Privacy Policy

1.Overview

We keep this simple: we collect the details you give us when you contact us, we use them to answer your enquiry and to serve you as a customer, and we do not sell them. This policy sets out how that works and how you can ask us to access, correct, or delete what we hold.

It applies to this website and to enquiries you send us through it. It does not apply to other websites we link to.

2.Who we are

Macfin Private Limited (“Macfin”, “we”, “us”, or “our”) is the controller of the personal information described in this policy. We are a company incorporated in Sri Lanka, and we handle personal information in line with the Personal Data Protection Act, No. 9 of 2022.

3.Information we collect

Information you give us

When you complete the contact form on this site, we collect your first name, last name, email address, telephone number, and the content of your message. If you contact us by email, telephone, or WhatsApp instead, we collect the details in that correspondence.

If you go on to become a customer or supplier, we collect the information needed to do business with you — such as your name and job title, your organisation, billing and delivery addresses, order and event specifications, artwork and brand assets you send us, and payment references. We do not collect card or bank credentials through this website.

Information collected automatically

Our hosting provider records standard technical information when a page is requested, such as your IP address, browser and device type, the pages requested, and the date and time. This is used to serve the site reliably, diagnose faults, and guard against abuse.

We do not ask for sensitive personal information through this website, and we ask that you do not send it to us in a contact form message.

4.How we use your information

We use the information described above to:

• respond to your enquiry and prepare quotations and proposals;
• supply and support the products and services you order, including events, equipment, machinery, and merchandise;
• source products and arrange import, delivery, installation, and after-sales service;
• keep records of our dealings with you, including invoices and correspondence, and manage accounts and payments;
• improve this website and our products and services, and understand what our customers need;
• send you information about our products, services, and events where you have asked for it or where you are an existing customer, and always with a way to opt out; and
• meet our legal, tax, accounting, and regulatory obligations, and establish or defend legal claims.

We do not sell, rent, or trade your personal information, and we do not use it for automated decision-making that produces legal or similarly significant effects.

5.Our basis for processing

We process personal information where it is necessary to take steps at your request before entering into a contract or to perform a contract with you, where it is necessary for our legitimate interests in running and promoting our business in a way that does not override your rights, where we need it to comply with a legal obligation, and where you have given consent. Where we rely on your consent, you can withdraw it at any time; that does not affect processing carried out before you withdrew it.

6.Cookies and analytics

This website does not use advertising or tracking cookies, and we do not run third-party analytics or advertising pixels on it. Any cookies set are strictly necessary ones used by our hosting provider to deliver the site securely and to protect the contact form from automated abuse.

You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may stop parts of the site, including the contact form, from working properly. If we introduce analytics or marketing cookies in future, we will update this policy and ask for your consent first where the law requires it.

7.Who we share information with

We share personal information only where it is needed, and only with:

• Service providers who help us run the business — our website host and form-handling provider (Netlify), our email provider (Google), and the messaging platform we use for WhatsApp enquiries (Meta). These providers process information on our behalf under their own terms and privacy policies.
• Suppliers, manufacturers, freight forwarders, customs agents, and contractors where this is necessary to source, import, deliver, install, or service what you have ordered, or to deliver an event.
• Professional advisers such as our accountants, auditors, bankers, and lawyers, where they need the information to advise us.
• Authorities and other parties where we are required to disclose information by law, by a court, or by a regulator, or where disclosure is necessary to establish, exercise, or defend legal claims or to protect the rights and safety of any person.
• A buyer or successor if our business or part of it is sold, merged, or reorganised, subject to this policy continuing to apply.

We ask the providers who handle personal information for us to keep it secure, to use it only for the purposes we specify, and not to use it for their own marketing.

8.Where your information is held

Some of the providers we use, including our website host, email provider, messaging platform, and overseas suppliers, store or process information on servers outside Sri Lanka. Where we transfer personal information abroad, we take reasonable steps to ensure it remains protected to a standard consistent with the Personal Data Protection Act, No. 9 of 2022, including by using established providers whose contractual terms require appropriate safeguards.

9.How long we keep information

We keep personal information only for as long as we need it for the purposes set out in this policy. In practice:

• enquiries that do not lead to business are generally kept for up to two years, so we can pick up the conversation if you come back to us;
• customer, order, event, and supplier records are kept for the life of the relationship and afterwards for as long as we are required to keep accounting, tax, and warranty records, or for as long as a claim could reasonably be brought; and
• marketing contact details are kept until you ask us to stop contacting you.

When information is no longer needed, we delete it or anonymise it.

10.How we protect information

We take reasonable technical and organisational measures to protect personal information against loss, misuse, and unauthorised access, alteration, or disclosure. These include serving this site over an encrypted connection, limiting access to enquiry and customer records to the people who need it, and using reputable providers for hosting and email.

No website or method of transmission is completely secure, so we cannot guarantee absolute security. If a breach occurs that is likely to affect your rights, we will notify you and the relevant authority as required by law.

11.Your rights

Subject to the conditions and exemptions in the Personal Data Protection Act, No. 9 of 2022, you have the right to:

• ask what personal information we hold about you and get access to it;
• have inaccurate or incomplete information corrected or completed;
• ask us to delete information where we no longer have a lawful reason to keep it;
• object to processing based on our legitimate interests, and to ask us to stop using your details for direct marketing at any time;
• withdraw consent where our processing relies on it; and
• ask us to restrict processing while a question about your information is being resolved.

To exercise any of these rights, email us at macfinpvt@gmail.com. We may ask you for information to verify your identity before we act. We will respond within the period required by law, normally within 21 days, and will tell you if we need longer or if an exemption applies.

If you are not satisfied with our response, you may complain to the Data Protection Authority of Sri Lanka.

12.Children's privacy

This website is intended for businesses and adults. We do not knowingly collect personal information from children. If you believe a child has given us their information, please contact us and we will delete it.

13.Third-party sites and channels

Our site links to other websites and channels, including our MacGolf site and our social media and messaging accounts. We are not responsible for the privacy practices of those services. When you contact us through a social media or messaging platform, that platform also handles your information under its own privacy policy, and we recommend you read it.

14.Changes to this policy

We may update this policy to reflect changes to our practices, our services, or the law. The current version is always published on this page, and the date at the top shows when it was last revised. Where a change is significant, we will take reasonable steps to bring it to your attention.

15.Contact us

If you have a question about this policy, or a request about your personal information, please contact us:

See also our Terms of Service.