Madulsima Plantation > Privacy & Personal Data Protection
Privacy & Personal Data Protection
Madulsima Plantations PLC (“MPL”) Commitment
Madulsima Plantations PLC (“MPL”) is committed to protecting personal data in accordance with Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, as amended by Act No. 22 of 2025, and other applicable legal and regulatory requirements.
MPL Data Protection Commitments
Processing personal data lawfully, fairly and only for legitimate purposes
Limiting access to authorised personnel on a need-to-know basis
Maintaining appropriate technical and organisational safeguards
Retaining data only as long as necessary or legally required
Not selling or disclosing personal data to unauthorised third parties
Sharing data only where legitimately necessary, appropriately safeguarded or required by law
Respecting applicable data subject rights under Sri Lankan law
Data Protection is Everyone’s Responsibility
All MPL personnel are bound by appropriate employment, confidentiality and internal control obligations to safeguard personal and confidential information.
Data protection is everyone’s responsibility. These obligations apply equally to employees, management and the Board of Directors. No position, seniority or authority overrides MPL’s data protection and PDPA obligations.
For Privacy or Personal Data Enquiries
If you have questions regarding the handling of your personal data, wish to exercise your rights under the Personal Data Protection Act, or seek clarification on our privacy practices, please contact us directly: