1. General Information
RURI Lanka (Private) Limited. (“RURI”), established under the laws of Democratic Socialist Republic of Sri Lanka, is the provider of the blockchain mutual aid platform in Sri Lanka (“RURI MAP”).
QolaQ Foundation (“QolaQ”), established under the laws of the Cook Islands, is the administrator of the RURI MAP and the Programs provided via the RURI MAP.
Hatton National Bank (“HNB”), established under the laws of Democratic Socialist Republic of Sri Lanka, is the payment solution provider of the RURI MAP.
For the avoidance of doubt, RURI is the provider of the RURI MAP, QolaQ is the Administrator of the RURI MAP, HNB is the Payment Solution Provider of the RURI MAP, and RURI, QolaQ, or HNB (the “Contractors” “we”, or “us”) are not Members of the RURI MAP. This privacy policy outlines how we collect, use, disclose, and protect personal information in compliance with applicable laws and regulations in Sri Lanka and the Cook Islands.
This privacy policy applies to the our operations in any country.Therefore, it grants you the rights to data protection and privacy as applicable in the respective country. This includes but is not limited to Indonesia's data protection-related regulations and the Cook Islands and Sri Lankan law and relevant authorities.
As the operator of the websites, we take your data processing seriously. In this privacy policy, you will be provided information about how we process your data. Any statement from now on complies with the laws in the country where we operate. It also complies with the laws where we make the MAP available for your access, as may be applicable.
2. Scope and Purposes of Data Processing
- Personal data shall mean any information relating to an identified or identifiable individual. An identifiable person can be identified, directly or indirectly, in particular by reference to one or combined identifiers such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.
- Processing shall mean activities performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise made available, alignment or combination, restriction, erasure or destruction.
- Assessing your eligibility to be a member of our RURI MAP;
- Registering you as a member of our RURI MAP;
- Assessing your eligibility for a claim benefit;
- Assessing your eligibility for fund withdrawal;
- Providing updates and notifications to you regarding developments and new Programs;
- Maintaining website security;
- Communicating with you regarding your MAP membership;
- Complying with the legal and regulatory requirements in Sri Lanka and other applicable authorities.
3. Data Processing Activities Related to the Website's Operations
3.1 Your Visit to Our Website
When you visit our websites, our hosting provider(s) may automatically collect and store various information in server log files that your browser transmits to us. Any processing of technical data transmitted to us via your browser, including but not limited to IP addresses, operating system, and browser type, is to enable the use of our websites and continuously ensure system security and stability.
3.2 Your Visit to Our Website
When you register and access RURI MAP, we may collect personal data, including name, email address, identification details, and transaction records, to facilitate platform operations, assess eligibility, and enhance user experience.
4. Data Sharing
We may make your data available to any third parties we collaborate with in processing your data to achieve the purpose of data processing. We reserve the right to disclose personal data as we may deem appropriate for us to comply with the laws and regulations. We will take any measures to ensure the protection of your privacy rights.
If the Ruri is involved in a merger, acquisition, sale, bankruptcy, insolvency, reorganization, receivership, assignment, or the application of laws or change of control, there may be a disclosure of your information to another entity related to such an event.
5. International Data Transfers
We reserve the right to transfer your data to third parties outside your country of Sri Lanka for data processing as described in this Privacy Policy. This included but was not limited to our website hosting provider(s), website service providers, data center provider, and data recovery center. We will keep you informed of any updates to this section.
6. Data Security
We implement appropriate technical and organizational security measures to protect and safeguard your stored personal data against manipulation, partial or complete loss, use, and access in an unauthorized way. A limited access policy is also implemented for the our employees and any third parties collaborating with us by encrypting your data, thus it cannot be seen unless it’s needed. Any person and/or companies with access to your data are bound to the duty of confidentiality.
We also implement a procedure to address, respond to, and deal with any suspected personal data breach. Any suspected personal data breach will be notified to you in writing and to the regulators supervising the enforcement of data protection laws in the relevant countries.
This section shall not apply to the websites of third parties and the corresponding links given on our websites. We shall not be responsible and liable for any security breach related to those.
7. Your Privacy Rights
You are entitled to the following rights:
- Right to erasure
You have the right to request the deletion of your personal data as soon as possible, and we shall have an obligation to erase personal data without undue delay where one of the following grounds applies:
- You withdraw consent to the personal data processing;
- The personal data has been unlawfully collected;
- The purpose of data processing is not to follow the purpose of collection determined in the agreement and/or regulations;
- The processing period has exceeded the period determined by the commercial agreement and/or regulations.
- Right to rectification
You have the right to rectify your data recorded on our websites following the prevailing laws and regulations.
- Right to access
You have the right to access your historical data recorded on our websites by the prevailing laws and regulations.
8. Data Retention Period
We retain your data for the period necessary to achieve the data processing purposes stated in this privacy policy regarding the purposes described and where retention is required for compliance with legal and regulatory requirements.
Regarding the personal data processed to relate to your identity and Anti-Money Laundering and Countering the Financing of Terrorism(AMLCFT) verification, we will retain your data for six(6) years since your transaction in MAP or the end of your membership in the MAP as required by the AMLCFT laws.
9. Updates and Changes to our Privacy Policy
We may update and make changes to this privacy policy from time to time as necessary. We will notify you in writing through your registered email address of any updates and changes we make to the privacy policy.
Any objection to the updates or changes of this privacy policy, we suggest you discontinue your engagement with us, and if you do so, we will stop any access to our MAP for you.
10. Contact
For more information related to data protection laws we are subject to, you may refer to:
If you have any questions regarding this privacy policy, please contact us at support@samudana.com