Privacy Policy
We (referred to in this Privacy Policy as “we”, “us” or “our”) are committed to protecting your Personal Data and respecting your privacy.
This Privacy Policy explains how we collect and store the information you provide through the website https://regalkapitmere.net (the Regal Kapitmere).
We uphold the following principles:
We want you to have the information you need to make informed decisions about how your Personal Data is used and processed. We use appropriate methods and procedures to share relevant information with you. Where we consider that specific details are required, we will provide them at the relevant time. We are also happy to respond to any questions you may have, subject to any limitations imposed by law.
1. The Scope?
This Policy explains what types of Personal Data Regal Kapitmere collects about natural persons, and how we process, share with third parties, protect, and manage that data.
This Policy applies to information relating to an identified or identifiable natural person. An identifiable natural person is someone who can be identified directly, or indirectly when combined with other information available to us or that we may access.
In this Policy, “processing” means any operation involving the use or collection of Personal Data, including its management, organisation, structuring, storage, and related handling.
Our services are intended for a general audience and are not designed for persons under 18 years of age. We do not knowingly request or collect information from anyone under 18, and we do not knowingly permit such persons to use our services. If we become aware that we hold information relating to a child, we will delete it as soon as reasonably possible.
2. What Personal Data Do We Hold About You?
When you use our Services or service channels, or visit our website, we collect Personal Data. In some cases, we may ask you to provide Personal Data directly. In other cases, we collect it by analysing how our Services or service channels are used, or by receiving information about you from our third-party partners.
3. You are not required to disclose personal information to the company, and there are no consequences for choosing not to do so.
However, you are not required to provide Us with any Personal Data. In some circumstances, choosing not to do so may prevent Us from providing the Services or from allowing users to access the website.
4. What types of Personal Data do we collect? When you visit our website, we may collect the following personal information:
This includes information from your online activity logs, traffic data (including your IP address, access date and time), your language settings, software crash logs, the browser type used, and details of the device you used. This information is not personal data and cannot be used on its own to identify you.
Personal data we receive from you: any personal data you choose to provide to us when you connect, through us, to a third-party online trading platform.
Personal information you provide directly to third-party platforms to enable trading: this may include your full name, address, telephone number, and email address.
5. Legal Basis and Reasons for Processing Personal Data
The Company processes your Personal Data for the purposes set out in this section, and on the relevant legal basis applicable to such processing.
The Company cannot use your Personal Data without a valid legal basis. The legal grounds on which the Company may process your Personal Data are as follows:
- You may have consented to the processing of your Personal Data for one or more purposes. This applies when you submit personal information through the Website so that we can share it with a third-party trading platform.
- The Company or a third party may need to process data to pursue legitimate interests, such as improving Our Services or defending legal claims.
- Processing must be necessary to comply with a legal obligation.
Please contact us by email for further details on any processing carried out to protect legitimate interests.
Below, we set out the purposes and legal grounds on which we may use the Personal Data you provide to us.
Scope, Legal Basis
1. Where you request access to digital trading services, we may ask you to provide Personal Data so that we can share it with relevant third-party service providers on your behalf.
You have consented to the processing of your Personal Data for one or more purposes.
2. To respond to your requests, questions, or concerns. Personal Data may be required to address any queries you have about the Services.
Processing is necessary for the Company’s legitimate interests or those of a third party.
3. Personal Data is processed to comply with applicable legal requirements, including administrative, judicial, or other lawful obligations.
Processing is necessary to comply with applicable legal obligations.
4. To improve Our Services. We may use Personal Data to improve Our Services, including crash reports, malfunction reports, and similar information collected in relation to the Services.
Processing is necessary for the legitimate interests of the Company or a third party.
5. To prevent fraud and misuse of Our Services
Processing is necessary for the legitimate interests of the Company or a third party.
6. To carry out and manage activities required for the delivery of Our Services, including back-office operations, business development, strategic decision-making, governance and oversight, and related functions.
Processing is necessary for the Company’s legitimate interests or those of a third party.
7. To carry out analysis, including statistical analysis, and to support decisions on various matters, we use a range of analytical techniques.
Processing is necessary for the legitimate interests of the Company or a third party.
8.
To protect our assets, rights and interests, as well as those of third parties, and to establish or defend legal claims
We may process Personal Data where necessary to protect our rights, interests and assets, or those of third parties, in accordance with applicable laws, regulations, agreements, terms, conditions and policies.
Processing is necessary to protect the legitimate interests of the Company or a third party.
6. Sharing Personal Data with Third Parties
The Company may share Personal Data with third-party service providers that support our operations, including hosting and storage providers, IP address information providers, and user experience analytics providers.
