Privacy Policy

At Senfin Securities Limited ("Senfin", "we", "our", "us"), we are committed to protecting your privacy and maintaining the confidentiality of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with applicable laws and regulations of Sri Lanka, including the Securities and Exchange Commission of Sri Lanka (SEC) rules and the Personal Data Protection Act, No. 9 of 2022.

1. Information We Collect

We may collect the following categories of personal information from you:

• Identification details (e.g., name, NIC/passport number, address, date of birth)
• Contact details (e.g., telephone number, email address)
• Financial and investment information (e.g., bank account, income, trading activity)
• KYC/AML verification documents (as required by the SEC, CSE, and FIU guidelines)
• Website usage data, including cookies, IP addresses, and browsing behavior

2. How We Use Your Information

Your information is collected and processed for the following purposes:

• To establish and manage your trading account
• To comply with regulatory and legal obligations
• To execute trades, settlements, and client instructions
• To communicate important information, statements, or updates
• To improve our services and enhance investor experience
• To prevent fraud, money laundering, and other prohibited activities

3. Disclosure of Information

We do not sell, rent, or trade your personal information. However, we may share it with:

• Regulatory and supervisory authorities (SEC, CSE, FIU, IRD, etc.)
• Our parent company Senkadagala Finance PLC and its subsidiaries, where applicable
• Service providers engaged for technology, compliance, and operations support
• Legal, audit, and professional advisors bound by confidentiality obligations

4. Data Protection and Security

We use industry-standard security measures to protect your information from unauthorized access, alteration, or disclosure. Access to personal data is restricted to authorized employees and agents who require it for legitimate business purposes.

5. Retention of Information

We retain personal information only for as long as necessary to fulfill the purposes stated above or as required by applicable laws and regulatory guidelines.

6. Your Rights

You have the right to:

• Request access to or correction of your personal information
• Withdraw consent for processing, where applicable
• Lodge a complaint with the Data Protection Authority of Sri Lanka

Requests may be submitted in writing to our Compliance Officer at: compliance@senfinsecurities.com

7. Cookies and Online Data

Our website may use cookies to improve functionality and user experience. You can control or disable cookies through your browser settings, though some website features may not function properly without them.

8. Changes to This Policy

Senfin Securities reserves the right to amend this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. Updated versions will be published on our website with the effective date.

9. Contact Us

For any questions or concerns about this Privacy Policy or our data protection practices,
please contact: