This policy explains how BPO Corporate Solutions Pvt Ltd collects, uses, protects, and discloses the sensitive personal and financial data necessary for providing its professional services, including the use of communications platforms like WhatsApp.
Last Updated: 10 December 2025
1. Introduction
BPO Corporate Solutions (Pvt) Ltd (“we,” “us,” or “our”) is committed to protecting the privacy and security of the personal data entrusted to us by our clients. This Privacy Policy outlines how we collect, use, and safeguard the information we receive when you use our website www.bpo.lk or engage our services for Business Formation, Accounting, Taxation, and related BPO activities.
2. Information We Collect
Given the nature of our services, we primarily collect highly sensitive Personal Identifiable Information (PII) and corporate data.
2.1. Information You Provide Directly:
Personal Identification Data: Name, date of birth, residential address, email address, phone number (including WhatsApp number), National Identity Card (NIC) numbers, passport copies, and tax identification numbers (TIN).
Corporate Data: Business name, registration details, Articles of Association, director and shareholder details, company secretarial data.
Financial Data: Bank account information, payroll records, invoices, financial statements, transactional data, and other sensitive accounting information required for bookkeeping and tax compliance.
2.2. Information Collected Automatically:
Usage Data: Information about how you access and use the Website (e.g., browser type, IP address, device type, and pages visited).
Cookies: We may use cookies and similar tracking technologies to monitor Website activity.
3. How We Use Your Information
We use the collected information for the following primary purposes:
Service Delivery: To register your business, perform accounting/bookkeeping, manage payroll, conduct audits, file tax returns, and provide expert consultation as per your Service Agreement.
Legal Compliance: To comply with regulatory requirements of the Government of Sri Lanka, including submissions to the Registrar of Companies (ROC), Inland Revenue Department (IRD), and other relevant authorities.
Communication: To send service updates, invoices, compliance reminders, and respond to your inquiries.
WhatsApp Communication (Specific to API Integration): We use your provided WhatsApp number to communicate critical updates, share documents securely, and facilitate consultation. By contacting us via WhatsApp or providing your WhatsApp number, you consent to receive official communications from us through this channel.
Service Improvement: To analyze usage trends and improve the quality and efficiency of our BPO services.
4. How Your Information is Shared
We only share your information when necessary to provide the contracted Services or when legally required.
4.1. Third-Party Service Providers:
We may share data with trusted third parties who assist us in operating our business and providing services (e.g., cloud-based accounting software providers, payment processors, IT support). These parties are obligated to maintain the confidentiality and security of your data.
4.2. Regulatory and Government Bodies:
We are legally obliged to share your data with relevant government bodies (such as the IRD, ROC, and Banks) for the purpose of business registration, tax filing, and regulatory compliance in Sri Lanka.
4.3. Business Transfers:
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the new owners.
5. Data Security
The security of your highly sensitive data is paramount to us. We implement robust technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction. This includes:
- Digital data encryption where appropriate.
- Restricted access controls for internal staff.
- Secure data storage and backup protocols.
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
6. Retention of Data
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, typically for the duration of our engagement and for a reasonable period thereafter to comply with our legal, accounting, and reporting obligations under Sri Lankan law.
7. Your Data Protection Rights
Depending on the nature of your data and applicable law, you may have the right to:
- Request access to the Personal Data we hold about you.
- Request correction of any inaccurate or incomplete data.
- Request the erasure of your Personal Data (subject to legal and regulatory requirements).
- Object to the processing of your data.
To exercise any of these rights, please contact us using the contact details provided below.
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.
9. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
BPO Corporate Solutions (Pvt) Ltd
No. 315/1/1 Horana Road, Miriswathta, Piliyandala, Sri Lanka
Email: [email protected]
Phone: +94 112 700 960