You may also request us to share specific Personal Data relating to you with third-party trading platforms. In such instances, we will provide those third-party trading platforms with the Personal Data you have supplied to us. Their use of your Personal Data will be governed by their own privacy policies. Your Personal Data may be shared with more than one trading platform.
The Company may share Personal Data with related entities or business partners where this helps provide the resources required to develop, maintain, and improve the products and services offered to customers.
Where necessary to protect the rights, property, or assets of third parties, the Company may disclose Personal Data to regulatory, local, governmental, or other competent authorities.
We may also share Personal Data relating to you with potential investors, buyers, or lenders of the Company or any other company within the group, where such disclosure is connected to a relevant transaction, including the transfer or sale of assets of the Company or any other company within the group, or as part of any merger, restructuring, consolidation, or bankruptcy involving the Company or any other company within the group.
7. Cookies and third-party services
We may use third-party services, including advertising partners and analytics providers, on our website. These providers may also use cookies or similar technologies.
Cookies are small text files placed on your device when you visit or use the website. They help collect information about your preferences and browsing activity so we can improve your user experience, remember your settings, and tailor products and services that may be relevant to you. Cookies may also be used for statistical and analytical purposes.
Some cookies we use may be session cookies. These are stored temporarily on your device and remain only for a short time, usually until you close your browser. Other cookies may be persistent cookies. Persistent cookies stay on your device for a set period after your browser is closed. They help the Website recognise you as a returning user and make it easier for you to access the website again.
Types of Cookies:
We may use them for the following purposes:
1. Strictly necessary cookies
These cookies are essential for accessing the features you have requested and for moving around our website. They help us provide the information, products and services you have asked for.
They are also needed to allow your device to download and stream data, so you can browse the website, use its features, and return to pages you have visited before.
Cookies may collect Personal Data, including your username and most recent login date, to verify that you are signed in to the site. Session Cookies are deleted when you close your web browser.
2. Functionality Cookies
Cookies help us recognise you when you return to our site and remember your preferences.
Cookies may collect Personal Data, such as your username and most recent login date, to verify that you are signed in to the site. Session Cookies are deleted when you close your web browser.
3. Cookies for performance
We use cookies to collect statistical data on how the site performs and to help improve it. They also allow us to analyse activity on our website.
Cookies store anonymous data that cannot be linked to an identified or identifiable individual. Some cookies are deleted when you close your browser, while others may remain valid indefinitely.
Cookies are blocked or have been removed
To block or clear cookies, please update your browser settings. The links below explain how to do this in some commonly used browsers.
- Firefox
- Microsoft Edge
- Google Chrome
- Safari
However, please note that if this occurs, some or all of the Website’s functions and features may not work as expected.
ONLINE TRACKING NOTICE
This service does not currently respond to Do Not Track signals.
8. Retention of your personal data
The Company will retain your Personal Data only for as long as required to achieve the purposes set out in this Policy, or for any longer period permitted under applicable law, regulations, policies and lawful orders.
We will share your information with third-party trading platforms for 12 months. If you provide your consent, we will continue sharing your data for a further 12 months.
We review the Personal Data we hold on a regular basis to ensure it is not kept for longer than necessary.
9. Transfers of personal information to another country or an international organisation
Your personal information may be transferred outside the country in which you reside, including to other jurisdictions or international organisations. The Company takes all necessary measures to protect the Personal Data you provide and to ensure that data subjects can exercise their rights and access effective legal remedies.
These protections and safeguards are provided in accordance with applicable data protection laws.
- Transfer of Personal Data to a country outside Sri Lanka or to an international organisation where the applicable data protection framework recognises an adequate level of protection for such data.
- The transfer is carried out under an enforceable agreement between public bodies or authorities, as permitted under applicable data protection law.
- The transfer was carried out in accordance with recognised data protection safeguards, including standard contractual provisions used for cross-border transfers of personal data. Details of the applicable safeguards may be obtained from the relevant data protection authority or official regulatory guidance in your jurisdiction.
The Company can provide details of the security measures used to protect your Personal Data when it is transferred to other countries or international organisations. Please email us at info@regalkapitmere.net for more information.
10. Personal Data Security
We have implemented appropriate organisational and technical measures to protect Personal Data, including measures intended to prevent its accidental or unlawful destruction, loss, or alteration.
However, we cannot guarantee or warrant that the security of your Personal Data will be maintained without any error. We are also not liable for any non-material, incidental, or consequential loss or damage arising from the use or disclosure of Personal Data, including, but not limited to, disclosure caused by transmission errors, unauthorised access by a third party, or any other matter beyond our control.
