User Consent for Data Collection and Retention
By submitting the contact form on our website, you acknowledge and consent to the collection, processing, and retention of the personal information you provide, including but not limited to your name, email address, and phone number, in accordance with our Privacy Policy.
- Purpose of Data Collection
We collect your personal data to respond to your inquiries, process your requests, and improve our services.
- Data Retention
We will retain your personal data for a period of six months after the processing of your request, unless a longer retention period is required by law or for legitimate business purposes.
- Data Storage
Your data will be securely stored and processed at our designated email address: sales@orelit.com. All necessary security measures are implemented to protect your data.
- Your Rights
Under applicable data protection laws, including the Sri Lankan Personal Data Protection Act (PDPA), the European Union’s General Data Protection Regulation (GDPR), the United Kingdom’s UK GDPR, the United States’ California Consumer Privacy Act (CCPA), China’s Personal Information Protection Law (PIPL), Singapore’s Personal Data Protection Act (PDPA), and the UAE Data Protection Law, you have the following rights:
- The right to access your data
- The right to correct any inaccuracies in your data
- The right to request deletion of your data
- The right to object to the processing of your data
- The right to data portability
For more information on how to exercise these rights, please refer to our Privacy Policy.
- Legal Basis for Data Processing (GDPR)
We process your personal data based on the following legal grounds:
- Consent: You have given us consent to process your data by submitting this form.
- Performance of a Contract: We need your personal data to process and respond to your inquiry or request.
- Legitimate Interests: We process data for legitimate interests, such as improving our services.
- International Data Transfers
If applicable, we may transfer your personal data to countries outside your country of residence. These transfers will only occur in compliance with applicable data protection laws, and adequate safeguards will be implemented.
- ISO Certifications
We are ISO 27001 and ISO 27701 certified, which ensures that we follow globally recognized best practices for managing information security and privacy.
- Cookies and Tracking Technologies
We may use cookies and similar tracking technologies to enhance user experience, analyze site traffic, and personalize content. For more details on how we use cookies and how you can control them, please refer to our Privacy Policy.
- Data Protection Impact Assessment (DPIA)
As part of our commitment to privacy and information security, we conduct regular Data Protection Impact Assessments (DPIAs) in line with the requirements of ISO 27001 and ISO 27701. These assessments are performed both internally and through external audits to identify and mitigate any potential risks to your personal data. We take proactive measures to ensure that your data is processed in a secure, transparent, and legally compliant manner.
Through these audits, we continuously evaluate the safeguards in place to protect your personal data and ensure that we meet the highest standards of data protection and privacy.
- Data Protection Officer (DPO) Contact Information
If you have any questions, concerns, or requests regarding the processing of your personal data or our Privacy Policy, or if you wish to exercise any of your rights under applicable data protection laws, you can contact our Data Protection Officer (DPO) at:
OREL IT Private Limited
Attn: Data Protection Officer
P.O. Box 34
Old Road, Navinna, Maharagama
Email: dpo@orelit.com
By clicking the “Submit” button, you confirm that you have read and understood our Privacy Policy and consent to the collection, use, and storage of your personal data as described above.