Privacy Policy

1. Introduction & Statutory Scope

Prime Talents Solutions (Pvt) Ltd (operating commercially as “Prime Talents Solutions Pvt Ltd”) is committed to preserving the privacy, confidentiality, and security of personal and corporate data entrusted to us.

This Privacy Policy sets out how we collect, process, store, and disclose personal data in compliance with the **Personal Data Protection Act No. 9 of 2022 (PDPA)** of Sri Lanka, international data protection standards, and guidelines issued by the Data Protection Authority of Sri Lanka.

2. Personal Data We Collect

Depending on your relationship with us, we collect the following categories of data:

• Candidate & Job Seeker Data: Full legal name, National Identity Card (NIC) or passport number, contact details, curriculum vitae (CV), academic and professional credentials, employment history, compensation expectations, referee contact information, and psychometric assessment results (where agreed).
• Employer & Corporate Client Data: Organization name, business registration (BR) number, registered address, authorized executive contact details, job requisition specifications, and financial details for invoicing and payroll disbursement.
• Digital Portal & Usage Data: IP addresses, browser types, session duration, and interaction logs captured during visits to our web properties and digital career portal.

3. Purpose of Data Processing

We process personal data strictly for legitimate operational purposes, including:

• Evaluating candidate suitability for specific corporate vacancies.
• Presenting verified candidate shortlists to prospective employers (strictly upon prior candidate consent).
• Executing statutory payroll processing, including Employees' Provident Fund (EPF), Employees' Trust Fund (ETF), and Advance Personal Income Tax (APIT) withholding under the Department of Labour and Inland Revenue Department.
• Fulfilling contractual obligations under Employer of Record (EOR) and Professional Employer Organization (PEO) agreements.
• Communicating relevant market intelligence, masterclasses, and executive training updates.

4. Candidate Confidentiality & Consent

Under no circumstances do we broadcast, publish, or share candidate resumes with potential employers without first discussing the specific opportunity, employer identity, and role parameters with the candidate. Candidates maintain the absolute right to withdraw consent at any stage of the recruitment process.

5. Data Retention & Security Standards

We implement industry-grade technical and organizational safeguards, including 256-bit SSL encryption, restricted role-based database access, and secure off-site backups. Candidate data is retained for a maximum duration of thirty-six (36) months following the last interaction, unless an active placement or ongoing statutory employment relationship necessitates longer preservation under Sri Lankan labor laws.

6. Your Rights Under Sri Lankan PDPA

Subject to statutory exceptions, you are entitled to:

• Request access to personal data held by us concerning you.
• Request correction or rectification of incomplete or inaccurate records.
• Request erasure or de-registration from our active candidate database (“Right to be Forgotten”).
• Object to direct marketing or automated profiling.

7. Data Protection Officer (DPO) Contact

To exercise your statutory data rights or file an inquiry regarding our compliance practices, contact our Data Protection Officer: