Privacy & data use
Privacy Policy
Clear information about how PDPA.COM.LK handles personal data, respects your choices, and safeguards the information entrusted to us.
Our commitment
Privacy should be practical, transparent, and accountable.
We apply data-minimisation and purpose-limitation principles to the information we handle, and we aim to make this policy understandable without sacrificing clarity.
1. Introduction
PDPA.COM.LK is committed to respecting your privacy and handling personal data responsibly. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit our website, use our tools, request advisory support, or otherwise interact with us.
2. Information we collect
We may collect information you provide directly, such as your name, email address, organisation details, enquiries, and assessment responses. We may also collect limited technical information automatically, including device, browser, IP address, pages visited, and usage data needed to operate, secure, and improve our services.
3. How we use information
We use personal data to respond to enquiries, deliver requested resources or services, maintain and improve the website, protect against misuse, understand aggregate service use, and meet applicable legal obligations. We do not sell personal data.
4. Lawful and fair processing
Where Sri Lankan data-protection law applies, we process personal data only for clear and legitimate purposes and on an appropriate lawful basis. Depending on the interaction, this may include consent, steps requested before entering an agreement, compliance with a legal obligation, legitimate interests, or another basis permitted by applicable law.
6. Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security, and record-keeping requirements. When data is no longer needed, we delete, anonymise, or securely archive it as appropriate.
7. Security
We use reasonable technical and organisational measures designed to protect personal data from unauthorised access, loss, alteration, disclosure, or destruction. No internet-based service can guarantee absolute security, so we continually assess and improve safeguards appropriate to the nature of our services.
8. Your privacy rights
Subject to applicable law, you may have rights to request access to, correction of, deletion of, or objection to the processing of your personal data. You may also withdraw consent where processing relies on consent. To make a request, contact us using the details below. We may need to verify your identity before responding.
10. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our practices, services, or legal obligations. The latest version will always be published on this page with an updated effective date.
Privacy requests
Need to ask about your data?
Contact us at info@pdpa.com.lk with the subject line “Privacy Request”. Please describe your request and provide enough information for us to locate and verify the relevant records.