1. Introduction
Welcome to Itheon (https://itheon.lk), the official product website for Itheon Performance Monitor (ItheonPM), an enterprise IT infrastructure, network, server, and application performance monitoring solution.
We are committed to protecting personal information, respecting privacy, and maintaining appropriate information security practices.
This Privacy Policy explains how information is collected, used, processed, stored, and protected when visitors interact with the Itheon website or when authorized services are provided in connection with ItheonPM.
This policy covers website-related personal information and relevant data handling practices associated with ItheonPM. Customer-specific licensing agreements, data processing agreements, and service contracts may establish additional obligations.
2. Information We Collect
2.1 Website Information
When visitors interact with the Itheon website, we may collect information voluntarily submitted through contact forms, product inquiries, demonstration requests, and other communication channels.
This information may include:
- Name and designation
- Company or organization name
- Email address
- Telephone number
- Inquiry details and communication records
2.2 Technical Website Information
Certain technical information may be collected automatically when accessing the website, including:
- IP address
- Browser and operating system information
- Date and time of access
- Website usage and navigation information
- Security and diagnostic logs
2.3 ItheonPM Monitoring Data
ItheonPM is designed to collect and process technical information from authorized infrastructure and monitored systems.
Depending on customer configuration, monitoring information may include:
- Network device IP addresses and hostnames
- Server and application performance metrics
- Network availability and bandwidth statistics
- Infrastructure events and alerts
- System status and operational logs
- Device inventory and configuration information
Monitoring information is processed according to the customer's deployment architecture, enabled features, and monitoring configuration.
Some monitoring information may constitute personal data where it identifies or can be linked to an individual.
3. How We Use Information
Information collected through the Itheon website may be used to:
- Respond to product inquiries and customer communications
- Provide product demonstrations and technical information
- Deliver authorized technical support and implementation services
- Maintain website security and operational functionality
- Improve website content, accessibility, and user experience
- Communicate product updates and relevant service information
- Meet applicable legal and contractual obligations
Personal information is processed only for appropriate purposes and in accordance with applicable legal requirements.
Where required, we rely on a valid legal basis for processing personal information.
4. ItheonPM Product Data and Customer Control
ItheonPM is an enterprise monitoring software solution that may be deployed within customer-controlled IT environments.
In customer-hosted deployments, monitoring data is generally stored and processed within the infrastructure designated and managed by the customer.
Customers are responsible for determining the systems to be monitored, granting appropriate access permissions, configuring monitoring activities, and establishing applicable data retention policies.
ItheonPM does not automatically acquire ownership of customer monitoring information.
Access to customer monitoring systems by authorized technical support personnel, where required, is subject to customer authorization, applicable agreements, and relevant security procedures.
The handling of monitoring data may vary depending on the selected deployment model, enabled integrations, and customer-specific configurations.
5. Data Security
We recognize the importance of maintaining appropriate security controls to protect information from unauthorized access, disclosure, alteration, or destruction.
Depending on the relevant system and configuration, security measures may include:
- Authentication and role-based access controls
- Secure communication protocols
- Restricted administrative access
- Security logging and monitoring
- Appropriate system maintenance and security updates
- Organizational and technical security safeguards
Customers are responsible for maintaining the security of their own infrastructure, monitoring credentials, user accounts, and deployment environments.
Although reasonable safeguards may be implemented, no electronic system or communication method can be guaranteed to be completely secure.
6. Data Sharing and Disclosure
We do not sell personal information collected through the Itheon website.
Information may be shared with authorized personnel or service providers where necessary to operate the website, respond to customer requests, deliver contracted services, or fulfill legal obligations.
Information may also be disclosed where required by applicable law or a valid request from a competent authority.
Where third-party service providers process personal information on our behalf, appropriate safeguards will be applied as required by applicable law.
Customer monitoring information is handled according to the relevant customer agreement, deployment configuration, and authorized support arrangements.
7. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, meet legitimate business requirements, comply with applicable laws, or satisfy contractual obligations.
Retention periods may vary depending on the type of information and its intended purpose.
For customer-hosted ItheonPM deployments, monitoring data retention is generally determined by the customer's configuration, infrastructure capacity, and applicable organizational policies.
When information is no longer required, it will be deleted, anonymized, or otherwise handled in accordance with applicable requirements.
9. Privacy Rights
Subject to applicable data protection laws, individuals may have rights concerning their personal information, including:
- Requesting access to personal information
- Requesting correction of inaccurate information
- Requesting deletion in applicable circumstances
- Withdrawing consent where processing relies on consent
- Objecting to or requesting restrictions on certain processing activities
- Submitting privacy-related complaints or inquiries
Requests will be assessed and handled in accordance with applicable legal requirements.
Where information is controlled by an ItheonPM customer, privacy-related requests concerning that information may need to be directed to the relevant customer organization.
10. Third-Party Technologies and Services
The Itheon website and ItheonPM software may interact with third-party technologies, infrastructure platforms, applications, or external services.
Such technologies may operate under their own terms and privacy policies.
These include Google reCAPTCHA, which is used on the website's contact form as described in Section 8.
We are not responsible for the independent privacy practices of third parties outside our control.
Customers are responsible for reviewing the data protection implications of third-party integrations enabled within their own monitoring environments.
11. International Data Transfers
Where personal information is transferred to or accessed from locations outside Sri Lanka, applicable legal requirements and appropriate safeguards will be considered and implemented where required.
For customer-hosted ItheonPM installations, the location of monitoring data storage and processing generally depends on the customer's selected infrastructure and deployment configuration.
12. Compliance with Applicable Laws
We aim to handle personal information in accordance with applicable privacy and data protection legislation, including relevant provisions of Sri Lanka's Personal Data Protection Act, No. 9 of 2022, as amended and brought into operation.
Our privacy and information security practices may be reviewed and updated in response to applicable legal, regulatory, and operational requirements.
13. Children's Privacy
The Itheon website and ItheonPM software are intended primarily for businesses, organizations, and IT professionals.
Our services are not directed toward children, and we do not knowingly collect personal information through activities specifically targeted at children.
If we become aware of inappropriate collection of children's personal information, we will take reasonable steps to address the matter in accordance with applicable law.
14. Updates to This Privacy Policy
We may revise this Privacy Policy periodically to reflect changes in our website, products, services, business operations, or applicable legal requirements.
The latest version will be published at https://itheon.lk/privacy-policy.
Where legally required, we will provide additional notice or obtain consent before implementing relevant changes.
15. Contact Information
For questions, concerns, or requests relating to this Privacy Policy or the handling of personal information, please contact:
Itheon – Enterprise IT Infrastructure Monitoring
Bluechip Technical Services (Pvt) Ltd
Email: info@bluechip.lk
Website: https://itheon.lk
Company website: https://bluechip.lk
Address: No. 108, Nawala Road, Nugegoda 10250, Sri Lanka.
Please include sufficient details in your inquiry so that we can identify and appropriately respond to your request.
© 2026 Bluechip Technical Services (Pvt) Ltd. All rights reserved.