Skillpots Lanka (Pvt) Ltd
This Privacy Policy explains how Skillpots Lanka (Pvt) Ltd ("SKILLPOTS", "we", "our", "us") collects, uses, discloses, and protects personal data in accordance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (PDPA). By accessing or using our job advertising and recruitment platform (the "Platform"), you consent to the practices described in this Policy.
SKILLPOTS is committed to safeguarding your privacy and reducing risks of liability, legal exposure, or disputes relating to data privacy. This Policy outlines the steps we take to protect your data and limits our responsibility for events beyond our reasonable control.
1. Definitions
- Personal Data: Any information that can identify an individual as defined under the PDPA.
- Processing: Any operation performed on personal data, including collection, storage, sharing, or deletion.
- User: Job seekers, employers, or any individual accessing the Platform.
- Employer: Businesses or individuals posting or evaluating job opportunities.
2. Scope of This Policy
This Privacy Policy applies to:
- The SKILLPOTS website and mobile application
- User accounts and profiles
- Job applications and CV submissions
- Employer accounts and job postings
- All services provided through the Platform
3. Legal Basis for Processing (PDPA Compliance)
SKILLPOTS processes personal data strictly in accordance with the PDPA's requirements. Our legal bases include:
- User Consent
- Contractual necessity (providing platform services)
- Legitimate business interests
- Compliance with legal obligations
4. Information We Collect
4.1 Personal Data Collected from Job Seekers
- Name, address, phone number, email
- CV/Resume and profile information
- Educational and employment history
- Skills, qualifications, and certifications
- Documents uploaded voluntarily
4.2 Personal Data Collected from Employers
- Employer name and contact details
- Company registration and business information
- Job advertisement content
4.3 Automatically Collected Data
- IP addresses
- Device identifiers
- Cookies and usage analytics
We do not knowingly collect data from persons under 18.
5. Purpose of Data Collection
Your data is collected only for the following legitimate purposes:
- Creating and managing user accounts
- Displaying candidate profiles to employers
- Allowing users to apply for jobs
- Communication and customer support
- Improving and securing the platform
- Compliance with legal obligations
We do not use personal data for profiling or automated decision-making intended to harm users.
6. Data Sharing & Disclosure
6.1 With Employers
When you apply for a job or make your profile visible to employers.
6.2 With Service Providers
Third-party vendors assisting in hosting, analytics, or technical operations—bound by confidentiality and data protection obligations.
6.3 Compliance with Law
We may disclose data to law enforcement, government authorities, or regulatory bodies only when legally required or necessary to protect SKILLPOTS’ rights.
6.4 Limitations of Liability
SKILLPOTS is not responsible for how employers handle your personal data after you apply to them. Employers act as separate data controllers.
7. Data Security
We implement industry-standard safeguards including encrypted storage, access controls, and regular audits.
7.1 Disclaimer for Events Beyond Our Control
While we take all reasonable steps to protect your data, SKILLPOTS cannot be held liable for cyberattacks beyond reasonable industry protections, breaches affecting third-party providers, or system failures outside our control.
8. Data Retention
Personal data will only be retained as long as necessary for providing services, legal compliance, or resolving disputes. Inactive user data may be anonymised or deleted after a reasonable period.
9. User Rights Under the PDPA
You may exercise the following rights, subject to legal limitations:
- Right to access your personal data
- Right to request corrections
- Right to request deletion (where applicable)
- Right to withdraw consent
- Right to restrict processing
Requests will be provided in compliance with PDPA timelines.
10. Cookies & Tracking Technologies
We use cookies for session management, analytics, and platform performance improvements. Users may disable cookies in their browser settings.
11. Cross-Border Data Transfers
If data is transferred outside Sri Lanka, we ensure adequate protection levels and contractual safeguards with service providers.
12. Limitation of Liability
To the maximum extent allowed by Sri Lankan law, SKILLPOTS is not liable for:
- Loss of employment opportunities
- Misuse of data by employers or unauthorized third parties
- Cyber incidents beyond reasonable control
- Errors, delays, or service interruptions
Your use of the Platform is at your own risk.
13. Changes to This Privacy Policy
We may update this Policy from time to time. Updated versions will be posted on the Platform with an effective date. Continued use indicates acceptance.