Compliance & Security

Privacy Notice & Retention Policy

How Colombo Associates processes and protects information in accordance with Sri Lanka's Personal Data Protection Act No. 9 of 2022.

Colombo Associates ("we", "us", or "our") respects the privacy and confidentiality of individuals and business entities interacting with our firm. This policy details how we treat information received via website forms and electronic communications, in strict accordance with Sri Lanka's Personal Data Protection Act No. 9 of 2022 (PDPA).

Important Warning: You must not transmit sensitive trade secrets, privileged legal advice, or original conveyancing deeds through public contact forms. Such records will only be requested via a verified, secure channel after a formal conflict-of-interest search has cleared and engagement terms have been executed.

Initial enquiry records where no formal engagement ensues are securely purged or retained strictly in encrypted conflict databases to prevent inadvertent conflicts of interest with future counterparties. Where a formal retainer is executed, client case files and statutory corporate registers are preserved in accordance with the statutory limitation periods prescribed under Sri Lankan law.

For inquiries regarding access, correction, or deletion of personal data processed by the firm, please direct correspondence to:
Compliance & Privacy Lead
Colombo Associates, Colombo 12 & Puttalam, Sri Lanka
Email: contact@colomboassociates.com