Privacy Policy

Zone24x7 is a global company with a large number of employees and stakeholders. We understand the critical nature of the privacy of the data and are committed to protecting the personal data of our customers, shareholders, business partners, visitors, employment candidates, and employees and the personal data of individuals who work for or act on behalf of our customers and/or business partners that has been provided to us. As a responsible organization, this privacy statement describes how the organization collects, stores, protects, and uses personal information provided by its users.

The protection of privacy and the safeguarding of your personal information including Personal Data is our highest priority. We respect your privacy rights and are strongly committed to protecting your privacy. In this Policy “we”, “us”, “our”, “Zone24x7”, and “company” means Zone Twentyfourseven (Pvt) Ltd., and “you”, “your”, and “the user” means the individual or an authorized representative of a legal entity who accesses or uses this Site from anywhere in the world.

We ensure that any Personal Data obtained from you is not used or disclosed unless we have obtained your consent for such disclosure.

Definitions

Affiliate 

This means a legal entity that controls, is controlled by, or is under common control with another legal entity, but only while that control relationship exists. Zone24x7 is affiliated with legal entities to ensure providing services to its clients.

Controller
This means any person who alone or jointly with others determines the purposes and means of the Processing of Personal Data.

Data Subject

This means the services are made available to you through our site or services.

Personal Data

Means any information referring to an identified or identifiable natural person.

What information we may collect from you?

The types of personal data we collect or obtain may vary according to our relationship with you and may include the following:

A. For Shareholders and Business Partners

• Contact information (such as name, address, email address and telephone number);
• Identification information (such as national identity card, passport, driver’s license, birth certificate, date of birth);
• Demographic information (such as marital status, and gender);
• Nationality and residency;
• Bank account details (such as bank account number, bank branch, and bank);
• Details of beneficiary/next-of-kin;
• Any footage captured or recorded by our surveillance camera (CCTV) system;

A. For Customers, Suppliers, and Visitors (Office)

• Contact information (such as name, address, email address, telephone number);
• Identification information (such as national identity card, passport, driver’s license, date of birth, IP addresses, internet cookies);
• Business information (such as the name of the organization, name of the employer, job title, department);
• Any footage captured or recorded by our surveillance camera (CCTV) system.

B. For Employment Candidates and Employees

• Contact information (such as name, address, telephone number, email address);
• Identification information (such as national identity card, passport, driver’s license, date of birth);
• Academic and professional information (such as educational and professional qualifications and licenses);
• Employment history (such as previous job title, previous employer, referees);
• Emergency contact information (such as name, address, telephone number, e-mail address);
• Demographic and other information (such as gender, race, nationality, age, marital status);
• Financial information (such as direct deposit account, details of beneficiary/next-of-kin);
• IT information (such as log files, software/hardware inventories, user activities);
• Any footage captured or recorded by our surveillance camera (CCTV) system and Photographs;
• Additional employment history (such as performance and disciplinary records, medical, hospitalization and annual leave records, and salary details); and
• Criminal record and police reports.

Additional Personal Data that We May Collect

We may During times of crisis such as war, terrorism, riots, a natural disaster, or a disease outbreak, etc. collect:

• Your health and physical condition;
• The health condition of individuals in your household;
• Results of your health tests and medical reports, if any;
• Your body temperature; and
• Your location

We do not collect the following information:

• Political opinions
• Religious beliefs
• Genetic data
• Sexual orientation

When do we collect your personal data?

We may collect or obtain your personal data:

A. For Shareholders and Business Partners

• From our Share Register.
• When you contact us to update your contact information and nominee details.
• When you provide us with your identification document(s).
• When you contact us to request any action relating to your shareholding, such as issuance of duplicate share certificates, modification of share certificates, conducting of share transfers, and updating of dividend mandate-related information.
• When you communicate with us (such as via SMS, telephone calls, other digital channels, emails).
• When you visit any of our premises.
• From our surveillance camera (CCTV) system.

