Privacy Notice

1. Data Controller

Sinha Spirit Agro is the data controller for personal data processed through www.agro.sinhaspirit.com.

Registered location: Ceylon (Sri Lanka)

Contact: agro@sinhaspirit.com | +94 77 456 4626

2. Personal Data We Collect

Enquiry details

Name, business email, phone/WhatsApp number, company, product interests, order volumes, and free-text project notes submitted through our forms or via email.

Communications

Email threads, call notes, proposals, and contracts created while responding to your enquiry or managing our commercial relationship.

Website analytics

Aggregated usage data captured via privacy-friendly analytics (page views, referrers, session duration). We do not use invasive tracking cookies or profiling scripts.

3. Why We Process Your Data

Legitimate interest (GDPR Art. 6(1)(f))

Responding to enquiries, preparing offers, and managing B2B sales conversations.

Contract (GDPR Art. 6(1)(b))

Taking steps at your request before entering into a sales agreement and fulfilling confirmed orders.

Legal obligation (GDPR Art. 6(1)(c))

Complying with export regulations, customs documentation, and record-keeping duties.

Consent (GDPR Art. 6(1)(a))

Sending optional product updates or market intelligence when you actively opt in. You may withdraw consent at any time.

4. Data Retention

Enquiry records and related correspondence are retained for up to 24 months after our last interaction, unless a commercial contract is in place that requires longer retention.

Contracts, invoices, export documentation, and compliance records are kept for the duration required under Sri Lankan law and applicable international trade regulations.

5. International Transfers

Sinha Spirit Agro operates from Sri Lanka. When you share data with us, it will be processed in Sri Lanka and may be securely transferred to logistics partners or quality-control laboratories within the region strictly for fulfilment purposes.

Where European Union or UK counterparties are involved, we implement contractual safeguards (such as the EU Standard Contractual Clauses) to protect personal data during international transfers.

6. Service Providers

All processors are bound by confidentiality obligations and data-processing agreements aligned with GDPR requirements.

Productivity and communication tools

Cloud email, document management, and CRM platforms used to coordinate commercial discussions.

Logistics and certification partners

Cold-chain providers, freight forwarders, and testing laboratories that receive only the data required to deliver your order.

Website hosting and analytics

Trusted infrastructure providers that process technical logs and anonymised usage metrics to keep the website secure and performant.

7. Your Rights Under GDPR

To exercise your rights, contact agro@sinhaspirit.com. We will respond within one month, or sooner where feasible.

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete information.
• Erasure: request deletion when data is no longer necessary or processing is unlawful.
• Restriction: ask us to pause processing while a concern is investigated.
• Objection: opt out of processing based on legitimate interest, including direct marketing.
• Portability: receive data you provided in a structured, commonly used format.
• Withdrawal of consent: revoke marketing or optional communications at any time.

8. Cookies and Similar Technologies

Our website currently uses strictly necessary cookies only. If we introduce analytics or marketing cookies in the future, we will update this notice and deploy a consent banner before such cookies are stored.

9. Data Security

We implement layered security controls including encryption in transit, role-based access, endpoint protection, and scheduled vulnerability reviews.

Access to personal data is restricted to staff who require it to handle your enquiry or fulfil a contract. Staff are trained on data-protection obligations and confidentiality.

10. Updates to This Notice

We may amend this Privacy Notice to reflect operational or regulatory changes. The effective date will be revised accordingly, and significant updates will be communicated via email where appropriate.

11. Contact & Complaints

If you have questions or concerns about how we process personal data, please contact:

Data Protection Lead, Sinha Spirit Agro

Email: agro@sinhaspirit.com | Phone: +94 77 456 4626

You may also raise a concern with your local supervisory authority. EU/EEA residents can contact their national data-protection authority; UK residents may contact the Information Commissioner's Office (ICO).