Privacy & Personal Data Protection

Melstacorp PLC (“Melsta”) is committed to protecting personal data in accordance with Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, as amended by Act No. 22 of 2025, and other applicable requirements.

Personal data submitted through this website, including General Enquiries, Contact Us forms, employment applications/CVs, emails to info@melsta.com, names, email addresses, telephone numbers and other personal information, will be processed lawfully and only for legitimate business purposes.

Melsta is committed to:

• Processing personal data lawfully, fairly and only for legitimate purposes
• Limiting access to authorised personnel on a need-to-know basis
• Maintaining appropriate technical and organisational safeguards
• Retaining data only as long as necessary or legally required
• Not selling or disclosing personal data to unauthorised third parties
• Sharing data only where legitimately necessary, appropriately safeguarded or required by law
• Respecting applicable data subject rights under Sri Lankan law

All Melsta personnel are bound by appropriate employment, confidentiality and internal control obligations to safeguard personal and confidential information.

Data protection is everyone’s responsibility. These obligations apply equally to employees, management and the Board of Directors. No position, seniority or authority overrides Melsta’s data protection and PDPA obligations.