Privacy Policy

Last updated: March 2026  |  Version 1.0

1. Who We Are

Aliphdeen Recruitment & Consultants (Pvt) Ltd is a licensed foreign employment agency registered in Sri Lanka under SLBFE Licence No. 2460. We are headquartered at 824/A, Kerangapokuna, Negombo Road, Wattala 11300, Sri Lanka.

For privacy-related enquiries, you may contact us at:

• Email: cv@aliphdeen.com
• Hotline: +94 722 278 900 (calls only)
• WhatsApp: +94 722 275 600 (messages only)

2. Information We Collect

We collect personal information in the following situations:

A. Job Seekers

• Full name, date of birth, nationality, and NIC / passport details
• Contact information — phone number, email address, home address
• Educational qualifications, employment history, and professional skills
• Photographs and biometric data where required by overseas employers or immigration authorities
• Medical examination results where required for specific job categories
• Police clearance certificates and other background verification documents
• Bank account details for processing salary advances or fees (where applicable)

B. Employers & Corporate Clients

• Company name, registration details, and country of incorporation
• Contact person name, designation, email, and phone number
• Job descriptions, manpower requirements, and contractual terms

C. Website Visitors

• Name, email address, phone number, and country submitted via our contact form
• IP address, browser type, and pages visited (via analytics cookies)
• Messages and enquiry content submitted through contact forms

3. How We Use Your Information

Purpose	Legal Basis (PDPA)
Matching job seekers with suitable overseas employment opportunities	Performance of a contract / Consent
Submitting candidate profiles to prospective overseas employers	Consent
Processing visa applications, work permits, and travel documentation	Legal obligation / Consent
Complying with SLBFE regulations and maintaining statutory records	Legal obligation
Responding to enquiries submitted through our website or WhatsApp	Legitimate interest / Consent
Sending job alerts or updates (only with your explicit consent)	Consent
Improving our website through anonymised analytics data	Legitimate interest

We do not use your personal information for automated decision-making or profiling that produces significant legal effects on you.

4. Sharing Your Information

We share your personal data only in the following circumstances:

• Overseas employers: With your explicit consent, your CV and supporting documents are shared with employers in the countries you are applying to work in. These countries include but are not limited to Qatar, UAE, Kuwait, Saudi Arabia, Oman, Bahrain, Malaysia, South Korea, Japan, Australia, Canada, and European nations.
• Immigration and government authorities: Where required by law to process visas, work permits, or residency applications.
• Sri Lanka Bureau of Foreign Employment (SLBFE): As required by Sri Lankan law for licensed foreign employment agencies.
• Service providers: Third-party service providers who assist us in operating our website and services (e.g., website hosting, email services, anti-spam protection). These providers are contractually bound to protect your data.
• Legal requirements: Where disclosure is required by law, court order, or governmental authority.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

5. International Data Transfers

As a foreign employment agency, transferring candidate data to overseas employers is central to our service. Before sharing your information internationally, we:

• Obtain your explicit written consent
• Ensure the receiving employer is vetted and authorised by SLBFE or equivalent authorities
• Share only the information necessary for the specific job application

6. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, or as required by law. As a general guideline:

• Active candidates: For the duration of your registration with us plus 3 years after your last active interaction
• Placed candidates: For 7 years after the end of your overseas employment contract (as required by SLBFE regulations)
• Contact form submissions: 2 years from the date of submission
• Website analytics data: 26 months (anonymised)

Upon expiry of the applicable retention period, your data is securely deleted or anonymised.

7. Cookies and Tracking Technologies

Our website uses cookies — small text files stored on your device — to improve your browsing experience. We use the following types of cookies:

• Essential cookies: Required for the website to function (e.g., security, session management). These cannot be disabled.
• Analytics cookies: Help us understand how visitors use our site (via Google Analytics or similar tools). These are anonymised and do not identify you personally.
• Translation cookies: Used by GTranslate to remember your language preference.

You can control or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain parts of the website.

8. Your Rights Under the PDPA

Under Sri Lanka’s Personal Data Protection Act No. 9 of 2022, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your data where it is no longer necessary, subject to legal obligations
• Right to restrict processing: Request that we limit how we use your data in certain circumstances
• Right to data portability: Request your data in a commonly used, machine-readable format
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing
• Right to object: Object to processing based on legitimate interests

To exercise any of these rights, please contact us at cv@aliphdeen.com. We will respond within 30 days. We may need to verify your identity before processing your request.

9. Security of Your Information

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted through our website
• Password-protected access to internal systems containing personal data
• Wordfence security plugin and regular security monitoring on our website
• Staff awareness of data protection obligations

However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Third-Party Websites

Our website may contain links to third-party websites (e.g., SLBFE, overseas employer portals, social media platforms). This Privacy Policy does not apply to those external websites. We encourage you to read their privacy policies before providing any personal information.

11. Children’s Privacy

Our services are intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we make significant changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or complaints about how we handle your personal data, or wish to exercise your rights, please contact us:

This Privacy Policy was prepared in compliance with the Personal Data Protection Act No. 9 of 2022 of Sri Lanka. SLBFE Licence No. 2460.