Privacy Policy

General Information


                           l (‘we’, ‘us’, and ‘our’) take data protection very seriously. We are committed to respecting your privacy and protecting your personal data in accordance with data protection law of Sri Lanka, and standard data protection regulations. It is our intention to only collect the minimum information required from you. If you believe we have collected excessive information about you, please contact us to raise any concerns you may have.
What is Personal Information?

Personal information is anything that enables you to be identified or identifiable, such as your:

First and last names
• Postal and email addresses
• Telephone number(s)
• Date of birth
• Date of wedding anniversary
• Identity documents (e.g. passport & driving licence)
• Identity numbers (e.g. National Insurance and bank accounts)
• Career & educational documents (e.g. CVs & qualifications)
• Contact information

Your personal information is sometimes called ‘personal data’. We collectively refer to handling, collecting, protecting or storing your personal information as ‘processing’.

Using Your Personal Information

When you provide personal information to us, we may use it for any of the purposes described below
or as stated at the point we collect it from you (or as may be obvious to you from the context of
collection), including:

• To make contact with you
• To provide information, items or services that you have requested
• To manage our relationship with you
• To develop our businesses and services
• To consider whether to offer someone employment with us
• To administer and manage our website
• Any other purposes for which personal information has been provided to us, including any of
   the purposes given in the ‘Collecting Your Personal Information’ section above.

We also collect and process data about how you interact with the emails you have consented for us
to send you using tracking pixels. This includes where and when you open the emails and what content you click on.
We do not collect personal information for sale to third parties.

Legal Grounds for Processing Your Personal Information

We rely on one or more of the following legal grounds when processing your personal information:

• To perform our contractual obligations to you; and/or
• To satisfy any legal and regulatory obligations to which we are subject; and/or
• To satisfy our legitimate interests in the effective delivery of information and services to you and in
   the effective and lawful operation of our businesses (where this does not interfere with your rights); and/or
• When you have agreed (consented) to us processing your personal information.

Security of Your Personal Information

We have implemented generally accepted standards of technology and operational security in order to protect your personal information from loss and misuse. Only authorized persons are provided access to personal information we have collected, and such individuals have contractually agreed to maintain the confidentiality of this information. Although we use appropriate security measures once we have received your personal information, the transmission of data over the internet (including by e-mail) is never completely secure. We endeavors to protect personal information, but we cannot guarantee the security of data transmitted to or by us.

Transferring, Sharing and Disclosing Your Personal Information

We may transfer, share or disclose the personal information we collect from you to third parties (other organisations or individuals) for:

• The purposes for which that personal information has been submitted
• The purposes listed above under ‘Using Your Personal Information’
• Other internal or administrative purposes
• As agreed between you and us.

We may transfer share or disclose personal information to third party service providers in the following categories: internet providers, companies specializing in IT and telematics services; companies that carry out marketing activities, including social media organizations. These third parties may use subcontractors (known as sub-processors) that have access to your personal information. We only use third parties that are legally and contractually bound to maintain what we consider
to be appropriate levels of security and confidentiality.

We may also disclose personal information to third parties under the following circumstances:

• When explicitly requested by you
• When required to deliver goods or services requested by you
• When required to facilitate our events that you have asked to attend which are hosted by a third party
• As otherwise set out in this policy.

We may also disclose your personal information, without your knowledge or
consent, to law enforcement and other government agencies and other third
parties, as required by and/or in accordance with applicable law.

Our Website

We collect personal information from you when you use our website Our website links to third-party websites not controlled by us and which do not operate under our privacy practices. When you link to third-party websites, our privacy policy no longer applies. We encourage you to review each thirdparty website’s privacy policy before disclosing any personally information.