Privacy Notice
& Consent
Asha Securities Limited (ASL) — Data Protection PolicyDOCUMENT TYPE
Privacy Notice
REVIEW FREQUENCY
Annually
GOVERNING LAW
PDPA No. 9 of 2022
PURPOSE
Asha Securities Limited is committed to protecting the personal data of clients, event participants, and employees. Processing complies with Sri Lanka's Personal Data Protection Act No. 9 of 2022 as amended.
SCOPE
This Notice covers all personal data handled by ASL, including data collected from staff, clients, contractors, and third-party service providers, via electronic and physical means.
TYPES OF DATA COLLECTED
ASL collects personal data such as:
- Name and contact details
- NIC (National Identity Card) number
- Financial information
- Other identifiers as required for account onboarding, trading, event participation, regulatory purposes, and customer support
PURPOSE & LAWFUL BASIS
Data is processed for the following purposes:
- Account creation and management
- Provision and management of online trading facilities
- Event / webinar registration and administration
- Regulatory and audit requirements
- Customer support and service improvement
- Direct marketing (if you consent)
LAWFUL BASIS
Processing is based on explicit consent, legal obligation, contract, or legitimate interest. Consent is captured as described in the Consent Form below.
DATA SUBJECT RIGHTS
You have the following rights under the PDPA:
- Access, correct, or delete your data
- Withdraw consent at any time
- Object to or restrict certain processing
- Challenge automated decisions or profiling
- Receive a copy of your data (data portability)
HOW TO EXERCISE YOUR RIGHTS
Contact details for rights requests are provided in Section 13 (Contact Information) and on the Consent Form below.
THIRD-PARTY SHARING
Data may be disclosed to regulators, auditors, legal advisors, and designated service providers solely for compliance and operational needs. All parties are subject to binding confidentiality and data protection agreements.
CROSS-BORDER TRANSFERS
Before transferring data internationally, ASL evaluates the “adequacy” of legal protections in the recipient jurisdiction per the PDPA. Where adequacy is not clear, strong contractual safeguards are implemented and explicit consent may be sought.
RETENTION & SECURITY
Data is retained only as needed or legally required, and securely deleted or anonymized when no longer required. Rigorous technical and organizational measures are maintained against risks.
DATA BREACH NOTIFICATION
In case of a breach, ASL will inform the Data Protection Authority and affected individuals within statutory timeframes as prescribed by the PDPA.
DIRECT MARKETING
ASL sends promotional or marketing material only with your explicit consent, provided on the Consent Form. Opt-out is available at any time by contacting the Data Protection Officer or using any unsubscribe mechanism provided.
AUTOMATED DECISIONS / PROFILING
Where data is processed by automated means or AI, you will be informed and must provide explicit consent where required. You retain rights to an explanation and appeal against any automated decision that significantly affects you.
POLICY REVIEW
This notice is reviewed yearly or upon regulatory, operational, or technological changes. Updates are made public and flagged on client portals.
CONTACT INFORMATION
For all privacy-related requests, questions, or to exercise your data subject rights, contact our Data Protection Officer:
DATA PROTECTION OFFICER
Asha Securities Limited — Privacy & Compliance
CROSS-LINKING
Consent for all forms of personal data use is obtained via the Consent Form (below), which references and is governed by this Privacy Notice.
Data Collection Consent Form
Asha Securities Limited (ASL) — Privacy Notice & Data Collection Consent Clause. Click below to review and provide your consent.
PDPA No. 9 of 2022 · Asha Securities Limited