Local Country Addendum - Sri Lanka

This Local Country Addendum for Sri Lanka (“Sri Lanka Addendum”) applies in relation to the processing of personal data of individuals falling within the scope of Section 2 of the  Personal Data Protection Act, No. 9 of 2022 (“PDPA”) by Fortude Sri Lanka.

Fortude Sri Lanka shall comply with the PDPA when processing your Personal Data and shall not use your Personal Data for any purposes which are not in this Privacy Policy. Detailed information on the PDPA can be found at: https://www.icta.lk/data-protection-legislation-overview

Exercise of your Data Protection Rights

You may exercise any of your data protection rights as stipulated in the Privacy Policy:

  1. If you are above 18 years of age;
  2. Where you are a minor, by a parent or a person who has parental authority over you or has been appointed as your legal guardian;
  3. Where you are physically or mentally unfit, by a personal who has been appointed as your guardian or administrator by a court of law;
  4. Except in items 2 and 3 above, by a person duly authorized in writing by you to make a request; or
  5. By your legal heir within a period of 10 years from your demise.

1.1.  What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights), which shall include your full name and National Identity Card (NIC) Number/Passport Number. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you via telephone or text to ask you for further information in relation to your request to speed up our response.

1.2.  Time limit to respond

We will respond to your request as soon as reasonably possible. In the event we are not able to respond to your request within thirty (30) days after receiving your request, we will inform you before the deadline.

If we are unable to provide you with any Personal Data or to make a correction you have requested, we shall inform you of the reasons, unless we are not required to do so under the PDPA.

Personal Data Request Fees
We may have the right to charge fees which are directly related to and necessary for the processing of any Personal Data Request. Where a fee is charged, we shall inform you of the details of such fees and the reasons for imposing the same.

Complaints and Right of Appeal
You also have the right to lodge a complaint with a supervisory authority, if you consider that the processing of your personal data infringes the PDPA. If you are aggrieved by the decision of the supervisory authority, you may make an appeal to the Court of Appeal within 30 days of the decision, or as otherwise specified under the PDPA. We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us beforehand.

Amendments to the Sri Lanka Addendum
Fortude Sri Lanka reserves the right at any time to add to, change, update or modify this Sri Lanka Addendum. These changes will be notified on the website and will be effective immediately upon posting. If we make material changes to the Sri Lanka Addendum, we may also let you know via email.

This Sri Lanka Addendum was last updated on 1 September 2024.