Privacy Policy

Information We Collect

We collect information you provide directly to us and information gathered automatically through your use of our website and services.

• Contact Information: Name, email address, phone number, company name, and country.
• Business Information: Industry sector, trade requirements, project details, and sourcing needs.
• Transaction Data: Details of services requested, brokerage agreements, and payment records.
• Communications: Records of correspondence, inquiries submitted through our contact form, and meeting notes.
• Technical Data: IP address, browser type, pages visited, and referring URL (collected automatically via cookies and server logs).

How We Use Your Information

Your data is used solely for legitimate business purposes aligned with the services you have engaged us for:

• To respond to inquiries and facilitate trade brokerage services.
• To prepare, negotiate, and execute Sales and Purchase Agreements (SPAs) and related contracts.
• To process service fees and manage financial transactions.
• To fulfill compliance obligations under applicable Sri Lankan, UAE, and international law.
• To send service-related updates, transaction confirmations, and necessary correspondence.
• To improve our website and service offerings through aggregated analytics.

Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share data only under the following circumstances:

• Within the Group: Relevant member companies within the One Kava Group where necessary to deliver the service.
• Trade Partners: Verified counterparties in specific transactions, only with your prior knowledge.
• Professional Advisors: Legal counsel, auditors, and compliance professionals under confidentiality obligations.
• Regulatory Authorities: Where required by law in Sri Lanka, the UAE, or applicable jurisdictions.
• Payment Processors: Secure, PCI-DSS-compliant payment service providers for transaction processing.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes set out in this policy, comply with legal obligations, and resolve disputes. In general:

• Contact inquiries: 2 years from last communication.
• Contractual and transaction records: 7 years (statutory commercial retention).
• Website analytics: 26 months (anonymised after 12 months).

Cookies & Tracking

Our website uses essential cookies to function properly. We do not use advertising or behavioural tracking cookies. Essential cookies include session management and security tokens. By using our site, you consent to the use of essential cookies.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal retention requirements.
• Objection: Object to processing for direct marketing purposes.
• Portability: Request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at info@onekava.com. We will respond within 30 days.

International Transfers

As a globally operating group with offices in Sri Lanka and the UAE, your data may be processed in multiple jurisdictions. We ensure appropriate safeguards are in place for any cross-border transfer, including standard contractual clauses where applicable.

Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include SSL/TLS encryption, access controls, and regular security reviews.

Policy Updates

We may update this Privacy Policy from time to time. Material changes will be communicated via our website. Continued use of our services after changes constitutes acceptance of the revised policy.