting and infrastructure providers, and payment gateways — strictly to deliver the service you have asked for.
• Our team, so the right person can follow up with you.
• Authorities or advisors, where we are required to by law, or to establish, exercise or defend legal claims.

Some of these providers operate outside Sri Lanka and Qatar, so your information may be processed in other countries. Where that happens we take reasonable steps to ensure it remains protected.

6. Messaging and opt-out

If you contact us on WhatsApp or SMS, or opt in to receive messages, you can stop at any time: reply STOP to any marketing SMS, tell us on WhatsApp that you no longer wish to be contacted, or email us using the details below. We honour opt-out requests promptly.

7. How long we keep it

We keep your information only for as long as needed for the purposes above — to respond to you, to provide our services, and to meet legal, tax and accounting requirements — after which it is deleted or anonymised.

8. How we protect it

We use appropriate technical and organisational measures, including access controls and encryption in transit, to protect your information against loss, misuse and unauthorised access. No system is perfectly secure, but we work to keep your data safe and to respond quickly if an issue arises.

9. Your rights

You may ask us to:

• access the personal information we hold about you;
• correct it if it is wrong or out of date;
• delete it, where we are not required to keep it;
• stop using it for marketing; and
• withdraw a consent you previously gave.

To exercise any of these, contact us using the details below. We will respond within a reasonable time. These rights are provided in line with Sri Lanka's Personal Data Protection Act and, for our Qatar operations, applicable Qatari data protection law.

10. Cookies

Our websites use essential cookies to function and may use analytics cookies to understand how the sites are used. You can control or delete cookies through your browser settings; disabling some cookies may affect how the sites work.

11. Children

Our services are intended for businesses and are not directed at children. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be available at this page, with the “Last updated” date above showing when it last changed.

13. Contact us

If you have any question about this policy, or wish to exercise your rights, contact us: