Privacy notice

Who we are

This website is operated by ENKAYT (the "controller"). Questions about this notice or your personal data can be sent to privacy@enkayt.com.

What we collect

• Details you give us in forms: name, work email, phone, organisation, role and the content of your message.
• Consultation preferences, such as the time slot you select.
• Messages you send to the website assistant.
• With your consent only: anonymous usage statistics and campaign measurement through cookies (see the cookie policy).
• Technical data needed to run and secure the site, such as a hashed IP address used for rate limiting.

Why we use it

• To reply to your enquiry and arrange consultations (steps taken at your request / legitimate interests).
• To send the newsletter if you subscribe (consent — you can unsubscribe at any time).
• To understand how the site is used and improve it (consent).
• To protect the site against spam and abuse (legitimate interests).

Who we share it with

We use service providers to host the site, store enquiries in our CRM, send email and, with consent, measure site usage. They process data only on our instructions. Where data is transferred outside Sri Lanka, we rely on safeguards permitted under the Personal Data Protection Act, No. 9 of 2022 and, where applicable, the GDPR.

How long we keep it

Enquiries that do not become engagements are deleted or anonymised after [period to be confirmed]. Newsletter data is kept until you unsubscribe.

Your rights

You can ask to access, correct or delete your personal data, withdraw consent, or object to processing. Contact privacy@enkayt.com. You may also complain to the Data Protection Authority of Sri Lanka or your local supervisory authority.