Introduction This Privacy Notice explains how PeoplesHR collects and uses your personal data. This includes the “lawful basis for processing” your personal data. PeoplesHR is the “Data Controller” of the personal data you (“Data Subject”) provide us. We understand that you are aware of and care about your own personal privacy interests, and we take that seriously. This Privacy Notice describes the PeoplesHR’s policies and practices regarding its collection and use of your personal data, and sets forth your privacy rights. We understand that information privacy is a continuous responsibility and so we will from time to time update this Privacy Notice as we undertake new personal data practices or adopt new privacy policies. Data Protection Officer PeoplesHR is headquartered in Colombo, Sri Lanka. PeoplesHR has appointed an internal Data Protection Officer for you to contact if you have any questions or concerns about the PeoplesHR personal data policies or practices. The PeoplesHR Data Protection Officer’s contact information is as follows: (+94) 114621111 1. How we collect and process your personal information

1.1. Personal Information You Give To Us When:

1.1.1.You Have Made a Request for a Demo

For this request, you will share the details including but not limited to name, email address and telephone number, on the demo request form available on the website. PeoplesHR will be processing this information based on “Legitimate Interest” to respond to the request made and for ongoing communication related to the initial query.

When you are in the process of acquiring one or more of our products and services: we use this personal data to answer any further queries including around the product and/or service terms and conditions and for the provisioning of the product and/or service. This is based on “Contractual necessity”

1.1.2.Your Correspondence with PeoplesHR

If you correspond with us by email, the postal service, or other form of communication, we may retain such correspondence and the information contained in it and use it to respond to your inquiry; to notify you of any PeoplesHR events, publications or other services or to keep a record of your complaint or request. As always, if you wish to have PeoplesHR “erase” your personal information or otherwise refrain from communicating with you, please contact us at

When you have expressed interest in our products and services: we use this to answer any queries that you may have about PeoplesHR products and services, the website or other related queries based on “Legitimate Interest”.

1.1.3.You Subscribe To Our Publications

If you subscribe via PeoplesHR’s website to receive the latest news, articles, events and webinars you are providing your “Consent” for PeoplesHR to email you accordingly. You may unsubscribe at any time by using the link included at the bottom of each of these emails. You may also opt out of receiving any marketing solicitation from us, including email, direct mail, and phone solicitations, by contacting us at This website contains links to other websites: PeoplesHR is not responsible for the privacy practices or the content of other websites.

If we have been emailing you about PeoplesHR’s products and services as you requested to receive information from PeoplesHR prior to the availability of the subscribe option on PeoplesHR’s website, we will continue to do so based on “Legitimate Interest”. You may unsubscribe at any time by using the link included at the bottom of each of these emails.

If you buy from us or have a quote from us, we will email you information about similar services and products. Our processing in this case is based on “Legitimate Interest”. You can always opt out at any time by using the unsubscribe link included at the bottom of each email.

1.1.4.If you do unsubscribe or opt out of marketing, we will keep your name, email address, and mark them as ‘do not mail’ so that you will not receive any further marketing communications.

1.1.5.You Are an Existing Customer

When you are a Customer: we use this personal data, based on “Contractual necessity” to;

  • notify you about changes to the PeoplesHR Product and Services you use
  • provide support for the PeoplesHR Product and Services you use.

1.1.6.You Have Applied For a Job with Us

If you have sent us your curriculum vitae (CV), or we have received your CV from a recruitment agency, we will use the contact details you provide to us to contact you to progress your application. We will use the other information you provide to assess your suitability for the role you have applied for.

The information we ask for is used to assess your suitability for employment. You don’t have to provide what we ask for but it might affect your application if you don’t.

We do not collect more information than we need to fulfil our stated purposes and will not retain it for longer than is necessary. If you are unsuccessful, we will hold your CV for a further six months.

If you are successful, we will provide you with details on the further information we will require, why and what we will do with it during the offer process and your employment.

1.1.7.You Wish To Attend Or Request To Attend A Live Event And Web Conference.

PeoplesHR hosts events and web conferences throughout the year. These include in-person events or seminars as well as web conferences with related to our solutions. When you register for an event or web conference we collect your name and contact information (Email, Mobile/Telephone number), which we then store in our database and use it to provide you the information related to the event or web conference that you have registered for, or even to send you information related to the event you have just attended. Additionally, at live events we take general photographs and video of the audience, which will be used in social media when posting material related to the event. We process this information to fulfil the request you have made to receive information related to the events.

