top of page

Privacy Policy

Disclaimer

Marisvitae (Pvt) Ltd ("Marisvitae", "we", "us", or "our") operates the website www.marisvitae.lk and provides Ceylon Giant Prawn under the brand Marisvitae Ceylon. This Privacy Policy explains what personal data we collect when you interact with us, how we use it, who we share it with, and the rights you have in relation to it.

We take your privacy seriously and handle personal data in accordance with Sri Lanka's Personal Data Protection Act, No. 9 of 2022 ("PDPA"), and, where applicable, the European Union General Data Protection Regulation ("GDPR") and the United Kingdom's UK GDPR.

If you have any questions about this Policy or our data practices, please contact us at info@marisvitae.lk.

​

1. Who We Are

Marisvitae (Pvt) Ltd is a private limited company incorporated in Sri Lanka. Our brand, Marisvitae Ceylon, produces Ceylon Giant Prawn through culture-based fisheries in Sri Lanka's inland reservoirs, in partnership with registered Fisheries Cooperative Societies.

For the purposes of the PDPA, we are the Data Controller of the personal data collected through our website and business operations. For the purposes of the GDPR and UK GDPR, we act as Data Controller in relation to visitors from the European Economic Area and the United Kingdom respectively.

Contact

Marisvitae (Pvt) Ltd

Colombo, Sri Lanka

Email: info@marisvitae.lk

Phone: +94 77 179 2723

2. What Personal Data We Collect

We collect only the personal data that is necessary for us to communicate with you, respond to your enquiries, and operate our business. The categories of personal data we may collect are:

2.1 Information you provide to us

When you use a contact or enquiry form on our website, subscribe to updates, or communicate with us by email, phone, or WhatsApp, you may provide us with:

  • Your name and, where relevant, your role or title

  • Your business or organisation name

  • Your email address and phone number

  • Your country, city, or region

  • The nature of your enquiry — for example, product interest, indicative volume, delivery preference, incoterms, or the reason you are contacting us

  • Any other information you choose to include in your message

2.2 Information collected automatically

When you visit www.marisvitae.lk, our web hosting platform (Wix.com Ltd) collects certain technical information automatically. This may include:

  • Your IP address and approximate geographic location

  • The device type, browser, and operating system you are using

  • The pages you visit on our site and the time spent on each

  • Referring website URLs and search terms that brought you to our site

  • Cookie and similar tracking technology identifiers

2.3 Cookies

Our website uses cookies and similar technologies to make the site work, to remember your preferences, and to help us understand how visitors use the site. Cookies are small text files placed on your device when you visit a website.

We use the following categories of cookies:

  • Essential cookies — required for the website to function, such as remembering your session and consent preferences. These cannot be disabled.

  • Analytics cookies — used by our hosting platform to gather anonymous statistics about site usage, such as page views and visit duration. These help us understand which content is useful.

  • Functional cookies — used to remember choices you make, such as language preference.

You can control cookies through your browser settings and, where offered on our site, through the cookie consent banner. Declining non-essential cookies will not prevent you from using the site.

3. How We Use Your Personal Data

We use personal data for the following purposes:

  • To respond to enquiries you send us through the website, by email, or via WhatsApp

  • To provide information about Ceylon Giant Prawn, pricing, availability, or supply terms in response to trade or export enquiries

  • To fulfil orders and manage supply relationships with chefs, restaurants, importers, and distributors

  • To communicate with grant partners, research bodies, and institutional stakeholders about programmes, funding, or collaboration

  • To send you occasional updates about our work if you have specifically requested them

  • To improve our website and services based on how visitors use them

  • To comply with our legal, regulatory, and tax obligations in Sri Lanka and, where applicable, in the destination markets to which we export

  • To protect our legal rights and interests, and to prevent fraud or misuse of our services

4. Legal Basis for Processing

Under the Sri Lankan PDPA, we process personal data on the following lawful bases:

  • Your consent, freely given at the point of data collection (for example, when you submit an enquiry form)

  • The performance of a contract with you, or steps taken at your request prior to entering into a contract

  • Compliance with a legal obligation to which we are subject

  • Our legitimate interests in operating our business, provided these are not overridden by your rights

For visitors from the European Union, the United Kingdom, or other jurisdictions with equivalent laws, the same lawful bases apply under the GDPR and UK GDPR frameworks respectively.

5. Who We Share Your Data With

We do not sell your personal data. We do not share it with third parties for their own marketing purposes.

We share personal data only in the following limited circumstances:

5.1 Service providers

We use trusted third-party service providers to help us operate our website and business. These include:

  • Wix.com Ltd — our website hosting and forms platform

  • Google LLC — analytics, verification, and productivity services

  • Meta Platforms Ireland Limited — WhatsApp Business messaging

  • Email and cloud storage providers used to manage business correspondence

These providers process personal data on our behalf under agreements that require them to protect your data and use it only for the purposes we specify.

5.2 Regulatory and legal disclosures

We may disclose personal data where required by law, court order, or by request of a competent Sri Lankan authority (such as the Department of Fisheries and Aquatic Resources, the National Aquaculture Development Authority, the Inland Revenue Department, or the Sri Lanka Data Protection Authority), or a foreign authority to whose jurisdiction we are subject (such as customs and food safety authorities in destination export markets).

5.3 Business partners

Where relevant to fulfilling your enquiry — for example, coordinating an export shipment with our processing partner or a freight forwarder — we may share limited business contact information with those partners under confidentiality obligations.

6. International Data Transfers

Marisvitae is based in Sri Lanka. Some of the service providers we use are located outside Sri Lanka, including in the United States, Israel, the European Union, and India. When personal data is transferred outside Sri Lanka, we take reasonable steps to ensure it receives an adequate level of protection, in accordance with the requirements of the PDPA and, where applicable, the GDPR and UK GDPR.

Where your data is transferred to a jurisdiction that does not have a formal adequacy decision from the relevant authority, we rely on Standard Contractual Clauses, supplementary safeguards, or your explicit consent, as appropriate.

7. How Long We Keep Your Data

We keep personal data only for as long as we need it for the purposes described in this Policy, or as required to meet legal, tax, or regulatory obligations.

Indicative retention periods:

  • Enquiry form submissions and general correspondence: 24 months from last contact, unless a business relationship is ongoing

  • Customer records and export documentation: 7 years, to meet accounting, tax, and export compliance obligations

  • Marketing subscription data: until you unsubscribe, plus 6 months to process the unsubscribe request

  • Website analytics data: as configured by our analytics provider, typically 14 to 26 months in aggregated form

Where personal data is no longer required, we securely delete or anonymise it.

8. How We Protect Your Data

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These include access controls, encryption of data in transit, secure hosting, and staff awareness of data protection responsibilities.

No transmission over the internet or method of electronic storage is fully secure, however. While we work to protect your personal data, we cannot guarantee its absolute security. If we become aware of a security breach that affects your personal data, we will notify you and the relevant regulator in accordance with applicable law.

9. Your Rights

Under the Sri Lankan PDPA, and where applicable the GDPR and UK GDPR, you have the following rights in relation to the personal data we hold about you:

  • The right to access — to request a copy of the personal data we hold about you

  • The right to rectification — to request correction of inaccurate or incomplete data

  • The right to erasure — to request deletion of your data, subject to legal and operational retention requirements

  • The right to restrict processing — to ask us to limit how we use your data in specific circumstances

  • The right to object — to object to processing based on our legitimate interests or for direct marketing

  • The right to data portability — to receive your data in a structured, commonly used format, or to have it transmitted to another controller, where technically feasible

  • The right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing

  • The right to complain to a supervisory authority — the Data Protection Authority of Sri Lanka, or the relevant authority in your country of residence

To exercise any of these rights, please contact us at info@marisvitae.lk. We will respond to your request within 30 days, or such shorter period as required by applicable law. We may need to verify your identity before responding to substantive requests.

10. Direct Marketing

We do not send unsolicited marketing communications. If you have subscribed to receive updates or newsletters from us, you may unsubscribe at any time using the link in the email or by writing to info@marisvitae.lk.

11. Children's Data

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will delete it.

12. Third-Party Links

Our website may contain links to third-party websites, including LinkedIn, Facebook, and WhatsApp. This Policy does not apply to those websites. We recommend you review the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. When we do, we will update the "Last updated" date at the top of this page. If the changes are material, we will provide additional notice, such as a prominent notice on the website or a direct communication.

We encourage you to review this Policy periodically.

14. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Marisvitae (Pvt) Ltd

Email: info@marisvitae.lk

Phone: +94 77 179 2723

Website: www.marisvitae.lk

You also have the right to lodge a complaint with the Data Protection Authority of Sri Lanka. In the European Union and the United Kingdom, complaints can be lodged with the supervisory authority in your country of residence.

bottom of page