Privacy Policy

At Alterity (Pvt) Ltd, we are committed to safeguarding the personal information of our customers and users in compliance with applicable data protection laws in Sri Lanka and international standards, including the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka, and, where applicable, the General Data Protection Regulation (GDPR).

This Privacy Policy outlines how we collect, use, disclose, and protect your personal data when you use our platform, mobile application, or interact with our NFC business card services.

1. Information We Collect

When you use our platform, we may collect the following categories of information:

1.1. Personal Data Provided by You

• Full name, email address, contact number, mailing/billing address
• Company, organization, role, and professional profile information
• Profile data submitted through corporate onboarding, employee management, or public profile forms
• Any business or billing contact details shared during commercial discussions or account setup

1.2. Automatically Collected Data

• Device identifiers, IP address, browser type, access times, referring URLs
• Usage statistics and activity logs via cookies and analytics tools

1.3. Optional Information

• User feedback, support queries, preferences, survey responses

2. How We Use Your Information

Your data will be used only for legitimate business purposes, including:

• Creating, administering, and supporting corporate workspaces and public organization profiles
• Managing organization accounts, employee records, permissions, and related workflows
• Customer service and support (queries, complaints, status updates)
• Marketing communications (where consent is provided)
• Improving system performance, UI/UX design, and user engagement
• Complying with legal and regulatory obligations

3. Legal Basis for Processing (for International Users)

Where applicable, our legal grounds for processing include:

• Your consent (e.g., for marketing)
• Contract performance (e.g., when we onboard or support an organization)
• Legal obligations (e.g., tax, fraud prevention)
• Legitimate interests (e.g., product improvements, security)

4. Data Sharing and Disclosure

We do not sell or rent your personal data. Your data may be shared only in the following limited circumstances:

• Service Providers: Trusted third parties who help us with website hosting, analytics, infrastructure, communications, or customer support. They are bound by confidentiality agreements.
• Legal Compliance: When required by a court order, law enforcement authority, or applicable law.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred with notice to you.

5. Cross-Border Data Transfers

Where applicable, your personal data may be transferred to jurisdictions outside Sri Lanka, including countries that may not have equivalent data protection laws. We take steps to ensure your data receives appropriate protection via standard contractual clauses or other legal mechanisms.

6. Data Security

We apply industry-standard administrative, technical, and physical safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction. These include:

• SSL encryption
• Secure server infrastructure
• Access controls and audit logs

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enhance platform functionality
• Track usage analytics
• Deliver personalized content

You can disable cookies in your browser settings, but this may affect your user experience.

8. Your Rights

Subject to applicable laws, you may have the right to:

• Access the personal data we hold about you
• Request rectification or erasure
• Object to or restrict processing
• Withdraw consent (for marketing)
• Lodge a complaint with the Data Protection Authority of Sri Lanka

To exercise your rights, contact us via the details below.

9. Data Retention

We retain your data only as long as necessary for the purposes set out in this Policy or as required by law (e.g., taxation, fraud prevention, contractual obligations).

10. Policy Updates

We may amend this Privacy Policy to reflect changes in legal, regulatory, or operational requirements. Changes will be posted on our website with the "Last Updated" date. Continued use of the platform constitutes your acceptance.

11. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact us at: