Privacy Policy

Thank you for visiting Two Zero Eight ("208," "Two Zero Eight," "we," "our," or "us"). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit www.twozeroeight.com (the "Site") or engage with any of our marketing, web‑management, or virtual‑assistant services (collectively, the "Services").

Please read this Privacy Policy carefully to understand our practices. By accessing or using the Site or Services, you agree to the collection and use of your information in accordance with this Policy. If you do not agree, please do not use the Site or Services.

Personal information we collect:

We collect information in three main ways:

1.1 Information You Provide to Us

• Contact details such as your name, email address, phone number, company, and job title when you fill out our web forms, schedule a call, sign up for newsletters, or otherwise communicate with us.

• Project information—including campaign objectives, budgets, creative assets, or technical credentials—needed to deliver the Services.

• Billing details such as postal address, tax IDs, or payment‑method tokens (processed by third‑party payment processors; we do not store full card numbers).

1.2 Information Collected Automatically

• Device identifiers, IP address, browser type, operating system, referring URLs, and timestamps when you access the Site.

• Usage data such as page views, clicks, scroll depth, time on page, and conversion events captured through cookies and similar technologies (e.g., pixels, local storage).

• Log files generated by our web server and security systems (e.g., Cloudflare).

1.3 Information from Third Parties

• Analytics and advertising partners (e.g., Google Analytics, Meta, LinkedIn) may provide aggregated insights into how you interact with our content.

• Social‑media platforms if you choose to interact with us via social login or plugins.

• Publicly available sources such as company websites and professional networking sites to enrich lead records.

How We Use Your Information

We process personal information for the following purposes:

• To provide, operate, maintain, and improve the Site and Services.

• To communicate with you about inquiries, proposals, campaigns, or support requests.

• To create or administer your client account and process payments.

• To personalize content, ads, or newsletters based on your interests and past interactions.

• To monitor and analyze usage trends, measure campaign effectiveness, and develop new features.

• To detect, prevent, or investigate fraud, security incidents, or illegal activity.

• To comply with legal obligations, enforce our agreements, or protect the rights, property, or safety of Two Zero Eight, our clients, or others.

Legal Bases for Processing (EEA/UK Visitors)

If you reside in the European Economic Area (EEA) or the United Kingdom, we rely on one or more of the following legal bases when processing your personal data:

• Contractual necessity – to fulfill a contract or take steps at your request before entering into a contract.

• Legitimate interests – to pursue our legitimate business interests in a way that does not override your rights and freedoms (e.g., marketing, analytics, network security).

• Consent – where you give us explicit permission (e.g., cookies that are not strictly necessary, email marketing).

• Legal obligation – to meet regulatory or statutory requirements.

Cookies & Similar Technologies

We use first‑ and third‑party cookies, web beacons, and local‑storage objects to:

• Remember your preferences and session state;

• Understand how visitors navigate our Site;

• Provide analytics and measurement;

• Serve targeted advertisements on third‑party platforms.

You can control cookies through your browser settings, opt‑out links in our cookie banner, or industry frameworks such as the Digital Advertising Alliance (DAA) and the European Interactive Digital Advertising Alliance (EDAA). Disabling cookies may affect Site functionality.

Data Retention

We keep personal information only as long as necessary for the purposes outlined in this Policy, unless a longer retention period is required or permitted by law (e.g., tax, accounting, or legal compliance). When no longer needed, data will be securely deleted or anonymized.

Sharing & Disclosure

We do not sell or rent your personal information. We may share it:

• Service Providers – with trusted vendors who perform services for us (e.g., web hosting, analytics, email delivery, payment processing) under confidentiality agreements.

• Business Transfers – as part of any merger, acquisition, or asset sale. You will be notified if your data becomes subject to a different privacy policy.

• Legal & Safety – to comply with applicable law or respond to valid legal process; to protect the rights or safety of Two Zero Eight, our clients, or the public.

• With Your Consent – or at your direction.

International Data Transfers

Two Zero Eight is headquartered in Sri Lanka with team members and infrastructure in multiple jurisdictions. If you access our Site or Services from outside Sri Lanka, be aware that your information may be processed in—and transferred to—countries whose data‑protection laws may differ from your own. Where required, we use Standard Contractual Clauses or rely on adequacy decisions to safeguard cross‑border transfers.

Data Security

We employ administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include HTTPS encryption, secure server configurations, access controls, and regular security audits. No Internet transmission or storage system is 100% secure, so we cannot guarantee absolute security.

Your Rights & Choices

Depending on your location, you may have the right to: • Access, correct, or delete personal information we hold about you; • Restrict or object to certain processing; • Receive a copy of your data in a portable format; • Withdraw consent at any time (this does not affect processing already undertaken); • Lodge a complaint with a supervisory authority.

To exercise these rights, please contact us using the details in Section 12.

California Residents (CCPA/CPRA) – You have the right to know what personal information we collect, the right to request deletion, the right to opt out of "sharing" for cross‑context behavioral advertising, and the right not to be discriminated against for exercising your privacy rights. You (or your authorized agent) may submit requests via email or our web form. We will verify your identity before fulfilling your request.

Do Not Track Signals

Our Site does not respond to browser “Do Not Track” (DNT) signals. However, we honor global privacy‑control (GPC) signals for California residents where technically feasible.

Children’s Privacy

Our Site and Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us so we can delete it.

External Links

Our Site may contain links to third‑party websites. We do not control—and are not responsible for—the content or privacy practices of such sites. We encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this Policy periodically to reflect changes in our practices or applicable laws. If we make material changes, we will post a notice on this page and update the "Last updated" date. Your continued use of the Site or Services after any change constitutes acceptance of the revised Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Two Zero Eight Attn: Privacy Team Email: hello@twozeroeight.com Colombo, Sri Lanka

We appreciate the trust you place in Two Zero Eight and are committed to safeguarding your privacy.