How we handle personal data when you visit Global Cloud Media, contact us, or work with us.
01
Who we are and what this Policy covers
Global Cloud Media (Pvt) Ltd ("Global Cloud Media", "we", "us", or "our") respects your privacy. This Privacy Policy explains how we handle personal data when you visit globalcloudmedia.lk, contact us, request a demonstration or quotation, subscribe to our updates, or engage with us as a prospective customer, partner, supplier, or business contact.
If your organization uses a product or service supplied by us, the applicable product notice, agreement, and data processing terms may give additional information. Where we process data supplied by a business customer on that customer's instructions, that customer normally decides why and how the data is used; questions about individual records in that service should first be directed to that customer. We will assist the customer as required by our agreement and applicable law.
02
Personal data we may collect
Depending on your interaction with us, we may collect:
contact and business details, such as name, job title, organization, email address, telephone number, and mailing address;
details you include in inquiries, meeting requests, proposals, support requests, correspondence, or feedback;
account and transaction details where applicable, such as authorized users, subscription information, invoices, and payment status;
technical and usage information, such as IP address, browser and device information, referring page, approximate location derived from IP, pages visited, and security logs; and
cookie preferences and information collected by the cookies or analytics tools used on the Website.
We may receive business contact details from your organization, a referral, a business partner, or a public professional source. If you provide another person's information, please ensure you have an appropriate basis to share it.
03
How and why we use data
We use personal data to respond to inquiries and arrange demonstrations; prepare quotations and manage customer or supplier relationships; deliver contracted services; send requested or permitted business communications; operate and secure the Website and systems; detect misuse; maintain records; comply with legal obligations; and establish or defend legal claims.
We use data only where an appropriate legal basis applies, which may include your consent, steps relating to a contract, compliance with law, or a legitimate interest recognized by applicable law. Where consent is the basis, you may withdraw it through the method provided or by contacting us; withdrawal does not affect prior lawful processing.
We do not sell personal data. We do not use contact-form submissions to send unrelated marketing without an appropriate basis. You can opt out of marketing messages using the unsubscribe mechanism in the message or by contacting us.
04
Sharing personal data
We may share data with personnel who need it for their work; hosting, email, analytics, security, payment, and other service providers acting under appropriate obligations; professional advisers; business partners involved in a request you make; and public authorities where disclosure is legally required or justified.
We may also disclose relevant information in connection with a genuine corporate transaction, subject to appropriate protections. We restrict access and sharing to what is necessary for the stated purpose.
If a service or partner is operated by a separate legal entity, that entity may provide its own privacy notice. We will identify the relevant provider when you enter that service relationship.
05
International processing
Some service providers or collaborators may process data outside Sri Lanka. Where this happens, we assess the destination and apply safeguards required by applicable law and our agreements. The specific hosting locations and transfer arrangements for a paid service should be stated in its service or data processing documentation.
06
Retention and security
We keep personal data only for as long as needed for the purposes described above, including contractual, accounting, security, dispute, and legal requirements. Retention depends on the data and context; we then delete or anonymize it, unless continued retention is required or permitted by law. Backups may be removed on their normal rotation schedule.
We use technical and organizational measures appropriate to the risk, such as access controls, staff permissions, secure transfer, monitoring, backups, and incident handling. No method of transmission or storage is entirely risk free. Please tell us promptly if you suspect misuse of your information or account.
07
Your choices and rights
You may ask us about personal data we hold about you and, where applicable, request access, correction, deletion, or restriction of its use, object to certain processing, or withdraw consent. Rights and exceptions depend on the applicable law and the particular processing.
We may need to verify your identity and may refer a request concerning customer-controlled service data to the relevant customer. Send requests to info@globalcloudmedia.lk.
You may also raise a complaint with the Data Protection Authority of Sri Lanka where its relevant powers and procedures apply. We encourage you to contact us first so we can investigate and respond.
08
Children and external links
Our corporate Website is intended for business audiences and is not directed to children. If we learn that we have collected a child's personal data through the Website without an appropriate basis, we will take appropriate steps. Links to third-party websites are governed by those sites' own notices.
09
Updates and contact
We may update this Policy when our practices or legal requirements change. We will post the revised version here with a new date and provide additional notice where required.
Global Cloud Media (Pvt) Ltd, No. 20, Old Kesbewa Road, Nugegoda, Sri Lanka.
