ELSTEEL Privacy Policy

ELSTEEL respects and protects any information, more importantly your personal data, which we collect from you for the purpose of serving you better, when you use our corporate website (www.elsteel.com) and subscribe or register for various other services. ELSTEEL applies general data protection principles and processes your personal data in accordance with this Privacy Policy (“this Policy”).

1. Type of data and information collected:

While committing to ensure that your privacy is protected, we basically collect following personal data from our website visitors, customers, distributors, panel builders, suppliers and any other parties who wish to receive our services or information:

  • Personal identification details (first name, last name)

  • Contact details (email address, postal address, phone numbers, fax number)

  • Location details (city, state/province, country, region)

  • Business details (company name, designation)

  • Login details (username, password)

  • Any other details which can be used to identify yourself

We assure that your personal data is collected only to the extent which is adequate, relevant and limited enough to serve your requirement.


2. How and when data is collected:

In order to identify yourself, you will directly provide us your personal data voluntarily or at our request by filling out a web form (Sign in or Contact us in website), sending through email or in any other electronic or paper form, when you:

  • use our corporate website

  • subscribe for services such as newsletters

  • download brochures or catalogues

  • submit a query for further information

  • place an order for any of our products

  • provide customer feedback

We may receive your data indirectly through other sources such as independent contractors.

Apart from above methods of data collection methods, we may use your IP address or any other identifying parameters which we receive from your web browser in order to help diagnose problems with our server, monitor numbers of users or administer our interactive services.


3. Your Consent:

We consider that you give us your consent to use your personal data, other information and browser details for the specific purpose for which they are collected in addition to the following default purposes, by virtue of your act of submitting them to us.

  • Identify yourself

  • Improve our products and services

  • Send marketing related messages from us and/or our approved partners.

  • Process personal data to tailor your experience on our interactive services.

  • Transfer information among all ELSTEEL companies in Denmark, Poland, India and Sri Lanka.

Furthermore, by clicking  “Register” button on the “Sign up” page or “Send” button on the “Contact us” page,  you consent us to store and process the data and information which you have submitted in accordance with this Policy. We encourage you to be cautious about the data and information you choose to be released and to safeguard your login details.

We request that users who wish to submit their personal information who are aged 16 years or younger than 16 year (“minors”) shall obtain permission from their parents or legal guardians before submitting such information.

You may withdraw your consent to all or any of the above purposes at any time. The withdrawal of your consent shall not affect the lawfulness of processing based on consent before its withdrawal.


4. How data is used/processed:

We process your personal data lawfully, fairly and in a transparent manner. We use your personal data only for the specific and legitimate purpose for which such data is collected and as consented.  We will not further process beyond the extent to you have consented. In the event we intend to process your personal data for any other purpose than you have consented us, we shall seek your explicit consent.

In addition to the primary requirement of identification of yourself, we generally use personal data in accordance with your consent to provide following services:

  • send marketing related emails (product updates, newsletters, surveys, etc.)

  • place and/or process orders

  • receive/make payments

  • manage user account

  • email important notifications and reminders

  • obtain feedback

  • take follow-up actions

  • tailor your experience on our interactive services.

  • contact to request or send further information


5. Storage and retention of data:

We store your personal data in our databases in a form which permits identification of yourself for no longer than is necessary for the purposes for which the personal data are collected and consented. Data in our databases are shared by all ELSTEEL companies in Denmark, Poland, India and Sri Lanka.

We always take every reasonable step to keep your data accurately and up to date. We may from time to time contact you to verify the accuracy of your personal data. Whenever we find that personal data are inaccurate, relating to the purposes for which they are processed or consented, such data will be erased or rectified in consultation with you by email or over the phone without delay.


6. Data retention period

Your personal data will not be processed beyond the purpose for which they are collected and as consented, but will be retained in our databases for a period of 5 years (Retention Period), though the fulfillment of the purpose for which they are collected. At the end of the Retention Period, we may remove your data from our databases or seek your consent to extend the Retention Period.

Whenever you decide not to keep your data in our databases, we will take steps to remove them from our databases within 72 hours from the receipt of your request. In the event of your data stored in our databases needs to be updated or altered, you may make a request in order for us to make necessary changes, which will be done within 72 hours from the receipt of your request. You can make such data removal or alteration requests via email to “privacy@elsteel.com” or by writing to the address supplied hereunder in this Policy. All such requests placed online will be confirmed by email if you have provided us with an email address.


7. How do we secure and protect confidentiality of your data?


We understand that the Internet is not a secure medium and therefore we have implemented security measures, wherever possible, to protect the loss, misuse or alteration of personal data and information stored in our databases by means of password protected access control systems, encryption mechanisms, firewalls and virus scanners. The data on paper documents are kept under strict supervision with limited physical access. 

We store and process your data ensuring their integrity and confidentiality. Due to our password protected access control systems, your data is protected against unauthorized or unlawful processing. Our staff who handles your data is well educated about their responsibilities towards non-disclosure of confidential information and have been trained to protect confidentiality of personal data. We do not share any confidential information with third parties without the consent of their owner. Our backup procedures guarantee immediate restoration of our databases in any accidental loss, destruction or damage of data.  


8. Marketing activities:

We send our marketing literature such as product updates, newsletters, surveys, etc. as consented by you at the time providing your personal details and other information. We may contact you to obtain further information of feedback about our services in order to improve our marketing activities. In the event you do not wish to receive such marketing literature or to be contacted by us for marketing activities, you may contact us to get yourself unsubscribed for those services. Our contact details are supplied at the bottom of this Policy.


9. Your data protection rights:

We would like to inform you that we are committed to respect and to be complied with the following data protection rights.

  • Right to access

  • Right to rectification

  • Right to erasure

  • Right to restrict processing

  • Right to data portability

You may request us any time through our contact details supplied at the bottom of this Policy, if you wish to exercise any of the above rights or to verify our practices relating to the protection of above rights. Upon receipt of your request, we acknowledge the same and reply you within a reasonable time period.  


10. How cookies are used and managed:

Cookies are test files placed on your computer (or any other device used to browse a website) by the website to collect standard Internet log information and visitor behavior information. 

Currently we use cookies on our corporate website (www.elsteel.com) to identify yourself for usability purposes only. We do not track your movement around the service or record any information about you. Our cookies are used specifically for identifying whether you have visited our website before, welcoming you as a returning user and offering to display you your last visit to our website.

You may not accept cookies at any time or remove already accepted cookies by making necessary settings in your web browser. However, some of our web services may not function as a result.  

For further information on cookies please refer to www.microsoft.com/info/cookies.htm. This site includes instructions on how to accept or reject cookies and also how to remove them should you wish to do so.


11. Changes to the Policy:

We reserve the right to make changes, modifications or alterations to this Policy from time to time and update this page. Therefore, you are requested to check this page from time to time to ensure that you are satisfied with the way we treat your data. If you have any questions or comments about changes made to this Policy, you are requested to inform us in writing through the contact details supplied at the end of this Policy.


12. Disclaimer

If we provide any links to other website, we inform you that ELSTEEL is not responsible for the content or privacy practices related to those websites. You are advised to read Privacy Policies of those websites.


13. How to contact us:

In the event you have any questions about this Privacy Policy, the data we hold on you or you would like to exercise one of your data protection rights, you may reach the following contact person of ELSTEEL:   


            Name: Manoj Fernando                      

            Designation: Head of Intellectual Property                 

            Department: Intellectual Property Department

            Postal Address: ELSTEEL (Pvt) Ltd. Spur Road 2, Phase I, EPZ, Katunayake-11420, Sri Lanka

            Telephone No. : +94 11 5392392

            Email: privacy@elsteel.com


14. Last date of update of this Policy: 24 February 2020