Haycarb PLC and its subsidiaries (collectively referred to as “Haycarb,” “we,” “us,” or “our”) are committed to protecting the privacy and personal data of all individuals with whom we interact. This Privacy Policy operates within the overarching framework of the Haycarb Group Personal Data Protection Policy which outlines the commitment of Haycarb PLC and its subsidiaries to protect the privacy and security of personal and sensitive data that maybe processed by the Company of it’s employees, customers, suppliers contractors and the like. The Personal Data Protection Policy is in compliance with Sri Lanka’s Personal Data Protection Act and global standards like the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable regulations.
This policy applies across all Haycarb subsidiary companies, with specific privacy and cookie policies tailored for individual business verticals, accessible via their respective websites.
This policy applies to all visitors to our digitally accessible channels and data collected through directly, automatically, or from third-party sources from these channels. It reflects our compliance with both global and local privacy regulations, such as:
Personal Data Protection Act No. 9 of 2022 (Sri Lanka).
General Data Protection Regulation (GDPR)/EU/EEA.
California Consumer Privacy Act (CCPA – USA).
Lei Geral de Proteção de Dados (LGPD – Brazil)
This policy is supplemented by periodic internal reviews and audits to ensure compliance with evolving legal standards and best practices.
We may collect various categories of personal data through our digital channels, including but not limited to:
Directly Provided Data
Automatically Collected Data
Direct Interactions: When users interact with us on our Platforms (including one of our websites, sending us an email, fill out forms, register for services, apply for jobs or calling us) or interacting with Haycarb social media pages, we may collect the personal information you share with us.
Automated Technologies: Based on your device settings, Haycarb will automatically collect certain personal information (For example: If you start filling out a form but don’t complete it, Flash storage may remember your inputs for when you return. When you visit the Haycarb website, cookies may track your browsing activity, such as the pages you view, the time spent on the site, and the links you click. A cookie remembers your language preference, so you don’t have to select it every time you visit.)
When you interact with our Platform on any device, when you click on sponsored links or third-party ads to visit our Platform, and we may also collect personal information about you over time and across different websites, apps and devices when you use our Platform, using tracking technologies such as cookies, pixels, Flash objects, APIs and mobile software development kits (SDKs) and we may use third party services to collect this personal information when you use our Platform. We explain more about our use of cookies and other tracking technologies in the section called “Tracking Technologies, Interest-Based Advertising and Third-Party Tracking” below.
Third-Party Sources: Data from business partners or public records. We may receive personal information about you from third-party sources, such as our business partners, including online advertising networks, analytics vendors, social media sites, third-party sites, family, friends or others who provide your personal information to us because they think you might be interested in our products or services or they want to share a product or service with you, or companies that provide personal information to supplement what we already know about you, including data aggregators. Certain third parties might link your name or email address to other information they have collected. That might include past purchases made offline or online. It might also include online usage information collected by third parties and shared with us.
By Combining Personal Information : For example, we may combine personal information that we collect offline with personal information we collect through our Platform, combine personal information we collect about you from the different devices you use to access our Platform, or combine personal information we get from third parties with personal information we already have about you.
Our services are not directed at children under the age of 18, and we do not knowingly collect personal data from them without parental consent. Parents or guardians who believe their child has provided personal data can contact our Data Protection Officer to request its deletion.
We process personal data via digital channels for the following purposes:
Service Delivery
Enhancing User Experience
Regulatory and Legal Compliance
Marketing & Advertising
Your data may be shared after with your explicit content with:
To ensure compliance with global privacy standards, all third-party data processors are vetted and bound by contracts to adhere to equivalent data protection measures. For global operations, data may be transferred across borders. We ensure compliance through mechanisms like SCCs, adequacy decisions, or Binding Corporate Rules (BCRs).
Data is retained only as long as necessary to fulfill the purposes outlined or to meet legal requirements.
Detailed retention schedules are outlined in vertical-specific policies on their respective websites.
Depending on your location, you may have the following rights:
You may report any concerns or suspected violations related to this policy through the contact details below, which will be reviewed by our Data Protection Officer.
