PRIVACYPOLICY

This Privacy Policy applies to the websites nationalpvc.com and kryptonelectric.com (the "Websites"), both operated by Central Industries PLC ("we", "us", "our").

Central Industries PLC is a public company incorporated in Sri Lanka and listed on the Colombo Stock Exchange (CSE: CIND.N0000). Our registered office is at No. 312, Nawala Road, Nawala, Rajagiriya, Sri Lanka. We are the data controller in respect of personal data collected through these Websites.

We collect personal data in two circumstances: when you submit a contact form, and when you apply for a position through our careers page.

When you submit a contact form, we collect your name, email address, phone number (if provided), your message or enquiry, and the date and time of submission.

When you submit a job application through our careers page, we collect your name, email address, phone number, and your curriculum vitae (CV) or resume, together with any additional information you choose to include in your covering message.

We do not operate any user accounts, membership portals, or e-commerce transactions on these Websites. We do not collect any sensitive personal data as defined under the Personal Data Protection Act No. 9 of 2022 of Sri Lanka ("PDPA").

We collect personal data only when you voluntarily complete and submit a form on our Websites. This includes our contact form, which you may use to make a general enquiry or request product information, and our careers application form, through which you may submit your CV and apply for an advertised position or register your interest for future opportunities.

We do not use cookies for tracking or profiling purposes. If we use any technical cookies for basic website functionality, these are strictly necessary and do not collect personal data.

We collect and process your personal data solely for the following purposes:

• To respond to your enquiry or message
• To provide you with information about our products, services, or career opportunities that you have requested
• To consider your job application and assess your suitability for current or future roles at Central Industries PLC
• To follow up on your contact form or career application submission

We do not use your personal data for marketing communications unless you have explicitly consented, and we do not sell, rent, or trade your personal data with any third parties. We do not use your data for automated decision-making or profiling.

The legal basis for processing your personal data under the PDPA is your consent, which you provide by voluntarily submitting a form on our Websites.

We retain contact form data only for as long as is necessary to respond to and resolve your enquiry. Once your enquiry has been fully addressed and no further follow-up is required, your personal data will be deleted or anonymised within a reasonable period.

We retain job application data, including your CV, for a period of up to 12 months from the date of submission. This allows us to consider you for suitable roles that may arise during that period. After 12 months, your application data will be securely deleted unless you have been offered and accepted a position with us.

We do not sell, rent, or trade your personal data with any third parties.

Your personal data may be accessed by relevant staff members of Central Industries PLC who are responsible for responding to your enquiry or reviewing your application - for example, our sales team, HR team, or hiring managers. It may also be accessed by our website hosting and technology service providers, solely for the purpose of operating and maintaining the Websites, and under strict confidentiality obligations.

We do not transfer your personal data outside Sri Lanka. If this changes, we will update this Privacy Policy accordingly and ensure appropriate safeguards are in place as required by the PDPA.

Under Sri Lanka's Personal Data Protection Act No. 9 of 2022, you have the following rights in respect of your personal data:

• Right of access - you may request a copy of the personal data we hold about you
• Right to rectification - you may request that we correct any inaccurate personal data
• Right to erasure - you may request that we delete your personal data, subject to any legal obligations we may have to retain it
• Right to withdraw consent - you may withdraw your consent to our processing of your personal data at any time, without affecting the lawfulness of processing carried out before withdrawal
• Right to object - you may object to our processing of your personal data in certain circumstances

To exercise any of these rights, please contact us using the details in Section 9 below. We will respond to your request within a reasonable timeframe.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our Websites are served over HTTPS and access to submitted data is restricted to authorised personnel only.

No method of transmission over the internet is completely secure. While we take reasonable steps to protect your personal data, we cannot guarantee absolute security.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how we handle your personal data, please contact:

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last Updated" date at the top of this document. Your continued use of our Websites after any changes constitutes your acceptance of the updated Privacy Policy.

This Privacy Policy is governed by the laws of Sri Lanka, including the Personal Data Protection Act No. 9 of 2022 and any regulations made thereunder.