Privacy Policy

1. Overview of This Privacy Notice

   1. This Privacy Notice ("Notice") pertains to Ebony Holdings (Pvt) Ltd, located at 113 Allen Avenue, Dehiwala, Sri Lanka. Ebony Holdings (Pvt) Ltd is the data controller under this Notice.
   2. This Notice outlines how we will handle any personal data collected through your use of this website or any other online platforms managed by us, including social media and applications (collectively referred to as the "Website").
   3. Any updates to this Notice will be posted on this Website or communicated to you via email.
   4. The effective date of this Notice is 15.08.2024.

2. Types of Personal Data We Collect

   1. We gather personal data that you provide, such as when filling out a contact form, registering for an account, using interactive features, subscribing to a service, participating in promotions, ordering products or services, requesting information, or completing surveys. This data may include:
      1. Contact details (e.g., name, postal address, email, and phone number)
      2. Purchase and transaction details
      3. Payment information (e.g., card number, expiration date, security code, billing and delivery addresses)
      4. Customer service interactions (e.g., inquiries, comments, history)
      5. Login credentials (e.g., username and password)
      6. Personal and professional interests, date of birth, marital status, demographics, experiences with our products, and contact preferences
      7. Photos, comments, and other content you provide
      8. Contact information for friends or others you want us to reach out to
      9. Information from third-party service providers
   2. We also collect metadata about your visits to the Website, including traffic data, location data, IP address, browser information, session data, preferences, and communication data.

3. Basis for Processing Your Personal Data

   1. We process your personal data based on the following grounds:
      1. Your consent, such as when you agree by checking a box
      2. Legal obligations, such as compliance with data retention laws for financial reporting
      3. Contractual necessity, such as fulfilling orders
      4. Legitimate interests, including:
         • Market intelligence, product and service promotion, and tailored communication
         • Improving products or services, managing relationships, and internal intelligence sharing
         • Security measures and fraud prevention
         • Industry standards compliance and best practices

4. Purposes for Processing Your Personal Data

   1. We process your personal data for various purposes, including:
      1. Responding to contact form submissions and performing requested tasks
      2. Managing account registration and profiles
      3. Enabling interactive features and updating you on activities
      4. Sending advertisements to existing customers
      5. Sending newsletters to subscribers
      6. Managing marketing promotions and event invitations
      7. Processing orders and payments
      8. Analyzing query responses
      9. Sending marketing information and managing participation in events and surveys
      10. Interacting with you on third-party social networks (subject to their privacy policies)
      11. Complying with legal requirements and enforcing terms of use
   2. We may create profiles to tailor communication and marketing based on your interactions and preferences.
   3. Metadata is used to enhance Website performance, analyze traffic, target marketing, and improve our online presence.

5. Data Disclosure and Transfers

   1. We may disclose your data to partners and processors working on our behalf, ensuring they adhere to adequate data protection standards.
   2. If Ebony Holdings (Pvt) Ltd is acquired, your data may be transferred as part of the transaction.
   3. We may disclose your data to comply with legal obligations or protect rights and safety, including sharing with organizations for fraud prevention and credit risk reduction.
   4. Our Website may link to other sites with their own privacy policies. We are not responsible for these external policies.

6. Data Retention

   1. We retain your personal data for:
      • As long as you consent or until you unsubscribe or delete your account
      • Up to twelve months after the last contact for inquiries or requests
      • For the duration of transactions and warranty periods
      • For ten years for business partners
      • As required by law for bookkeeping or tax purposes

7. Data Necessity

   To enter into a contract with us (e.g., placing an order), you must provide certain personal data. Failure to do so may prevent us from fulfilling the contract.

8. Your Rights

   1. You have the right to:
      • Access, rectify, or delete your personal data
      • Restrict processing, especially for direct marketing
      • Request data portability
   2. You may withdraw your consent at any time.
   3. To exercise these rights, contact us as detailed below.
   4. You also have the right to file a complaint with the relevant authority.

9. Contact Us

   For questions or to exercise your rights, please contact us at:

   • Address: 113 Allen Avenue, Dehiwala, Sri Lanka
   • Telephone: +94 117 546 441
   • Email: [email protected]