Privacy Policy

1. Data Controller Identification

This Privacy Policy governs the processing of personal data by SkyRoute Global (Pvt) Ltd ("SkyRoute Global", "we", "us"), a private company incorporated in Sri Lanka under company registration and duly licensed by the Sri Lanka Bureau of Foreign Employment, with registered offices at 250/1 High Level Road, Colombo 05, Sri Lanka.

We act as the Data Controller under the provisions of the Personal Data Protection Act, No. 9 of 2022 (PDPA) of the Democratic Socialist Republic of Sri Lanka. We are committed to safeguarding candidate and client privacy with absolute institutional transparency.

2. Categories of Personal Data Collected

We collect only the minimum necessary personal data required to respond to inquiries and coordinate foreign employment recruitment:

• Inquiry Contact Data: Full name, email address, telephone contact number, and organization name submitted via the website contact form.
• Occupational Profile Data: Industry category preference, approximate experience range, and manpower requirements submitted by visitors.
• Technical Website Data: We do not deploy tracking cookies, third-party analytics trackers, or advertising pixels. The only browser storage utilized is localStorage.setItem('srg_lang') strictly to preserve your selected language preference across page navigations.

3. Legal Basis & Purposes of Processing

Under Section 6 of the Sri Lanka PDPA, we process your personal data under the lawful bases of Consent and Legitimate Interests for the following explicit purposes:

• To review, evaluate, and respond to your direct employment inquiries or corporate manpower requisitions.
• To notify registered candidates when verified, SLBFE-approved job vacancies matching their declared trade qualifications are published.
• To verify employer credentials with diplomatic missions and statutory authorities.
• To fulfill regulatory reporting duties mandated by the Sri Lanka Bureau of Foreign Employment.

4. Data Retention Period

In accordance with data minimization principles, general website inquiry records are retained for a maximum period of 12 months following last contact, after which electronic records are securely deleted. Candidate dossiers for individuals who enter formal deployment processing are retained for the statutory period mandated by the SLBFE for audit and repatriation protection.

5. Recipients & Cross-Border Transfers

We never sell, rent, or trade your personal data with marketing aggregators or commercial third parties. Your data is disclosed only to:

• Authorized SkyRoute Global recruitment officers and interview panel members.
• Authenticated international employers who have issued verified demand orders, strictly with the candidate's explicit prior agreement.
• Statutory bodies including the Sri Lanka Bureau of Foreign Employment and diplomatic consular authorities for mandatory clearance.
• Our authenticated corporate SMTP email provider for the secure electronic routing of form submissions.

6. Your Rights Under the Sri Lanka PDPA

As a data subject, you hold statutory rights under Part II of the Personal Data Protection Act, No. 9 of 2022:

• Right of Access: You may request confirmation of whether we process your data and receive a copy of your records.
• Right to Rectification: You may request the correction of inaccurate or incomplete contact or qualification data.
• Right to Erasure: You may request the deletion of your registration profile when you no longer seek overseas employment.
• Right to Withdraw Consent: You may withdraw your consent to receive vacancy notifications at any time.

To exercise any data protection right, submit a written request to our Data Protection Officer at info@skyrouteglobal.lk or via postal delivery to 250/1 High Level Road, Colombo 05.