Privacy Policy

1. Introduction

Oportunite (Pvt) Ltd (“Oportunite”, “we”, “us”, “our”) operates the website https://oportunite.com and provides phygital brand experience services to clients in Sri Lanka and other markets in the region.

This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit our Website, contact us, subscribe to our newsletter or otherwise interact with us, in line with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (“PDPA”) and other applicable laws.

By using our Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Website.

2. Who We Are and Contact Details

Oportunite (Pvt) Ltd
No. 22/13, Pepiliyana Road, Nugegoda, Sri Lanka

Email: info@oportunite.com
Phone/WhatsApp: +94 70 125 4091

If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us using the details above.

If we appoint a Data Protection Officer (DPO), we will update this Policy with their contact details.

3. Our Role in Relation to Client Data

For some projects and campaigns, we may process personal data on behalf of our clients, for example where we help design and operate digital or physical experiences that involve end-users.

In those situations, our client normally determines the purposes and means of processing and will be the “controller” of that data under the PDPA, while we act as their “processor”.

We process such data strictly in accordance with our clients’ documented instructions and our contractual obligations with them, and we do not use that data for our own independent purposes.

4. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Contact details: Name, email address, phone number, job title and company details when you contact us via email, phone, WhatsApp or website forms.
• Communication data: Content of your messages and any information you voluntarily provide when you reach out to us.
• Newsletter data: Your email address and your preferences when you subscribe to our newsletter or other updates.
• Website usage data (minimal): Standard server logs such as IP address, browser type and access time generated when you access our Website, used only for security and operational purposes.

We primarily process business contact details of professionals and do not intentionally collect sensitive personal data through this Website.

5. How We Collect Personal Data

• Directly from you when you email us, call us, message us via WhatsApp, subscribe to our newsletter, or submit a form on our Website.
• From our clients, where they provide business contact details of their team members to coordinate and execute projects and campaigns with us.
• Automatically through server logs when you access our Website.

6. How We Use Your Personal Data

• To respond to your inquiries and provide information about our services.
• To evaluate, plan and enter into contracts with clients, suppliers and partners.
• To manage ongoing projects and campaigns with you and your organization.
• To send newsletters and updates about Oportunite, our work and relevant insights.
• To operate, secure and maintain our Website and IT systems.
• To comply with legal and regulatory obligations and protect our rights.

For sending newsletters and other electronic marketing messages we rely on your explicit consent, which you can withdraw at any time.

7. Cookies and Tracking Technologies

Our Website currently uses only strictly necessary technologies required for basic operation and security.

We do not presently use third-party analytics tools, advertising cookies, or similar tracking technologies on this Website.

If we introduce such tools in the future, we will update this Privacy Policy and, where required, ask for your consent before setting non-essential cookies.

8. Sharing Your Personal Data

We do not sell your personal data.

We may share your personal data with:

• Our service providers such as website hosting and IT support providers.
• Professional advisers including lawyers and accountants.
• Clients and partners where necessary for project management purposes.
• Public authorities or regulators where required by law.

Where service providers or partners are located outside Sri Lanka, we will take reasonable steps to ensure that appropriate safeguards are in place for your personal data.

9. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Policy or as required by law.

• Contact and inquiry records: retained for up to 3–5 years.
• Client and project data: retained during the engagement period.
• Newsletter data: retained until you withdraw consent.
• Technical logs and website usage data: retained for limited periods.
• Aggregated metrics may be retained longer in non-identifiable form.

10. Your Rights Under PDPA

Subject to conditions and exemptions under the PDPA, you may have the following rights regarding your personal data:

• Right to access your personal data.
• Right to correction of inaccurate data.
• Right to deletion in certain circumstances.
• Right to object or restrict processing.
• Right to withdraw consent.
• Right to object to marketing communications.

To exercise these rights, please contact us at info@oportunite.com.

11. Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure or destruction.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

12. Third-Party Websites

Our Website may contain links to third-party websites and social media platforms such as Facebook, Instagram and LinkedIn.

We are not responsible for the privacy practices or content of those third parties, and we encourage you to read their privacy policies.

13. Children’s Data

Our Website and services are not directed at children, and we do not knowingly collect personal data from individuals under 18 years of age.

If you believe we have collected such data, please contact us so we can delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology or our practices.

When we do so, we will post the updated version on this page and update the “Last updated” date.

Your continued use of the Website after changes have been made will signify your acceptance of the updated Policy.

Last Updated

2026/05/14