Privacy Policy

1. Information We Collect

We may collect and process the following types of information:

• Personal Information: Name, email address, phone number, organisation, and any details you provide through contact forms or email communications.
• Technical Information: IP address, browser type, device information, and usage data collected through cookies and analytics tools.
• Communication Data: Records of correspondence when you contact us.

2. How Personal Data Is Collected

We collect personal data through the following channels:

• Contact Us form: first name, last name, email address, and phone number.
• Subscription to our mailing list: email address.
• Vacancy application forms: first name, last name, email address, phone number, LinkedIn profile, and resume/CV.
• Cookies and analytics tools used on our website, as set out in the Cookies and Tracking Technologies section below.

3.How We Use Your Information

We use your information to:

• Respond to inquiries and provide requested information
• Process vacancy applications
• Facilitate collaborations, partnerships, or research engagement
• Improve website functionality and user experience
• Monitor and analyse website performance
• Comply with legal and regulatory obligations

4.Cookies and Tracking Technologies

Our website may use cookies and similar technologies to enhance user experience and analyse traffic.

Cookies help us:

• Understand how visitors interact with our website
• Improve content and navigation
• Provide a more personalised experience

Where required under the Personal Data Protection Act, we obtain your consent before placing non-essential cookies on your device through a cookie consent mechanism. You may manage or withdraw your consent at any time through your browser settings or the cookie preferences provided on our website.

5.Sharing of Information

We do not sell, rent, or trade your personal information.

We may share information with:

• Service providers (e.g., website hosting, analytics tools)
• Legal authorities, if required by law

All third parties are required to maintain the confidentiality of your data.

6.Cross-Border Data Transfers

Our website is hosted on infrastructure provided by our website service provider, which may be located in Mumbai, India, or Singapore. As a result, personal data submitted through our website may be stored and processed outside Sri Lanka.

We also use Google Analytics to help us understand website usage, which involves transferring technical and usage data to Google for processing; this may take place outside Sri Lanka.

Where such cross-border transfers take place, we take reasonable steps to ensure that your personal data continues to be protected in accordance with the Personal Data Protection Act, No. 9 of 2022.

7.Sensitive Personal Data

We do not seek to collect or otherwise process sensitive personal data in the ordinary course of our business. Where it becomes necessary to process your sensitive personal data for any reason, we rely on your prior express consent for any processing, which is voluntary.

8.Data Security

We implement appropriate technical and organisational measures to protect your information from unauthorised access, loss, or misuse.

9.Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law.

10.Your Rights

You shall have the right to:

• Request access to your personal data
• Request correction or deletion of your data
• Withdraw consent where applicable
• Object to the processing of your personal data
• Request restriction of processing of your personal data
• Request a review of any decision made about you based solely on automated processing
• Lodge a complaint with the Data Protection Authority of Sri Lanka

To exercise these rights, please contact us using the details below.

11.Third-Party Links

Our website contains links to external websites. IPS shall not be responsible for the privacy practices of those sites.

12.Changes to this Privacy Policy

IPS may revise or update this Privacy Policy from time to time to reflect changes in its data processing practices, operational requirements, or applicable legal and regulatory obligations, including the Personal Data Protection Act, No. 9 of 2022 (as amended). Any amendments to this Privacy Policy will be published on this website together with the effective date of the revised version. Users are encouraged to review this Privacy Policy periodically to remain informed of any updates.

13.Copyright Notice

All content on the Institute of Policy Studies of Sri Lanka (IPS) website is its exclusive property unless stated otherwise. When using or referencing IPS research or publications, kindly attribute the institution and its researchers. Any modification of IPS material requires prior written permission from IPS.

14.Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us:

Institute of Policy Studies of Sri Lanka (IPS)
Email: [email protected]
Phone: +94 11 214 3100