Privacy Policy

This Privacy Policy should be read alongside to the terms and conditions related to your use of the website at www.execloan.lk/terms (the “Terms”) and the definitions set out in the Terms shall when used in this Privacy Policy have the same meaning. When anyone (hereinafter referred to as “you” or “your”) uses the website at www.execloan.lk (the “Website”) and the service that enables comparison of products and services from Financial Institutions (the “Service”), on your own behalf or on behalf of someone else, and provide personal information in doing so, you consent to Yara Technologies (Pvt) Ltd (hereinafter referred to as “we”, “us” or “our”) collecting, using, storing and disclosing your personal information in accordance with this Privacy Policy.

The Privacy Policy relates to the collection and use of personal information you may supply to us through your use of the Website and Service. We reserve the right, in our discretion, to modify or remove portions of this Privacy Policy at any time. This Privacy Policy is in addition to any other terms and conditions applicable to the Website and the Service.

We do not make any representations about third party websites and applications that may be linked to the Website and the Service. Your dealings with third parties and their services and tools are independent of your dealings with us. You will be subject to the third party’s privacy policy if you opt in to receive communications from third parties. We will not be responsible for the privacy standards and practices of third parties.

We recognise the importance of protecting the privacy of information collected about users of the Website and the Service, in particular information that is capable of identifying an individual ("personal information"). This Privacy Policy governs the manner in which your personal information, obtained through the Website and the Service, will be dealt with. This Privacy Policy should be reviewed periodically so that you are updated on any changes.

Personal information received will be used to allow for use of the Service and may be used for analytical purposes. We will not sell or redistribute your information to external parties. By visiting the Website and using the Service, you accept the practices described in this Policy, as amended from time to time.

PERSONAL INFORMATION

Personal information is information or an opinion about you or from which you can be reasonably identified. Personal information about users of the Website and Service is collected from information that you provide us directly or indirectly through your use of the Website or Service.

Information that may be subject to collection in the course of your use of the Website and Service includes but is not limited to:

1. identity data, including your name, NIC number, date of birth;
2. contact data including your email address and phone number;
3. transaction data including details of Services you use through the Website;
4. technical data including IP address, login data, time zone setting and locations, operating system and Website, and other technologies on your device used to access the Website;
5. profile data including your username and password, preferences, feedback, and survey responses;
6. usage data including how you use the Website and Services;
7. data that Financial Institutions may choose to upload or otherwise provide us.
8. Marketing and communications data including your preferences in receiving marketing from us and your communication preferences.

You may review the information and personal data that you have provided during your use of the Website and choose to correct or modify it. You may do so by writing to us or our Data Protection Officer at the address provided below;
[email protected]

INFORMATION USE

Personal information that visitors submit to the Website and Service is used primarily in connection with the provision and promotion of the Website and Service and to improve on and enhance the range of services and offerings.

The following are the reasons we collect and use your personal information:

• So we can make this Website easier for you to use by not having to enter information more than once.
• So you can quickly find information, products, and services.
• So we can alert you to new information, products, and services that we offer.
• So we can interact with you;
• For research and development or to improve goods and services;
• So we can perform administrative and operational functions;
• To assist in dispute resolution, investigating complaints and inquiries and support;
• So we can comply with any legal requirements;
• For any related purpose for which we are entitled to use your personal information or for which you have given your consent; and
• for other purposes which are within reasonable expectations (these may relate, for example to acting on your requests) or legal reasons (for example where permitted by law).

INFORMATION COLLECTION

In general, when we collect personal information about you, we do so by making a record of it. We do this when you:

1. apply for a loan and use and interact with the Website and Service and give us information about yourself directly or where you authorize a third party;
2. have allowed us to use cookies to store information from your browser and/or device.
3. communicate with us online, over email, online chat systems, the phone or in person;
4. deal with us in other ways involving a need for personal information to be provided such as when you fill in a form. We may record all calls and so collect any personal information provided during such calls.

Like many sites, this Website may employ cookies and web beacons to speed your navigation of the Website, recognize you and your access privileges, and track your usage.

You may refuse to accept cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system may issue cookies when you direct your browser to our Website.

Web beacons assist in delivering cookies and help us determine whether a web page on this Website has been viewed and, if so, how many times. For example, any electronic image on this Website, such as an ad banner, can function as a web beacon.

Most of the personal information we collect and hold about you is from your direct dealings with us, for example information you tell us or information we learn directly from your dealing with us, e.g. through “cookies”.

We may sometimes collect your personal information other than from you directly. For example, from other parties who, in common with us, have a relationship with you or have information about you; from those to whom we have given access to our Website (such as through application programming interfaces); and from publicly available information. Our contractors and service providers who perform services for us, such as payment processing, marketing and data analytics may also provide us information about you.

Personal information we hold is generally stored in servers and other computer systems. These may be operated by us or by our service providers. In all cases, we have rigorous information security requirements aimed at minimising risks of unauthorised access to, and loss, misuse or wrongful alteration of, personal information.

We do not knowingly or intentionally collect personal information from children under the age of 18. If you are under the age of 18, please do not submit any personal information to us, and rely on a parent or guardian to assist you.

DISCLOSURE

It is not practicable to outline the details of all third parties to whom your personal information is disclosed however, we may disclose your personal information in any of the ways detailed in this section.

Apart from where you have consented or disclosure is necessary to achieve the purpose for which it was submitted, personal information may be disclosed in special situations where we have reason to believe that doing so is necessary to identify, contact or bring legal action against anyone damaging, injuring, or interfering (intentionally or unintentionally) with our rights or property, users, or anyone else who could be harmed by such activities.

As a part of your use of the Website, the information and personal data you provide to us may be transferred to and stored at countries outside Sri Lanka. This may happen if any of our servers are from time to time located in a country other than Sri Lanka, or one of our service providers is located in a country other than Sri Lanka. We may also share information with entities of countries other than Sri Lanka. These countries shall be subject to data laws of their respective countries.

By submitting your information and personal data to us, you agree to the transfer, storage, and processing of such information and personal data outside Sri Lanka in the manner described above.

SECURITY

The security of your personal information is important to us. We strive to ensure the security, integrity and privacy of personal information submitted to our sites, and we review and update our security measures in light of current technologies. We take reasonable steps to prevent the personal information we hold about you from misuse, interference or loss, and from unauthorised access, modification or disclosure. Unfortunately, no data transmission over the Internet can be guaranteed to be totally secure. Once we do receive your transmission, we will also make our best efforts to ensure its security on our systems. In addition, our employees and the contractors who provide services related to our information systems are obliged to respect the confidentiality of any personal information held by us. However, to the maximum extent permitted by law, we will not be held responsible for events arising from unauthorised access to your personal information.

YOUR RIGHTS

In accordance with the Personal Data Protection Act No. 9 of 2022 you have rights in respect of the data we hold about you and you can exercise your rights by sending us a written request. Your rights include:

• Requesting us to provide you with the data held about you;
• Withdrawing of your prior consent to data collection;
• Requesting rectification of data collected about you if it is outdated, incorrect, or obsolete;
• Requesting that all data collected about you be erased; and
• Objecting to automated processing and decision-making that is likely to create an irreversible and continuous impact on you rights and freedoms.

In general, any formal request to enforce your rights will be addressed within 21 days.

You can contact our Data Protection Officer at [insert contact details] to exercise your rights.