2. When you have not shared personal information You can make use of the resources available in the website that is accessible without giving us your personal data. However, some personal information is necessary so that PeoplesHR can supply you with services you have request, and to authenticate you so that we know it is you and not someone else. If you decline to provide the requested Personal Information, we may not be able to process your inquiry or other requests. 3. Personal information we get from third parties The contact information obtained from marketing third parties are vetted for consent prior to sending marketing materials. If a new contact wishes to unsubscribe from the email notifications, they can do so by clicking the unsubscribe link in the first email that we send out. Use of Website PeoplesHR websites collects certain information automatically and stores it in log files. The information may include internet protocol (IP) addresses, the region or general location where your computer or device is accessing the internet, browser type, operating system and other usage information about the use of PeoplesHR websites, including history of the pages you view. We use this information to design our site to better suit our user’s needs. We may also use your IP address to help diagnose problems with our server and to administer our website, analyse trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences. PeoplesHR has “Legitimate Interest” in understanding how visitors, customers, and potential customers use the website. This assists PeoplesHR in providing more relevant products and services.
  • Cookies PeoplesHR has made available a comprehensive Cookie Notice that describes the cookies used on the website and provides information on how users can accept or reject them.
  • Third Party Websites Hyperlinks Our websites include hyperlinks to, and details of, third party websites. We have no control over, and are not responsible for the privacy policies of third parties. A third-party cloud service provider on servers located in Sri Lanka and Singapore currently hosts this website.
When and How We Share Your Information with Others The personal information collected from you is stored in one or more databases hosted by third parties located in Sri Lanka and Singapore. These third parties do not use or have access to your personal information for any purpose other than cloud storage and retrieval. PeoplesHR shares your personal data to those of our employees, contractors and affiliated partners that need to know that information in order to provide the Services or Products you have or are looking to purchase. Such business functions include hosting our web servers, analysing data, providing legal, accounting and marketing services. We extend our marketing services to include third party marketing agencies in order to provide you with the most up to date information about our products and offers. In the case of PeoplesHR partners, this will be with your knowledge and permission. We require all such parties to maintain the security and confidentiality of your information, and to process data in accordance with our instructions. The storage and processing systems (including email) that we use in the day-to-day running of the PeoplesHR business, which may hold your personal data, are selected for, and monitored on, how they meet the requirements of Personal Data Protection Act No. 9 of 2022 of Sri Lanka. We may be required to share your information:
  • In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
  • If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction. PeoplesHR will not rent nor sell your personal data to anyone.
Transferring Personal Data PeoplesHR is headquartered in Colombo, Sri Lanka. Therefore, the information, we collect will be processed in Sri Lanka. In particular, PeoplesHR collects and transfers personal data only: with your consent; to perform a contract with you; or to fulfil a compelling legitimate interest of PeoplesHR in a manner that does not outweigh your rights and freedoms. The PeoplesHR endeavours to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with PeoplesHR and the practices described in this Privacy Notice. We are committed to ensuring that your personal data is secure. Where we share your personal data with others, as defined above, we require all such parties to maintain the security and confidentiality of your information, and to process the data in accordance with our instructions. Security of Your Personal Data To assist protect the privacy of data and personally identifiable information you transmit through use of this website, we have up-to-date physical safeguards, such as secure areas in buildings; electronic safeguards, such as passwords and encryption; and procedural safeguards, such as customer authentication procedures to prevent ID theft. We update and test our security technology on a constant basis. We limit access to your personal data to those employees who need to know that information to provide products or services to you. We carefully select and monitor outside service providers, such as mail vendors, who have access to customer information, and we require them to keep it safe and secure. We do not allow them to use or share the information for any purpose other than the job they are hired to do. In addition, we train our employees regarding the importance of confidentiality and maintaining the privacy and security of your information. We are committed to taking appropriate disciplinary measures to enforce our employees’ privacy responsibilities. Personal Data Storage and Retention We will only retain your personal data for as long as necessary, for the purpose that it was originally stored and processed for as detailed in the rest of this section. Your personal data is stored by PeoplesHR on its servers, and on the servers of the cloud-based database management services PeoplesHR utilises, located in Sri Lanka and Singapore. PeoplesHR retains data for the duration of the customer’s or client’s business relationship with PeoplesHR and for a period of time thereafter to allow members to recover accounts if they decide to renew, to analyse the data for PeopleHR’s own operations, and for historical and archiving purposes associated with PeoplesHR. For more information on where and how long your personal data is stored for, and for more information on your rights of erasure and portability, please contact our data protection officer at Data Subject Rights You have specific rights concerning the information we hold about you:
  • You have the right to access personal data held about you.
  • You have the right to have inaccuracies corrected for personal data held about you.
  • You have the right to have personal data held about you erased.
  • You have the right to object to direct marketing being conducted based upon personal data held about you
  • You have the right to restrict the processing for personal data held about you, including automated decision-making.
  • You have the right of withdrawal of the consent and the right to object to processing.
Reasonable access to your personal data will be provided at no cost to PeoplesHR conference attendees and others upon request made to the PeoplesHR at If access cannot be provided within a reasonable period, the PeoplesHR will provide you with a date when the information will be provided. If for some reason access is denied, the PeoplesHR will provide an explanation as to why access has been denied. Changes and Updates to this Privacy Notice By using this Site, you agree to the terms and conditions contained in this Privacy Notice and Conditions of Use and/or any other agreement that we might have with you.
  • We keep this Privacy Notice under regular review as the information in this notice is expected to change. We reserve the right to amend the Privacy Notice and Conditions of Use at any time, for any reason, without notice to you, other than the posting of the amended Privacy Notice and Conditions of Use at this Site. We will take reasonable steps to draw your attention to any changes to it. However, to be on the safe side, we suggest that you read this document each time you use the website to ensure that it still meets with your approval. This Privacy Notice was last updated in 2023.