Effective date: 19 August 2025

Who we are: BNS Constructions (trading name of a division associated with BNS Holdings (Pvt) Ltd, Reg. No. PV 94688), Head Office: No: 56/35, Borella Road, Depanama, Pannipitiya, Sri Lanka. Contact: info@bnsholdings.com, (+94) 720 900 252. (bnsconstructions.com, bnsholdings.com)

1) Scope

This Policy explains how we collect, use, disclose, and safeguard personal data through bnsconstructions.com and related touchpoints (web forms, email, phone, social media). It is drafted to align with Sri Lanka’s PDPA No. 9 of 2022 (substantive parts pending commencement), the Electronic Transactions Act No. 19 of 2006 (ETA), and applicable consumer regulations. (Department of Government Printing, dpa.gov.lk, ICTA)

2) What data we collect

      • Identity & contact: name, company, role, email, phone, location.
      • Project & service data: site address, drawings/specs you share, photos you upload, preferred timelines/budgets.
      • Communications: enquiries, emails, call notes.
      • Recruitment (if applicable): CV/resume, qualifications, references.
      • Usage/technical: device, browser, approximate location (from IP), page interactions, and cookies (see §10).

3) How we obtain data

    • Directly from you (forms, calls, emails, meetings).
    • Indirectly via analytics and logs when you use our site (see §10).
    • From publicly available or third-party sources where permitted (e.g., LinkedIn, public registries) to verify or enrich business contact details.

4) Purposes & lawful bases

    • Responding to enquiries, quotes, site visits, proposals, and contracts (pre-contract/contract performance).
    • Customer management, project delivery, after-sales, warranty (contract/legitimate interests).
    • Recruitment & vendor onboarding (consent/legitimate interests).
    • Security, troubleshooting, analytics, and service improvement (legitimate interests).
    • Marketing communications (consent; you may opt out anytime).

We will adopt PDPA-style principles (transparency, purpose limitation, data minimization, security, and rights enablement) now, and will update this Policy to reflect the amended PDPA commencement once gazetted. (Department of Government Printing, DataGuidance)

5) Sharing & disclosures

We may share personal data with:

    • Service providers (hosting, analytics, email/SMS gateways, document storage), under confidentiality and data-processing terms.
    • Professional advisers (legal, tax, audit) where required.
    • Authorities/regulators/courts when lawfully required.
    • Project collaborators (e.g., main contractors/consultants) strictly for the stated purpose and only with appropriate safeguards.

6) International transfers

Our site hosting, email, and backups may be located outside Sri Lanka. Where we transfer data internationally, we implement contractual and technical safeguards appropriate to risk and consistent with PDPA principles (and will update once PDPA transfer rules commence). (DLA Piper Data Protection)

7) Retention

    • Enquiries & quote files: 24 months from last activity if no contract ensues.
    • Contract/project documentation: 7 years post-completion (longer if legally required).
    • Recruitment records: 6 months if unsuccessful; if talent-pool consent is given, up to 24 months.
    • Web logs/analytics: typically 12–24 months.

8) Security

We employ layered technical and organizational measures (access controls, encryption-in-transit, least-privilege, backups, audit logging, staff confidentiality). No method is 100% secure; residual risk remains.

9) Your rights

Until the PDPA’s remaining Parts take effect, we voluntarily honor PDPA-style rights: access, rectification, erasure (where feasible), objection/withdraw consent, and portability (where feasible). Once the amendment and new commencement dates are in force, we will implement any additional statutory procedures and timelines. You may also contact Sri Lanka’s Data Protection Authority (DPA) using the official details. (dpa.gov.lk)

How to exercise: email info@bnsholdings.com with “Data Request” in the subject line, stating the right you intend to exercise and sufficient details to identify you. (bnsconstructions.com)

10) Cookies & similar technologies

    • Strictly necessary cookies: core site functions.
    • Performance/analytics (if enabled): understand site usage; stored for 12–24 months.
    • Functionality: remember preferences.
      You can manage cookies in your browser settings; some features may not function without them. If we deploy third-party analytics or remarketing, we will reflect those vendors in an updated Cookie Notice.

11) Children

Our services target businesses and adult decision-makers. We do not knowingly process children’s data.

12) Third-party links

Linked sites have their own policies. We are not responsible for their practices.

13) Changes

We will post updates here and revise the “Effective date.”

Contact (privacy): BNS Constructions, No: 56/35, Borella Road, Depanama, Pannipitiya, Sri Lanka • info@bnsholdings.com • (+94) 720 900 252. (bnsconstructions.com)

Follow Us -
Yt