How we handle your personal information

OnePoint Integrated Consultants (“OnePoint”, “we”, “our” or “us”) respects the privacy of visitors to www.onepointic.com (the “website”) and of the clients, prospective clients and professional contacts we deal with. This policy explains what personal information we collect through the website, how we use it, who we share it with and the choices available to you.

We handle personal information in accordance with applicable data protection laws, including the Personal Data Protection Act No. 9 of 2022 of Sri Lanka, to the extent they apply to us.

We collect personal information only where it is necessary for the purposes described in this policy.

• Enquiry details you provide: when you submit the enquiry form, we collect your name, company or organisation (if provided), email address, telephone number (if provided), the project type you select and the details of your enquiry.
• Correspondence: if you contact us by email or telephone, we keep a record of that correspondence so that we can respond to and follow up your enquiry.
• Technical and usage data: the website uses Vercel Web Analytics to understand, in aggregate, how the website is used, such as which pages are visited and from which country and device type. This service does not use cookies and does not collect names, email addresses or other information that identifies you personally.

We use the personal information we collect for the following purposes:

• To respond to your enquiry and discuss how OnePoint may support your project.
• To prepare proposals, consultancy agreements and related professional correspondence where an engagement is being considered or agreed.
• To maintain records of our professional dealings, as required for contract administration and our legal and professional obligations.
• To understand how the website is used so that we can improve its content and performance.

We do not use the details submitted through the website for unsolicited marketing, and we do not sell, rent or trade personal information. If we wish to keep in touch with you about our services beyond responding to your enquiry, we will ask for your agreement first, and you may withdraw it at any time by contacting us.

We share personal information only where it is necessary to operate the website and respond to you, or where the law requires it.

• Service providers: enquiries submitted through the website are transmitted to our mailbox by email, and the website is hosted and its usage measured by third-party service providers. These providers process information on our behalf and under our instructions.
• Specialist consultants: where you engage OnePoint, we may share relevant project and contact details with the specialist consultants engaged on your assignment, for the purpose of delivering the agreed services.
• Legal and professional obligations: we may disclose information where required by law, regulation, court order or a professional or regulatory body.

Our email, hosting and analytics providers may store information on servers located outside Sri Lanka. Where this happens, we take reasonable steps to ensure that the information is protected in line with this policy and applicable law.

We keep enquiry details for as long as necessary to respond to and follow up your enquiry. Where an enquiry leads to a consultancy appointment, related records are retained for the duration of the appointment and for such further period as is reasonably required to meet our contractual, legal, professional and audit obligations. Information that is no longer needed is deleted or anonymised.

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure, including the use of encrypted connections for the website and controlled access to our mailboxes and records. No method of transmission over the internet is completely secure, and you should avoid including highly sensitive information in an enquiry unless we have asked for it.

Subject to applicable law, you may ask us to:

• Confirm whether we hold personal information about you and provide a copy of it.
• Correct information that is inaccurate or incomplete.
• Delete information that we no longer need for the purposes described in this policy.
• Stop using your information for a particular purpose, including any communications you no longer wish to receive.

The website does not set advertising or tracking cookies. The analytics service we use operates without cookies and without identifying individual visitors. If we introduce cookies in the future, we will update this policy and, where required, ask for your consent.

The website may contain links to external websites. We are not responsible for the privacy practices or content of those websites, and we encourage you to review their own privacy notices.

We may update this policy from time to time to reflect changes in our practices or in the law. The effective date at the top of this page shows when it was last revised. Continued use of the website after a change indicates acceptance of the updated policy.

If you have any questions about this policy, or wish to exercise any of the rights described above, please contact us by email at info@onepointic.com or by telephone on +94 77 828 2293. We will respond within a reasonable period and may ask you to verify your identity before acting on a request.