Effective Date: 10/1/2025

Last Updated: 10/1/2025

At A2 Labz, protecting your privacy and personal data is our highest priority. We are committed to processing your personal data in compliance with the GDPR and all other applicable data protection laws.

In this Policy:

• "we," "us," "our" refer to A2 Labz.
• "you," "your" refer to individuals whose data we process.

Please carefully review this Privacy Policy before using our website or providing your data. By accessing our services, you agree to this Policy.

1. Data Controller Information

The data controller responsible for your personal data is:

A2 Labz

Email: dpo@a2labz.com

Phone: +94 75 220 3374

Address: No. 166/16, Elvitigala Mw, Colombo - 8, Sri Lanka

2. Types of Personal Data We Collect

• Contact Information: Full names, email addresses, and phone numbers.
• Business Information: Company names, job titles, and website URLs.
• Recruitment Data: CVs, LinkedIn profiles, NIC numbers, qualifications.
• Voluntary Data: Any additional information you provide through forms or communication.

3. Lawful Basis for Data Processing

• Contractual Obligation: To deliver requested services or respond to inquiries.
• Legitimate Interests: For business operations and improving services.
• Legal Obligation: Compliance with applicable laws.
• Consent: For marketing or optional communications.

4. Purposes of Processing Personal Data

• Service delivery and improvement
• Communication and support
• Recruitment evaluation
• Event management
• Marketing (only with your consent)

5. Data Retention

• General inquiries: 12 months
• Recruitment data: 12 months
• Event participation: 12 months post-event
• Legal obligations: Retained as required by law

After the retention period, your data is securely deleted or anonymized.

6. Sharing Your Personal Data

• Service Providers acting on our behalf
• Regulatory authorities where required by law

We do not sell your data.

7. Your Rights Under GDPR

• Right of Access
• Right to Rectification
• Right to Erasure
• Right to Restrict Processing
• Right to Data Portability
• Right to Object
• Right to Withdraw Consent

To exercise your rights, email: dpo@a2labz.com

8. Data Security

• SSL encryption
• Access controls
• Continuous security monitoring

While we maintain strong security, no method of internet transmission is fully secure. Please exercise caution when sharing data online.

9. Cookies and Tracking Technologies

• Necessary Cookies
• Analytical Cookies

You can manage cookie preferences via your browser settings.

10. Notification of Data Breaches

• We notify you promptly if a breach risks your rights
• We notify authorities within 72 hours

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for third-party privacy practices.

12. Changes to This Policy

We may update this Policy periodically. Updates will be posted on this page with a revised date.

13. Governing Law

This Policy is governed by the GDPR, the Sri Lankan Personal Data Protection Act No. 9 of 2022, and the Saudi Arabia Personal Data Protection Law (PDPL) issued by Royal Decree M/19 and enforced by the Saudi Data & Artificial Intelligence Authority (SDAIA).

The PDPL applies to all personal data processing activities performed within the Kingdom of Saudi Arabia and to personal data of individuals located in Saudi Arabia even if the processing occurs outside the Kingdom.

Contact Us

Information Security Officer (ISO):
Email: infosec@a2labz.com
Phone: +94 76 6611917

Data Protection Officer (DPO):
Email: dpo@a2labz.com
Phone: +94 75 220 3374

Middle East Information Security Representative:
Email: dpo@a2labz.com
Phone: +9665 3138 2028