Data Subject Rights

Global background image

At Brandix, we are committed to protecting the personal data of all individuals who engage with us – including employees, business partners, job applicants, vendors, and other stakeholders.

As part of our operations and in line with our legal / compliance and contractual requirements and obligations as well as in order to enhance our services and maintain business continuity, we may process (which can include the collection, usage, storing and sharing etc.) certain types of personal data.

What Personal Data We May Collect

Depending on the nature of your interaction with Brandix, we may collect and process:

  • Personal Identifiers: Full name, date of birth, gender, National Identity Card (NIC), passport, or other identification documents.
  • Contact Details: Address, email address, mobile or landline numbers.
  • Employment or Business Information: Job title, employment history, qualifications, references, or vendor registration information.
  • Financial Information: Bank account details, payment information, and relevant billing data.
  • Digital Identifiers: IP addresses, device details, and usage data collected through cookies or digital platforms.
  • Visual Data: CCTV footage or photographs captured during visits to Brandix premises or events.
  • Health Information: Only where strictly necessary for workplace safety, compliance, or legal reasons and always in compliance with data protection laws in Sri Lanka.

Who We May Share Your Data With

Your personal data may be shared—only where strictly necessary for the particular purpose and with appropriate safeguards—with:

  • Group companies and subsidiaries of Brandix
  • Authorised service providers and professional advisors (under strict data protection agreements)
  • Legal, regulatory, or government authorities
  • External auditors or compliance reviewers
  • Technology and cloud service providers (under strict data protection agreements)

Your Rights Under Sri Lanka’s Personal Data Protection Act (PDPA)

As a data subject, you are entitled to the following rights:

  • Right to Access – Request a copy of the personal data we hold about you.
  • Right to Rectification – Request correction of inaccurate or incomplete personal data.
  • Right to Erasure – Request deletion of your personal data, subject to legal or operational constraints.
  • Right to Withdraw Consent – Withdraw consent where data processing is based on your consent.
  • Right to Object to Processing – Right to request from further processing personal data in certain situations subject to applicable laws
  • Right to Lodge a Complaint – File a complaint with the Data Protection Authority of Sri Lanka if you believe your rights have been infringed.

How to Contact Us

If you wish to exercise your data rights, report a concern, or require more information about how we handle your personal data, you may contact our Data Protection Officer:

Email: [email protected]

Postal Address:

  1. Dinusha Jayamanne
  2. Brandix Apparel Limited
  3. No. 25, Rheinland Place,
  4. Colombo 03, Sri Lanka

 

For more information, please refer to our Privacy Policy  available on the Brandix website.