Privacy Policy

01About this policy

We are an engineering consultancy operating from Auckland, New Zealand and Colombo, Sri Lanka. This policy applies to all personal information processed through our website, email correspondence, phone enquiries, site visits and project documentation.

It has been prepared with reference to the New Zealand Privacy Act 2020, the Information Privacy Principles (IPPs), and Sri Lanka's Personal Data Protection Act No. 9 of 2022.

02Information we collect

We only collect information that is reasonably necessary for our engineering and commercial functions:

• Contact details you submit through forms — name, work email, phone number, company and preferred hub.
• Project information you choose to share — process descriptions, drawings, P&IDs, photographs and production data.
• Correspondence records — emails, call notes and meeting minutes relating to enquiries or engagements.
• Technical website data — pages viewed, approximate region, browser type and referral source, collected in aggregate.

03How we use your information

Your information is used to respond to enquiries, prepare scope estimates and proposals, deliver contracted engineering services, and maintain quality and safety records required by our ISO 9001:2015 management system.

We do not sell, rent or trade personal information. Marketing communications (such as our quarterly engineering review) are sent only where you have subscribed, and every issue includes a one-click unsubscribe.

04Cookies & analytics

Our website stores a small number of functional cookies — for example your light/dark theme preference — so the site remembers your choice on return visits.

We use privacy-respecting, aggregate analytics to understand which pages are useful. These tools do not build individual advertising profiles, and we do not embed third-party advertising trackers.

05Sharing & disclosure

We disclose personal information only to:

• Trusted service providers acting on our instructions (cloud hosting, email delivery, accounting) under confidentiality obligations.
• Project partners, OEM vendors or contractors where disclosure is necessary to deliver your scope of work.
• Regulators or authorities where required by law, court order, or health & safety obligations.

06International transfers

Because we operate dual hubs, information may be transferred between New Zealand and Sri Lanka, and to overseas suppliers (for example equipment OEMs) engaged on your project.

Before disclosing information overseas we take reasonable steps to ensure the recipient is subject to comparable privacy safeguards, as required by the NZ Privacy Act 2020 (Part 4).

07Retention & security

Project and quality records are retained for the period required by contract, professional indemnity insurance and applicable engineering legislation (typically 7–10 years). Enquiry records that do not become projects are deleted after 24 months.

We protect information with encryption in transit and at rest, role-based access control, multi-factor authentication on company accounts, and regular security reviews.

08Your rights

You may request access to, or correction of, your personal information at any time, and in certain circumstances request deletion or object to processing.

Requests are handled within 20 working days (NZ) or as prescribed under Sri Lankan law. If you are unhappy with our response you may complain to the NZ Office of the Privacy Commissioner or the Sri Lankan Data Protection Authority.

09Children's privacy

Our services are directed at businesses and professionals. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

10Changes & contact

We may update this policy as our services or legal obligations evolve. The version and last-updated date at the top of this page always reflect the current document; material changes will be highlighted on our website.

Privacy questions: marketing@keynoh.com · +94 77 8923472 · 78/14B Nissala Place, Mattegoda, Sri Lanka.