Where required by law or by obligations outside our control, we may need to provide Personal Data relating to you to third parties, such as public authorities. In such circumstances, we cannot control the level of security applied to your Personal Data by those third parties.
No transmission of Personal Data over the internet can be guaranteed as completely secure. The Company cannot ensure the security of any Personal Data you transmit to Us through the internet.
11. Links to third-party websites
The website may contain links to third-party websites and applications. These websites and applications are not operated or controlled by the Company. We are not responsible for how they collect, use, or otherwise process Personal Data, and this Policy does not apply to any activity carried out on or through them.
Before accessing or using any third-party website or application, we recommend that you review its privacy policy carefully. You should also consider this before sharing any Personal Data with them.
12. Changes to this Policy
Before visiting or using any third-party website or app, we recommend reviewing its privacy policy. You should also consider carefully before providing any Personal Data to them.
13. Your rights regarding your personal information
You may ask Us to confirm whether Personal Data relating to you is being processed, to correct any inaccuracies, and to delete any Personal Data that We are not required to retain. You may also ask Us to restrict certain types of processing of your personal information.
If applicable data-protection rights apply to you, please refer to this page:
These rights apply to the information you provide in relation to your Personal Data. You may request to exercise your rights by sending an email to the address below.
Access rights
You may ask the Company to confirm whether Personal Data relating to you is being processed and whether such data is accurate. Where Personal Data is being processed, you may request access to it.
The Company will provide an electronic copy of the Personal Data currently being processed and may charge a reasonable fee for any additional copies. If you request the information electronically, it will be provided in electronic form.
The right to access Personal Data must not adversely affect the rights and freedoms of others. If a request would prejudice another person’s rights or freedoms, the Company may refuse the request or limit the manner in which it is fulfilled.
Right to rectification
You have the right to request the correction of inaccurate Personal Data. You may also request that incomplete Personal Data relating to you be completed, taking into account the purpose for which it is processed.
Right to erasure
This right may apply where: (a) the Personal Data is no longer required for the purpose for which it was collected or processed; (b) you withdraw your consent and there is no other legal basis for processing; (c) you object, on grounds relating to your particular situation, to the processing of Personal Data based on legitimate interests pursued by Us or by a third party; (e) the Personal Data has been processed unlawfully; or (f) the Personal Data must be deleted to comply with a legal obligation applicable to the Company.
This right does not apply where processing is necessary: (a) to comply with a legal obligation requiring such processing under applicable law; or (b) to establish, exercise, or defend legal claims.
Processing restrictions
If you have concerns about the accuracy of your Personal Data, you may ask the Company to restrict the processing of that Personal Data.
Where processing is restricted, the Personal Data may only be stored, unless you consent to further processing, or processing is necessary to establish, exercise, or defend legal claims, to protect the rights of another natural person, or for reasons of substantial public interest under applicable law.
Right to data portability
Where processing is carried out by automated means and is based on your consent or on a contract to which you are a party, you have the right to receive the Personal Data you have provided to the Company.
You may also request that your Personal Data be transferred directly from the Company to another controller, where technically feasible. Exercising your right to data portability does not affect your right to erasure. The right to data portability must not adversely affect the rights or freedoms of others.
Right to object
You may object at any time to the processing of Personal Data relating to you where such processing is based on legitimate interests pursued by the Company or by a third party. This includes profiling based on those legitimate interests. If We can demonstrate compelling legitimate grounds for the processing, We may continue processing unless your rights, freedoms, or interests override those grounds, or unless the processing relates to the establishment, exercise, or defence of legal claims.
In relation to direct marketing, you have the right to object at any time to the processing of Personal Data relating to you.
Right to withdraw consent
You may withdraw your consent for Us to process Personal Data relating to you at any time. This will not affect the lawfulness of any processing carried out based on your consent before it was withdrawn.
You have the right to lodge a complaint with the competent supervisory or regulatory authority.
You may lodge a complaint with a competent authority established to protect individuals’ rights in relation to the processing of Personal Data under applicable data-protection laws.
Applicable laws may limit your rights in relation to Personal Data concerning you, as set out in this section 13.
We will provide the information requested under your rights in section 13 within one month of receiving your request. This period may be extended by up to two further months where necessary, depending on the nature of the request and the number of requests received. We will inform you of any extension and the reasons for it within one month of receiving your request.
Unless otherwise provided in section 13, the information requested under your rights in section 13 will be provided free of charge. If a request is unfounded or excessive, particularly where requests are repeated, We may charge a reasonable fee to cover the administrative costs of providing the information or taking the requested action. We may also decline to act on such a request.
If We have reasonable doubts about the identity of the person making the request, the Company may ask for additional information to verify that person’s identity.