Privacy Notice

We understand that your personal data is important to you. Guided by our corporate values and our code of conduct, the Hayleys Way, we are committed to protecting your privacy and handling your information responsibly.

This Privacy Notice outlines the commitment of Hayleys PLC to the secure and transparent management of personal data. We operate in accordance with the Personal Data Protection Act No. 9 of 2022 of Sri Lanka (“PDPA”) and relevant international standards such as the European Union’s General Data Protection Regulation (GDPR), ensuring accountability across all our global touchpoints.

This notice applies to Hayleys PLC and all our subsidiaries. When we say “Hayleys,” “we,” or “us,” we refer to the Hayleys Group company you are interacting with.

For the purposes of this notice, “Personal Data”, “Data Controller”, “Data Processor”, shall have the meanings assigned to them under the PDPA.

Privacy Notice – Hayleys PLC
Who collects your Personal Data

Depending on the context, Hayleys acts as a Data Controller and may appoint third-party service providers as Data Processors acting on our written instructions. Depending on the service you use, the relevant Hayleys Group company you engage with may act as the Data Controller responsible for your information.

We are a globally present, diversified conglomerate with operations in over 20 countries. We comply with the PDPA and uphold equivalent international standards for data protection.

Hayleys limits data collection to the information necessary for specific business operations. We collect various types of Personal Data depending on your interaction with us, including (but not limited to):
  • Information you give us: Examples include your name, date of birth, ID or passport number, email, phone number and financial details for transactions.
  • Information collected automatically: Examples include IP address, browser type, device identifiers and website usage data (such as pages visited and time spent).
We ensure that all Personal Data collected is relevant, limited and used only for its intended purpose.
  • Directly when you fill out a form, apply for a job, or contact us.
  • Automatically through cookies and tracking tools that remember your preferences.
  • From others, occasionally from trusted partners or public sources (for example, if you interact with us through social media).

Contact our Data Protection Officer

If you have any questions, concerns, or wish to exercise your rights, please contact:

  • Data Protection Officer
  • Hayleys PLC No. 400, Deans Road, Colombo 10, Sri Lanka
  • DPO@hayleys.com

Your trust matters deeply to us. This commitment to privacy reflects our identity as a responsible corporate citizen, that values people and integrity in everything we do.

 

Last Updated: February 2026

Back to top