A. For Customers, Suppliers, and Visitors (Office)

• When you complete our visitor log book.
• When you provide us with your identification document(s).
• When you communicate with us (such as via SMS, telephone calls, other digital channels, emails, questionnaires, or surveys).
• From our surveillance camera (CCTV) system.
• When you use or interact with any of our digital applications, visit any of our websites or social media pages.
• When you participate in any of our promotional events, incentives, or loyalty programs.
• When you visit any of our premises.
• From external agencies (such as credit reference agencies, screening or investigation agencies).

B. For Employment Candidates and Employees 

• When you make an application to us.
• When you communicate with us (such as via SMS, telephone calls, other digital channels, emails, questionnaires, or surveys).
• From external agencies (such as credit reference agencies, screening or investigation agencies).
• When you visit any of our premises.
• From your referee.
• From your previous employer(s).
• From anyone with whom you may have or have a business relationship with.
• From your or our recruiter, recruitment agency, or recruitment website/platform.
• From our internal database according to your relationship with our company, or affiliates.
• From our surveillance camera (CCTV) system.

Why Do We Collect Your Information?

We use the information that we collect for a variety of reasons:

• To verify your identity
• Business Executions
• Protecting our assets and interests
• Compliance with laws and legal, contractual, and/or regulatory obligations and protecting or exercising our legal, contractual, and/or regulatory rights and remedies
• Other legitimate purposes.

If you are a parent or guardian of a child who has provided personal information without your knowledge and consent, you may reach out to us using the email address in the “Contact Point for data protection inquiries or exercising Data Subject Rights ” section below.

Transfers and disclosure of personal data 

Zone24x7 does not disclose your personal information to unaffiliated individuals or businesses. We may send your personal information to other entities across international boundaries. Your personal data is transferred under organizational, contractual, and legal controls with reasonably adequate levels of protection implemented, as well as any additional local legal requirements for the parties receiving this data, when it has been transferred to members of our affiliates, and/or third parties located outside of Sri Lanka. By submitting your information to us, you agree that it may be shared to comply with the law, legal and regulatory requirements, and to protect our stakeholders and the general public’s rights, property, and safety.

How Do We Process Your Data?

We collect and use your information solely for internal purposes such as legal, marketing, website development, headhunting, and partnership development. We reserve the right to share your personal information with the government and other appropriate authorities in the event of a security threat to you, others, or Zone24x7.

Security of Your Data

Depending on the situation, we may collect and store your personal information in physical or electronic form. And we employ stringent security measures to safeguard your data. Zone24x7 periodically conducts security assessments to bolster our defenses and assist us in monitoring our systems for potential threats.

To minimize the risk,

• We have limited the number of people who have physical or network access to our systems and IT infrastructure
• Encrypt the personal data
• Adhere to privacy and security practices

Transmission of information via the internet is not completely secure. Although we have implemented systems and processes to protect your Personal Information, no data transmission over the Internet can be guaranteed to be completely secure. Accordingly, transmission of data should be done at your own risk.

Your Rights to Your Data

You, as the data owner, have certain rights over your personal information, including the right to access, correct, delete, restrict processing, and object to processing. To exercise these rights, contact us using the information provided below.

How Long Do We Store Your Data

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, and to fulfill our legitimate business purposes.

This is also the case for anyone with whom we share your information and who carries out services on our behalf.

Changes To Our Privacy Policy

Zone24x7 retains the right to make changes to this privacy statement at any time. You are invited to periodically review this Privacy Notice and remain updated on any changes, but we have no obligation to notify you of them. You agree to the responsibility of adhering to all of the Privacy Notice’s conditions.

We will update the version number and date of this document each time it is changed.

Contact Point for data protection inquiries or exercising Data Subject Rights

Zone24x7 is an ISO 27001 (Information Security Management System) – compliant company, especially when it comes to the privacy and security of data.

If you have any queries about this Privacy policy or Data Protection provisions or need to change and modify any information previously provided to us, please contact the DPO via email at: isofficer@zone24x7.com.

Notification of Personal Data Breaches

We will notify you as soon as practicable in the circumstances when a Personal Data Breach is likely to result in a high risk to the security of your rights. We shall promptly communicate with you if there is an immediate risk of damage to you.

Legal and Compliance requirements

Our privacy policy governs by the Personal Data Protection Act, No. 9 of 2022 (“PDPA”) of the Sri Lanka.