Protecting Your Privacyand Data Security

Introduction

Central Industries PLC is deeply committed to respecting your privacy and safeguarding your personal information. This Privacy Policy outlines the types of data we collect from visitors to and users of our Site, and the manner, purpose, and legal compliance governing how that information is handled.

This policy is structured to comply with the statutory provisions of the Personal Data Protection Act, No. 9 of 2022 (PDPA) of Sri Lanka.

Information Collected from Anonymous Visitors

Every time you access or navigate the Site, certain technical data may be automatically obtained via standard tracking mechanisms and cookies. This data includes:

• Device type and operating system
• IP address and geographic location
• Browser type and version
• Date, time, and duration of access
• Specific pages accessed, links clicked, and the referring partner websites that directed you to or from this Site

Purpose and Limitation of Use

This information is gathered and stored anonymously, without any direct reference or linkage to your personal identification details. The Company uses this data solely for statistical analysis, technical troubleshooting, and improving the overall user experience and performance of the Site.

This data may be shared with contracted web development and analytics partners. These partners are strictly bound by the same confidentiality limitations and may only use this data to fulfill their specific service contract with the Company.

Information Collected from Registered Users and Buyers

When you register an account, purchase products, or subscribe to services through this Site, you will be required to provide specific personal identification information. This may include your name, delivery address, billing address, email address, phone number, and business entity details.

Purpose and Data Sharing

The Company processes and uses this personal data for the following essential business purposes:

• Order Fulfillment: Processing your transactions, verifying your identity, and manufacturing or distributing your requested products.
• Third-Party Logistics: Sharing essential delivery details (name, address, and phone number) with our contracted third-party delivery partners solely to the extent required to execute the delivery contract.
• Service Optimization: Analyzing collective, non-identifiable user trends to upgrade our online offerings and inventory management.

Secure Storage and Retention

Your personal data is stored securely on protected servers using industry-standard security protocols. The Company retains this personal data only for as long as necessary to fulfill the operational transactions for which it was collected, or to satisfy legal, statutory, tax, accounting, or reporting mandates under Sri Lankan law.

Marketing Communications

The Company or its contracted business partners may occasionally use your contact information to send you promotional updates, product announcements, and special offers.

We respect your preferences; you will be given the option to consent to these communications, and you may opt out or decline to receive marketing messages at any time by adjusting the notification settings in your personal user profile or by clicking the "unsubscribe" link in our digital communications.

Your Data Privacy Rights (Right to Erasure)

In strict accordance with the Personal Data Protection Act (PDPA), you possess ownership and control over your personal data.

• Account and Data Deletion: You have the right to request that the Company invalidate your user account and permanently delete your personal information from our active databases.
• How to Request: To execute this right, you must submit a formal request by sending an email from your registered email address to unsubscribe@nationalpvc.com.
• Statutory Exception: Please note that while the Company will promptly remove your profile data from active marketing and account systems, we are legally required to retain transaction-specific historical records (such as invoices and tax receipts) to comply with statutory financial auditing laws in Sri Lanka.

Bank Account, Credit Card, and Debit Card Details

The Company maintains a strict policy of zero storage regarding your sensitive financial data.

To maximize transaction security, the Company does not collect, record, view, or store any information regarding your bank accounts, credit cards, or debit cards. The financial data you enter at the checkout stage is transmitted directly and securely from your device browser to the licensed commercial bank provisioning our Internet Payment Gateway (IPG).

The Company has no access to this data, and our representatives will never request you to provide credit card numbers, CVVs, or banking passwords via email, phone, or text.

Policy Updates and Notifications

To ensure continued compliance with evolving technological standards and statutory regulations, this Privacy Policy will be reviewed periodically and updated or amended as necessary.

Any material changes or amendments to this Privacy Policy will be officially communicated to you via a notification sent to your registered email address or clearly highlighted upon your next login to the Site. Your continued use of the Site following an update constitutes your acknowledgment and acceptance of the revised privacy practices.