Privacy notice
Who we are
V Smart Associates (Pvt) Ltd is a professional services firm in Sri Lanka. This notice explains how we collect and use personal data through this website and when you contact us.
What we collect
When you send an enquiry, we collect the details you enter in the form. That means your name and company name, telephone and WhatsApp numbers, email address, the service and any package you are interested in, the number of directors if you give it, and your message. [CHECK]
When you contact us by WhatsApp, phone or email, we keep the messages and details you send us.
Our hosting provider records standard technical information when you visit the website, such as your IP address, browser type and the pages you request. These server logs are used to keep the website secure and working. To stop the enquiry form being misused, we count how many enquiries come from one connection in an hour. [CHECK] We count them against a code made from your IP address, not the address itself, and delete the count after two hours. [CHECK]
Why we use it
We use your details to reply to your enquiry, to arrange a consultation and, if you become a client, to provide our services. Server logs help us keep the website secure. We do not use your details for marketing.
Legal basis
We process personal data under the Personal Data Protection Act, No. 9 of 2022, as amended. When you send the enquiry form, we rely on your consent. Before you engage us, we rely on taking the steps you ask for, and once you are a client, on our contract with you. We also rely on our legal obligations, such as keeping the records the law requires.
You can withdraw your consent at any time. This does not affect the lawfulness of anything we did before you withdrew it.
Who we share it with
We do not sell your details or share them with anyone for their marketing.
We share personal data in three cases only. Our service providers that run this website and our email, such as our hosting provider, can access it. With your agreement, we share it with professionals or authorities we need to involve in your matter. We also share it with authorities where the law requires it.
Some of our service providers may store data outside Sri Lanka. Where that happens, we take the steps the Act requires to protect it.
Automated routing
If you type a question into Ask V Smart, the text goes to an automated service, TypeSafe AI, which picks one of our published answers to show you. [CHECK] TypeSafe AI processes it in the United States. [CHECK] This is a transfer of personal data outside Sri Lanka, and we take the steps the Act requires to protect it. [CHECK] Before the text goes, we automatically remove anything that looks like an email address, a phone number or a National Identity Card number. [CHECK] Please don't type your name or other personal details. [CHECK]
We do not store your questions or the answers, and Ask V Smart sets no cookies. [CHECK] TypeSafe AI's privacy policy says it keeps personal data "for as long as reasonably necessary to provide you with the Services, or otherwise in support of our business or commercial purposes", and that it will not train or fine-tune its models on what is sent to it. [CHECK] To stop misuse, we count how many questions each connection sends in an hour. [CHECK] We keep that count against a code made from your IP address, not the address itself. [CHECK]
How long we keep it
We keep enquiry details for as long as we need them to respond and follow up. If you become a client, we keep your records for the periods that the law and our professional obligations require. We then delete them or dispose of them securely.
Your rights
Once Part II of the Act is in force, you can ask for access to the personal data we hold about you. If it is inaccurate or incomplete, you can ask us to correct it. You can also ask us to erase it, for example when you withdraw your consent. Some of these rights have conditions that the Act sets out.
To make a request, contact us using the details below. We may ask you to confirm your identity first.
If you are not satisfied with our response, you can complain to the Data Protection Authority of Sri Lanka.
Cookies and analytics
This website sets no cookies of its own and uses no advertising trackers. If we turn on analytics, it will run only after you accept it in a cookie notice, and our cookies page will list the cookies Google Analytics sets. The cookies page also lists what we keep in your browser's storage. If you follow a link to WhatsApp or another service, that service's own privacy terms apply.
Contact for privacy questions
Send your question or request through our contact page. You can also email us at info@vsmartassociates.lk.
Last updated
This notice was last updated on 8 October 2026.