This policy explains how BPO Corporate Solutions (Pvt) Ltd (“BPO”, “we”, “us”) handles personal information on www.bpo.lk, in our services, and in messages we send or receive through WhatsApp, including the WhatsApp Business Platform (Cloud API) and related Meta tools.
Who we are
BPO Corporate Solutions (Pvt) Ltd
No. 315/1/1 Horana Road, Miriswathta, Piliyandala, Sri Lanka
Email: info@bpo.lk
Phone: 0112 700 960
WhatsApp: +94 70 599 6013
We are the controller of personal information we collect for our own business. When a client gives us information about their directors, employees, or customers so we can do the work they hired us for, we handle that information for the client under the engagement.
Information we collect
From the website:
- Contact form: name, email, phone, company, the service you ask about, and business type. We send this to our internal management system so we can reply.
- Career applications: first and last name, email, phone, the role, a message, skills, work history, education, and your resume (PDF, DOC, or DOCX, up to 10MB).
- Technical data from your browser: pages viewed, approximate location derived from IP address, device and browser type, and referring URL, through the tools listed below when those tools are enabled.
- If you email, call, or message us, we keep the correspondence we need to answer you.
From clients and engagements:
- Identity and contact details of the client and of the people who deal with us.
- Information the client gives us to register or administer a company, keep books, run payroll, file tax, or do other agreed work. That can include identification documents, director and shareholder details, employee details, and financial records.
- Records of our advice, filings, invoices, and payments.
From WhatsApp and the WhatsApp Cloud API:
When you message our WhatsApp business number, or when we message you after you have asked us to, we may receive and store:
- Your WhatsApp phone number and profile name.
- The content you send: text, and images, documents, audio, or video, including file names.
- Message IDs, timestamps, and delivery or read status.
- The fact that you contacted us, and the business conversation those messages belong to.
We receive that information from you and, where we use the Cloud API, from Meta Platforms through webhooks. We use it to answer you and to provide the service you asked for.
We send template or other business-initiated WhatsApp messages only where we have a lawful basis and, where WhatsApp requires it, your opt-in. You can tell us to stop those messages at any time by replying on WhatsApp or emailing info@bpo.lk.
How we use information
We use personal information to:
- Answer enquiries and provide corporate, finance, digital, and growth services.
- Assess job applications and contact applicants.
- Send service messages you asked for, including on WhatsApp.
- Keep records we need to run the engagement and to meet company, tax, accounting, and employment duties.
- Protect our site and systems, and understand how the public site is used.
- Establish or defend a legal claim.
We do not sell personal information. We do not use WhatsApp message content or WhatsApp phone numbers to build advertising audiences, and we do not give that WhatsApp data to data brokers. We do not use it to train public AI models.
Who we share it with
We share information with:
- Staff and contractors who need it to do the work.
- Our management system, which receives contact-form and career-application submissions.
- Meta Platforms, when you use WhatsApp to reach us or when our site loads the Meta Pixel. Meta processes that data under its own terms. WhatsApp chats are also stored by WhatsApp on your device and on Meta’s systems.
- Google, when Google Analytics is enabled, for page-view measurement.
- Microsoft, when Microsoft Clarity is enabled, for usage measurement, which can include how the page was used.
- Professional advisers, banks, and government or regulatory bodies where the service or the law requires it (for example a filing you asked us to make).
- A buyer of our business, if we sell or reorganise the company, under a duty to protect the information.
We do not authorise these providers to use your information for their own marketing.
Where it is processed
We work from Sri Lanka. Our website host, management system, Meta, Google, and Microsoft may process information in Sri Lanka and in other countries. Where the Personal Data Protection Act, No. 9 of 2022 requires a safeguard for a transfer, we use a contract, your consent, or another ground the Act allows.
How long we keep it
We keep enquiry and WhatsApp records for as long as we need them to handle your request and a reasonable period after the last message, then we delete or anonymise them. We keep job-application records for the hiring process and a short period afterwards so we can answer questions about that decision.
Client, tax, payroll, accounting, and company records are kept for the engagement and for as long as Sri Lankan law requires those records to exist. When that period ends, we delete or anonymise them.
Your choices and rights
You may ask us to:
- Confirm whether we hold information about you and for a copy of it.
- Correct information that is wrong.
- Delete information, or restrict how we use it.
- Object to a use based on our legitimate interests.
- Withdraw consent, where we rely on consent. Withdrawal does not affect use that already happened.
Send requests to info@bpo.lk. The steps and the exceptions are on our data deletion page. We may need to confirm you are the person the information is about. Some records must be kept to complete a service you asked for or to meet a legal duty. We will tell you when that applies.
Children
Our site and WhatsApp number are for businesses and adult applicants. We do not knowingly collect information from children.
Changes
We will post changes on this page and update the effective date. If a change materially affects WhatsApp or client information, we will also tell affected people by email or WhatsApp where we have a way to reach them.