Privacy Policy

Fortis Corporate Services (Pvt) Ltd (“Fortis”, “we”, “us”, “our”) respects your privacy. This Privacy Policy explains what personal data we collect through this website, why we collect it, how it is used, and how long it is retained. It is written with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (“PDPA”) in mind.

What personal data we collect

We collect personal data only where you choose to provide it to us, principally through:

• The enquiry form on our Contact page — name, email address, phone number, company name (optional), the service you are interested in, and the message you send us.
• The resource-download form on our Resources page — your email address, used to send you the requested resource and to follow up on your interest.
• Any information you provide directly by email, phone or WhatsApp when contacting us.

We do not knowingly collect sensitive personal data through this website. Please avoid including sensitive personal data (such as national identity numbers, financial account details, or health information) in form submissions unless we have specifically asked you to and have agreed on a secure channel for doing so.

Why we collect it

We use the personal data submitted through this website to:

• Respond to your enquiries and requests for consultations or quotes;
• Provide the guides, compliance calendar or other resources you have requested;
• Communicate with you about services you have asked about; and
• Maintain records of client and prospective client communications for legitimate business purposes.

How your data is processed

Form submissions on this website are sent by email directly to our team’s mailbox (info@fortiscorporate.com) via a server-side mail process. We do not sell or rent your personal data to third parties, and we do not use your data for purposes unrelated to those described above without your consent.

Cookies and analytics

This website uses Google Analytics to understand how visitors use our site. Please see our Cookie Notice for details on the cookies used and how to control them.

Data retention

We retain enquiry and resource-download data for as long as reasonably necessary to respond to your enquiry, maintain a record of the business relationship, and comply with our legal and regulatory obligations. Where data is no longer needed for these purposes, we take reasonable steps to delete or anonymise it.

Our current data-handling practices

Fortis Corporate Services is a newly established firm and does not, at present, have a formal internal data-handling policy in place. We are committed to handling personal data reasonably, securely and in line with the principles of the PDPA, and we intend to adopt a formal internal data protection policy as our operations develop. We will update this notice accordingly once that policy is in place.

Your rights

Subject to applicable law, you may have rights to access, correct, or request deletion of the personal data we hold about you, and to object to certain uses of it. To exercise any of these rights, please contact us using the details below.

Contact us

If you have questions about this Privacy Policy or how your personal data is handled, please contact us at info@fortiscorporate.com or +94 77 655 3151.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “last updated” date above indicates when this policy was last revised.