Privacy Policy

1. Our Commitment to Privacy

CEx Consulting respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, store and protect personal information when you interact with CEx Consulting, including when you visit our website, contact us, enquire about our services or otherwise engage with us.

2. Personal Information

Personal information is information that identifies an individual or could reasonably be used to identify an individual.

Depending on how you interact with us, this may include information such as:

• Name and job title;

• Organisation and business contact details;

• Email address and telephone number;

• Information provided through enquiries or correspondence;

• Information relating to consulting engagements; and

• Information collected through your interaction with our website.

We only seek to collect information that is reasonably relevant to our business activities and the purpose for which it is collected.

3. How We Collect Information

We may collect personal information directly from you when you:

• Contact us through our website;

• Submit an enquiry or request information;

• Subscribe to communications or updates;

• Engage CEx Consulting for professional services; or

• Communicate with members of our team.

We may also collect limited technical information automatically when you use our website, such as your IP address, browser type, device information, pages visited and general website usage information.

4. Cookies and Website Analytics

Our website may use cookies and similar technologies to understand how visitors use our website, improve website functionality and enhance the user experience.

Cookies may collect information such as browser type, pages visited, approximate location, access times and website interactions.

Where applicable, you may be able to control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the website.

5. How We Use Personal Information

CEx Consulting may use personal information to:

• Respond to enquiries and requests;

• Communicate with clients, prospective clients and other stakeholders;

• Provide and administer our consulting and advisory services;

• Understand and improve our website and services;

• Maintain business and professional relationships;

• Send relevant communications where you have requested or permitted us to do so; and

• Meet applicable legal, regulatory or contractual obligations.

We will not use personal information for purposes that are unrelated to the purpose for which it was collected unless permitted by law or you have provided appropriate consent.

6. Disclosure of Personal Information

CEx Consulting does not sell or rent personal information to third parties.

We may disclose personal information to trusted service providers, professional advisers or other parties where reasonably necessary to operate our business, deliver our services, maintain our systems or comply with legal obligations.

Where we engage third parties to process information on our behalf, we take reasonable steps to ensure that appropriate confidentiality and security measures are maintained.

7. Information Security

CEx Consulting takes reasonable measures to protect personal information against unauthorised access, misuse, loss, alteration or disclosure.

Access to personal information is limited to individuals who require it for legitimate business purposes.

Where we use third-party technology, cloud storage or other service providers, we seek to work with providers that maintain appropriate security and privacy safeguards.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

8. Retention of Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain our business records, or where retention is required by applicable law or contractual obligations.

When information is no longer required, we will take reasonable steps to securely delete, destroy or de-identify it.

9. Access and Correction

You may contact CEx Consulting to request access to personal information we hold about you or to request that inaccurate or incomplete information be corrected.

We may need to verify your identity before responding to an access or correction request.

10. Cross-Border Data

Some of the technology, cloud storage or service providers used by CEx Consulting may process or store information outside Sri Lanka.

Where personal information is transferred or processed internationally, we take reasonable steps to ensure that appropriate safeguards are in place.

11. Changes to This Privacy Policy

CEx Consulting may update this Privacy Policy periodically to reflect changes to our practices, technology, services or applicable requirements.

The updated version will be published on this page with the revised effective date.

12. Contact Us

If you have questions about this Privacy Policy, wish to request access to or correction of your personal information, or have a concern about how your information has been handled, please contact CEx Consulting through the contact details provided on our website.