Who is responsible for your data
ACM Interiors is responsible for personal data collected through this website and project-enquiry channels. Privacy questions and requests can be sent to [email protected].
Information we collect
We collect information you choose to provide, including your name, email address, telephone number, project location, project type, budget range, timeline, messages and files such as plans, photographs, drawings or BOQs.
We may also collect limited technical information needed to operate and secure the website, such as IP address, browser type, device information, requested pages, timestamps and security events.
- Contact and identity information
- Project and property information
- Files voluntarily uploaded with an enquiry
- Consent choices and analytics events
- Security, error and server-log information
Why we use the information
We use personal data to respond to enquiries, understand project requirements, prepare discussions or proposals, prevent abuse, operate the website, maintain records and improve our services.
Optional analytics are loaded only according to the consent setting shown on the website. We do not sell personal data or share it with advertisers.
- Responding to a request you initiated
- Taking steps before entering into a project agreement
- Operating, protecting and improving the website
- Meeting legal, accounting or dispute-resolution obligations
- Sending marketing only where a separate permission has been obtained
Service providers and disclosure
We may use carefully selected providers for hosting, email delivery, form security, analytics, file storage and operational support. They may process data only for the service they provide to ACM and must protect it appropriately.
We may disclose information when required by Sri Lankan law, a valid legal process, or when reasonably necessary to protect people, property or the security of our systems.
- Website and cloud hosting
- Transactional email delivery
- Spam and bot protection
- Analytics enabled by consent
- Professional advisers where necessary
International processing
Some technology providers may process data outside Sri Lanka. Where this occurs, we select established providers and use appropriate contractual, security and access controls.
How long we keep information
General enquiries are normally retained for up to 24 months after the last meaningful interaction. Unsuccessful quotation records may be retained for up to 12 months. Active project, contract, accounting and warranty records may be kept for longer where required for delivery, legal obligations or legitimate record-keeping.
Security logs are normally retained for up to 90 days unless a longer period is required to investigate an incident. Uploaded files are removed when no longer needed for the enquiry or project purpose.
Your choices and rights
Subject to applicable law, you may ask whether we hold personal data about you and request access, correction, deletion, restriction or other action available under Sri Lanka’s Personal Data Protection Act. We may need to verify your identity before acting on a request.
- Access the personal data we hold
- Correct inaccurate or incomplete information
- Request deletion where retention is no longer justified
- Withdraw consent for optional processing
- Raise a privacy concern with ACM or the Data Protection Authority
Security
We use reasonable administrative and technical measures including access controls, encrypted transport, validation, rate limiting and restricted access to enquiry data. No internet service is risk-free, so please avoid uploading unnecessary confidential information.
Children, links and changes
This website is intended for adults arranging interior, construction or fit-out services and is not directed to children. External websites have their own privacy practices.
We may update this policy when services, providers or legal requirements change. The updated date at the top of this page shows the current version.