Privacy Policy

Last updated: 29 June 2026

This Privacy Policy explains what information The Goodness Factory (Pvt) Ltd (“we”, “us”) collects through this website, why we collect it, and how we keep it safe. We have written it in plain language; if anything is unclear, write to us at info@thegoodnessfactory.lk.

1. Who we are

The Goodness Factory (Pvt) Ltd is a Sri Lankan rice-bran-oil producer based in Colombo. We are the controller of any personal information submitted through this site.

2. What we collect

We only collect what you choose to send us through the inquiry form:

  • Your full name
  • Your company name and job title
  • Your email address
  • The message or question you write

We do not use analytics tools, advertising cookies, or third-party trackers on this website. We do not buy contact lists. We do not enrich your data with information from other sources.

3. Why we collect it

We use the information you submit only to:

  • Reply to your inquiry within 24 business hours;
  • Send the samples, certificates of analysis (COAs), pricing or documentation you ask for;
  • Continue the commercial conversation you initiated, including quotes, contracts and shipping arrangements where applicable.

Under the Sri Lanka Personal Data Protection Act No. 9 of 2022, the lawful basis is your consent (you fill in the form) and our legitimate business interest in responding to commercial inquiries you have addressed to us.

4. How long we keep it

We keep inquiry records for as long as a commercial relationship is active, and for up to three years after the last communication so we can answer follow-up questions, honour warranties, and meet our tax and accounting obligations. After that, records are deleted or anonymised.

5. Who can see it

Submissions arrive in a mailbox monitored by a small number of named staff, including our Director, Pusparaj. We share your information with no one outside the company, except:

  • Our email and form-handling provider (Formspree), which routes the form submission to us — they act as a processor and do not use your data for any other purpose;
  • Authorities, where we are required to do so by Sri Lankan law.

6. Cookies

This website does not set any cookies of its own. We do not embed third-party analytics, advertising pixels, or social-media widgets that would set cookies on your device. If we ever change this, we will update this policy and add a clear cookie notice.

7. Your rights

You have the right to ask us, at any time, to:

  • Confirm what information about you we hold;
  • Correct anything inaccurate;
  • Delete your information (we will, unless we are legally required to keep it);
  • Withdraw your consent to ongoing communication.

To exercise any of these rights, email info@thegoodnessfactory.lk. We aim to reply within 14 days. You also have the right to complain to the Sri Lankan Data Protection Authority if you are not satisfied with our response.

8. How we keep it safe

Information travels from your browser to our mailbox over encrypted HTTPS. Our staff mailboxes require strong passwords and two-factor authentication. We restrict access to people who need it to reply to you.

9. Changes to this policy

If we change how we handle information, we will update this page and revise the “Last updated” date above. Material changes will be highlighted at the top of the page for at least 30 days.

10. Contact

Questions about this policy or about your data? Write to info@thegoodnessfactory.lk.