Privacy Policy
This Privacy Policy describes how our Firm ("we," "us," or "our") collects, uses, and protects your personal data when you visit our website or communicate with us electronically. We are committed to safeguarding your privacy in accordance with the Personal Data Protection Act, No. 9 of 2022 (PDPA) of Sri Lanka.
1. Data Controller
For the purposes of the PDPA, the data controller responsible for your personal data is Gavel and Codex Legal Partners, based in Colombo, Sri Lanka.
2. Information We Collect
Because this website is a streamlined, informational platform without contact forms or user accounts, we do not directly collect personal identity data through our pages. We only interact with:
-
Technical and Usage Data: Standard web analytics including IP address, browser type, time zone setting, operating system, and how you interact with our page to optimize website performance.
-
Voluntary Communication Data: If you choose to contact us via the email address or phone numbers listed on this site, we will process the contact information you provide to respond to your inquiry.
3. How We Use Your Personal Data
We will only process your technical data or voluntary communications when permitted by Sri Lankan law. Most commonly, we use this data to:
-
Respond to your direct email inquiries or schedule initial legal consultations.
-
Maintain, secure, and optimize the performance of our website.
-
Comply with statutory, regulatory, or professional legal obligations in Sri Lanka.
Important Note on Legal Privilege: Initiating contact with us via the email or phone number listed on this website does not automatically establish an attorney-client relationship. Unsolicited information sent via electronic mail may not be protected by professional attorney-client privilege until a formal engagement agreement is executed.
4. Data Sharing and International Transfers
-
We do not sell, rent, or trade your personal data to third parties.
-
Your technical data may be processed by trusted third-party IT or analytics service providers strictly under confidentiality frameworks.
5. Data Security
We have implemented strict electronic and managerial security measures to prevent any technical data from being accidentally lost, used, altered, or accessed in an unauthorized manner.
6. Your Legal Rights
Under the PDPA, you have specific rights regarding your personal data, including the right to request access to, correction of, or erasure of any communication data you have voluntarily shared with us, subject to our overriding legal retention obligations.
To exercise any of these rights, please contact us at: