Home About Companies ▾ Services Gallery News Contact

Home  /  Privacy Policy

Privacy Policy

◆

How we collect, use, and protect your personal information.

Effective Date: 1 January 2025   |   Last Updated: 1 April 2025   |   Jurisdiction: Sri Lanka

1. Introduction

Royal Serendib Group ("we", "our", or "us") is a group of companies engaged in gemmological testing, jewellery design, gemstone trade, and related services, headquartered at No. 89, Galle Road, Colombo 04, Sri Lanka. We are committed to protecting the privacy and security of the personal information you share with us.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.royalserendib.com, communicate with us, or use our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website and services.

2. Information We Collect

We may collect the following categories of personal information:

  • Contact Information: Name, email address, telephone number, and postal address when you submit an enquiry or contact form.
  • Business Information: Company name, job title, and trade details when you engage us for business services.
  • Communication Records: Records of correspondence you send to us via email, WhatsApp, or any other channel.
  • Usage Data: Information automatically collected when you browse our website, including IP address, browser type, pages visited, and time spent on pages.
  • Service Records: Information related to gemstone testing, certification requests, and jewellery orders, including descriptions and valuations of items submitted for testing.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your enquiries and provide the services you request.
  • To issue gemmological certificates, reports, and related documentation.
  • To process business transactions and maintain accurate records.
  • To send you relevant updates, news, or promotional material (with your consent).
  • To improve our website and services based on usage patterns.
  • To comply with applicable legal and regulatory obligations under the laws of Sri Lanka.
  • To protect the security and integrity of our services.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Contractual necessity: Processing required to deliver the services you have requested or contracted.
  • Legitimate interests: Operating, maintaining, and improving our business services.
  • Consent: Where you have given explicit consent, such as for marketing communications.
  • Legal obligation: Where processing is required to comply with Sri Lankan law or regulatory requirements.

5. Sharing of Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

  • Group Companies: With subsidiaries and affiliated entities within the Royal Serendib Group to deliver integrated services.
  • Service Providers: With trusted third-party service providers (e.g., IT, logistics, payment processing) who assist us in operating our business, under strict confidentiality obligations.
  • Legal Requirements: When required by law, court order, or governmental authority.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, where personal information may form part of the transferred assets.

6. International Data Transfers

As Royal Serendib Group operates internationally — with offices and partners in Sri Lanka, Shanghai (China), and Dubai (UAE) — your information may be transferred to and processed in countries outside your country of residence. We take appropriate steps to ensure such transfers comply with applicable data protection laws and that your information remains adequately protected.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Gemmological certificates and associated records are retained for a minimum of seven (7) years in accordance with industry and regulatory standards.

8. Cookies and Tracking

Our website may use cookies and similar technologies to enhance your browsing experience and analyse site usage. You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of certain features of our website.

9. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Subject to applicable law, you may have the following rights regarding your personal information:

  • The right to access the personal information we hold about you.
  • The right to request correction of inaccurate or incomplete information.
  • The right to request deletion of your personal information, subject to legal obligations.
  • The right to withdraw consent for marketing communications at any time.
  • The right to lodge a complaint with a relevant data protection authority.

To exercise any of these rights, please contact us at [email protected].

11. Third-Party Links

Our website may contain links to third-party websites, including our social media profiles on Facebook, Instagram, LinkedIn, Threads, and YouTube. We are not responsible for the privacy practices or content of those external sites and encourage you to review their respective privacy policies.

12. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us so we can take appropriate action.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us: