Privacy Policy
Effective date: 19/10/2026
1.Who we are
Liveroom Technologies, referred to as “the Company”, “we”, “us”, “our” in this agreement, is a company registered in Sri Lanka, with its office at 2nd Floor, Oceanica Tower, 490 Galle Road, Colombo 00300, Sri Lanka. We also have an office at 68 Circular Road, #02-01, Singapore 049422. We operate the website www.liveroom.xyz.
We are the controller of the personal data described in this policy. This means we decide why and how your personal data is processed, and we are responsible for protecting it under the PDPA.
This policy explains what personal data we collect through the Website, why we collect it, who we share it with, how long we keep it, and the rights you have. It applies only to the Website. It does not cover other websites that link to or from ours.
2.Personal data we collect
We collect only the personal data needed to respond to you and to run and improve the Website.
| Category | What it includes | How we get it |
|---|---|---|
| Enquiry details | Your name, email address, phone number, company name and the content of your message | You give it to us when you send a message or book a call |
| Job application details | Your name, contact details, CV, work history, qualifications, and anything else you include in your application | You give it to us when you apply for a role or submit your CV through our Careers page |
| Technical data | IP address, browser type and version, device type, operating system, time zone and language settings | Collected automatically when you visit the Website |
| Usage data | Pages viewed, time spent on pages, links clicked, the website that referred you, and approximate location (city or country level) | Collected automatically through cookies and analytics tools |
3.How we use your personal data
We use your personal data only for the purposes below, and only where the PDPA gives us a lawful basis to do so.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Responding to your enquiry, arranging calls and following up | Enquiry details | Taking steps at your request before entering into a contract; our legitimate interest in answering enquiries |
| Keeping a record of our correspondence with you | Enquiry details | Our legitimate interest in managing our business relationships |
| Assessing your application for a current role | Job application details | Taking steps at your request before entering into an employment contract |
| Keeping your CV on file for future openings | Job application details | Your consent, which you can withdraw at any time |
| Measuring how the Website is used and improving it | Technical and usage data | Your consent, given through our cookie banner |
| Keeping the Website secure and preventing misuse | Technical data | Our legitimate interest in protecting our systems |
| Complying with the law, or responding to lawful requests from authorities | Any of the above, as required | Compliance with a legal obligation |
We will not use your personal data for a new purpose that is incompatible with these without telling you first and, where required, asking for your consent.
We do not sell your personal data. We do not use it for automated decision-making that has legal or similarly significant effects on you.
We will not send you marketing messages unless you have asked to receive them. You can opt out of any marketing at any time.
4.Cookies and analytics
Cookies are small text files stored on your device when you visit a website. We use strictly necessary cookies to make the Website work, and analytics cookies only if you accept them through our cookie banner.
| Type | Purpose | Examples | Can you refuse it? |
|---|---|---|---|
| Strictly necessary | Make the Website function and remember your cookie choice | [cookie_consent], [session cookie] | No — the Website cannot work properly without them |
| Analytics | Count visits, see which pages are popular and understand how visitors move around the Website | [Google Analytics 4: _ga, ga*] | Yes — they are off until you accept them |
Cookies are files with a small amount of data that may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our Website. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Website.
Examples of Cookies we use:
- Session cookies: We use session cookies to operate our website.
- Preference cookies: We use preference cookies to remember your preferences and various settings.
- Security cookies: We use security cookies for security purposes.
5.Who we share your personal data with
We share personal data only with the parties below, and only as much as each needs for its role.
- Service providers (processors). Companies that help us run the Website, such as our hosting provider [name], form, email and call-booking services [name], and analytics provider [name]. They act on our written instructions, must keep your data confidential and secure, and may not use it for their own purposes.
- Professional advisers. Lawyers, auditors and accountants, where needed for their services and under a duty of confidentiality.
- Authorities. Courts, regulators, law enforcement or other public bodies, where the law requires it or to protect our legal rights.
- Business transfers. A buyer or successor if our business, or part of it, is sold, merged or restructured. They will be bound by this policy for data received from us.
We do not sell, rent or trade your personal data.
6.Transfers outside Sri Lanka
Our team works across our offices in Sri Lanka and Singapore, so your personal data may be accessed from Singapore. Some of our service providers also store or process data outside Sri Lanka, for example on servers.
When your personal data is transferred outside Sri Lanka, we make sure it is protected to the standard the PDPA requires. We do this by using the safeguards specified by the Data Protection Authority of Sri Lanka, such as contractual clauses with the recipient, and by choosing providers with appropriate security measures.
You can contact us (see section 11) for more information about these transfers and the safeguards we use.
7.How long we keep your personal data
We keep personal data only as long as we need it for the purposes in section 3, or as long as the law requires.
| Data | Retention period |
|---|---|
| Enquiries that do not lead to a business relationship | [24 months] from our last contact with you |
| Enquiries that lead to a contract | For the length of the relationship, then [6 years] for legal, tax and accounting purposes |
| Unsuccessful job applications | [6 months] after the role is filled |
| CVs kept on file with your consent | [12 months], or until you withdraw consent if sooner |
| Analytics data | [14 months] (the period set in our analytics tool) |
| Cookie consent record | [12 months], after which we ask for your choice again |
When the period ends, we delete the data securely or anonymise it so it can no longer identify you.
8.How we protect your personal data
We use technical and organisational measures to protect personal data against loss, misuse, and unauthorised access or disclosure. These include:
- Encrypting data in transit using HTTPS (TLS)
- Limiting access to enquiry data to staff who need it for their work
- Using strong passwords and multi-factor authentication on systems that hold personal data
- Choosing service providers that meet appropriate security standards
No method of transmission over the internet is completely secure. If a personal data breach occurs that is likely to affect you, we will notify the Data Protection Authority and, where required, inform you, as the PDPA requires.
9.Your rights
Under the PDPA, you have the following rights over your personal data:
- Access — ask for confirmation of whether we hold your personal data, and a copy of it.
- Withdraw consent — withdraw consent you have given (for example, to analytics cookies) at any time. This does not affect processing that took place before you withdrew it.
- Object — ask us to stop processing your personal data where we rely on legitimate interests.
- Correction — ask us to correct inaccurate data or complete incomplete data.
- Erasure — ask us to delete your personal data where it is no longer needed, or where processing is unlawful.
- Review of automated decisions — ask for a review of any decision made solely by automated means that significantly affects you. We do not currently make such decisions.
To use any of these rights, email us at info@liveroom.xyz. We may ask you to verify your identity before acting on a request. We will respond within the time the PDPA allows, and tell you the reasons if we cannot fully comply.
10.Other important information
- Children. The Website is intended for adults and businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
- Links to other websites. The Website may link to other websites and social media pages. We are not responsible for their privacy practices, so please read their privacy policies.
- Changes to this policy. We may update this policy when our practices or the law change. We will post the updated version on this page with a new effective date. If the changes are significant, we will show a notice on the Website.
11.Contact us
For questions about this policy or how we handle your personal data, contact us:
- Email: info@liveroom.xyz
- Post: Liveroom Technologies, 2nd Floor, Oceanica Tower, 490 Galle Road, Colombo 00300, Sri Lanka
- Phone: +94 70 663 3636