Privacy Notice

We respect your privacy and we are committed to processing your personal data in accordance with the applicable law.

This Privacy Notice (the “Notice”) applies your use of this website, www.fjgdesaram.com (the “Site”) and describes how your personal data will be treated by us as you use the Site.

For the purposes of this Notice, references to “us”, “our”, “we” are references to FJG de Saram, Attorneys-at-Law of No. 216, De Saram Place, Colombo 10, Sri Lanka (Contact Number +94 11 460 5100), as the controller of your personal data.

This Notice does not apply to information provided to us in the course of our attorney-client relationships or which is protected by confidentiality, consequent to obligations of professional privilege. Nothing in this Notice should be understood as creating an attorney-client relationship with visitors to the Site.

Please note that this Notice is separate to the policies/notices that would be applicable in the event you decide to contact us for any purpose.

Links to websites that are not operated by or for us (“Third Party Sites”) if provided, are provided solely as a convenience to you. If you use these links, you will leave the Site. This Notice does not apply to Third Party Sites.

This Notice may be amended or withdrawn at any time. If we modify this Notice, modified versions will be made available on.

1. Personal Data We Collect When You Visit The Site

Like many websites, our server logs capture, the following internet or other electronic network activity information: information regarding the Site users’ operating systems, browser software, IP (Internet Protocol) addresses, and the full Uniform Resource Locator (URL) clickstreams to, through and from the Site, including date and time.

2. What We Do With Your Personal Data

We may use your personal data to improve the Site, to monitor and improve the performance of our servers, to administer the Site, and to protect and defend our rights, or that of our clients and other users of the Site.

3. Legal Basis For Processing Your Personal Data

We process your personal data for our’s legitimate interests, for example to monitor and improve the quality of the Site, and to protect and defend our rights or users of the Site or based on your explicit consent.

4. Sharing Your Personal Data

We may share your personal data with our third party service providers who will, as our processors, process that data solely for our benefit and in accordance with our instructions, for the purposes set out in this Notice.

To comply with our regulatory obligations, we may also disclose your personal data to the relevant government, supervisory or judicial authorities in Sri Lanka, if required by applicable laws.

5. Retention Period

We retain personal data that is collected through the Site only for as long as needed for the purpose for which it was processed and in accordance with applicable laws. Your personal data will be deleted immediately thereafter, provided however, we may retain your personal data for longer periods if there are valid legal grounds, for example, if required by law or to defend or pursue legal claims.

6. Security

The Site uses measures that are appropriate to protect your personal data against unauthorized access, improper use or disclosure, unauthorized or unlawful destruction or accidental loss, and all our employees and any third parties that process your personal data on our behalf are obliged to respect the confidentiality of your data.

7. Cross border data flow

In the event your personal data is processed outside of Sri Lanka, such processing will take place only in a country prescribed by the Minister in charge of the subject of data protection in Sri Lanka, pursuant to an adequacy decision, or if it is in a country not so prescribed, only when we are satisfied that:

regardless of transfer of your personal data to such country, we are able to comply with our mandatory obligations under the data protections laws of Sri Lanka; and
only after executing an appropriate instrument as may be prescribed by the Data Protection Authority of Sri Lanka, with the recipient of data in such country;
or in the absence of the aforesaid, only to the extent permitted by the Personal Data Protection Act No. 9 of 2022 of Sri Lanka.

8. Your Rights

In certain circumstances, subject to certain exceptions and applicable law, you have the following rights in relation to your personal data:

Right to access: You have, at any time, the right to request access to the personal data we process about you.
Right to rectification: You have the right to request us to rectify any errors in your personal data. This includes inaccurate or incomplete personal data.
Right to erasure: You have the right to request that we delete your personal data. Please note that this right only applies under certain circumstances and is not absolute.
Right to withdraw consent: If we process your personal data based on your consent, you have the right to withdraw such consent at any time, although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful.
Rights related to automated decision-making: You have the right to request for a review of a decision made by us in relation to your personal data, where such decision is based solely on automated processing and which has created or which is likely to create an irreversible and continuous impact on your rights and freedoms under Sri Lanka law.

We will not further process your personal data that is collected for the purposes contained in this Notice.

9. Exercising Your Rights

To exercise your rights please contact us via fjgdesaram@fjgdesaram.com

In the event you make such request, we will respond to you, within twenty one (21) working days and inform you whether your request has been granted, refused (with reasons therefor). We may refuse your request based on certain grounds to the extent permitted by applicable law.

We sometimes need to request specific information from you to help us confirm your identity and to ensure that you have the right to exercise any of your rights in relation to your personal data.

Right To Lodge A Complaint With The Data Protection Authority

You have the right to lodge a complaint directly with the Data Protection Authority about how your personal data is processed by us.

Contact Us

If you have any questions about your privacy or this Notice, please contact us at fjgdesaram@fjgdesaram.com.