GTV Enterprises Pvt Ltd

Last Updated: 21st July 2025

GTV Enterprises Pvt Ltd (“GTV”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, process, use, disclose, and safeguard your personal information, in accordance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka and the EU General Data Protection Regulation (GDPR), where applicable.

  1. Controller of Personal Data

GTV Enterprises Pvt Ltd acts as the Data Controller in relation to the personal data it collects and processes. Our contact details are provided in Section 13.

  1. Scope

This Privacy Policy applies to:

  • Customers, suppliers, agents, and business partners
  • Visitors to our websites and digital platforms
  • Individuals interacting with our services (including courier, freight forwarding, and logistics)
  • Job applicants and employees
  • Any individual whose personal data is processed by GTV
  1. Categories of Personal Data We Collect

Depending on the context of your interaction with us, we may collect the following categories of personal data:

Identification and Contact Information

  • Full name, date of birth, gender, nationality
  • National Identity Card (NIC), passport, or driver’s license number
  • Physical address, phone number, email address

Professional and Business Information

  • Business name, position, contact details, tax/VAT number
  • Banking and payment information for invoicing or refunds

Transactional and Service Data

  • Shipment details, delivery and tracking records
  • Customs documentation and declarations
  • Service usage and transaction history

Technical and Website Usage Data

  • IP address, device ID, operating system, browser type
  • Usage logs, cookies, and analytics data

Employment and Recruitment Information

  • Resume/CV, education records, employment history
  • References, interview assessments, background checks
  1. Legal Basis for Processing

We process personal data under one or more of the following legal bases:

  • Consent (e.g., for marketing or recruitment)
  • Performance of a contract (e.g., service provision or shipping)
  • Legal obligation (e.g., tax reporting, customs requirements)
  • Legitimate interests (e.g., business operations, fraud prevention)
  • Vital interests (e.g., in emergencies)

We will obtain your explicit consent where required by law and allow you to withdraw it at any time.

  1. Purposes for Which We Use Your Personal Data

Your personal data may be used for the following purposes:

  • To deliver and manage our courier, freight, and logistics services
  • To process and fulfill shipments, orders, and payments
  • To comply with legal, regulatory, and customs obligations
  • To respond to inquiries, requests, or complaints
  • For business communication and relationship management
  • For system security, fraud detection, and IT operations
  • For recruitment, employment, and human resource management
  • For marketing communications and promotions (with consent)
  1. Data Sharing and Disclosures

We do not sell personal data. However, we may share data with:

  • Authorized employees and departments within GTV
  • Third-party service providers (e.g., IT support, courier partners, payment processors) under contractual obligations
  • Affiliated companies and agents, for joint operations or logistics support
  • Governmental, regulatory, or law enforcement authorities, where legally required
  • International partners (for cross-border shipping or customs clearance), under data protection safeguards
  1. International Data Transfers

When transferring personal data outside Sri Lanka or the EU/EEA, we ensure adequate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the EU Commission
  • Bilateral data protection agreements
  • Binding corporate rules
  • Transfer based on legal necessity or your explicit consent
  1. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Once the retention period expires, personal data will be securely deleted or anonymized.

  1. Data Security

We employ appropriate organizational and technical measures to ensure the integrity, confidentiality, and availability of personal data, including:

  • Encrypted data transmission and secure storage
  • Role-based access controls and authentication
  • Regular data protection audits and cybersecurity protocols
  • Staff training and awareness programs
  1. Your Rights

You have the following rights under applicable data protection laws:

Right Description
Right to Access Request a copy of your personal data
Right to Rectification Correct inaccurate or incomplete personal data
Right to Erasure Request deletion of your personal data under certain conditions
Right to Restrict Processing Limit how your personal data is used
Right to Data Portability Receive your data in a structured, machine-readable format
Right to Object Object to processing based on legitimate interest or for marketing purposes
Right to Withdraw Consent Withdraw consent at any time, where applicable
Right to Lodge a Complaint File a complaint with the Data Protection Authority of Sri Lanka or EU authority

To exercise your rights, please contact us using the details in Section 13.

  1. Automated Decision-Making and Profiling

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without human intervention.

  1. Cookies and Tracking Technologies

We use cookies and similar technologies for website functionality, performance analytics, and personalization. You may configure your browser to block cookies or notify you when cookies are used.

  1. Contact Details

For all data protection inquiries or to exercise your rights, please contact:

Data Protection Officer (DPO)
GTV Enterprises Pvt Ltd
No.18/3, Dr. E.A.Cooray Mawatha, Colombo 6, Sri Lanka
📧 Email: info@gtve.com
📞 Phone: +94 11 4 654 444
🌐 Website: www.gtve.com

  1. Policy Updates

This Privacy Policy may be revised from time to time. The updated version will be published on our website and, where appropriate, notified to you directly. The “Effective Date” at the top indicates when the policy was last revised.