1. INTRODUCTION
Crystal Property Group (Pvt) Ltd (“CPG”, “we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website at www.cpg.lk, submit an enquiry, or interact with us in connection with our property development and hospitality services.
Please read this Privacy Policy carefully. By using our website or providing us with your personal information, you acknowledge that you have read and understood this policy.
2. WHO WE ARE
Crystal Property Group (Pvt) Ltd is a private company incorporated in Sri Lanka, with its principal place of business at Level 4, Westin Tower, 2 Lake Drive, Rajagiriya, Sri Lanka (10100). We are the data controller responsible for your personal information collected through this website and our related activities.
For privacy-related queries, you may contact us at: Email: [email protected] Phone: +94 77 2292 202
3. INFORMATION WE COLLECT
We may collect the following categories of personal information:
3.1 Information you provide to us directly:
- Full name
- Email address
- Phone number and country code
- Nationality and country of residence
- Nature of your enquiry (e.g., property investment, hotel booking, media, general)
- Any additional information you choose to share in your message or correspondence
3.2 Information collected automatically when you use our website:
- IP address and approximate geographic location
- Browser type and version
- Operating system and device type
- Pages visited, time spent on each page, and navigation paths
- Referring URLs (the website from which you arrived)
- Date and time of your visit
- Cookie identifiers and similar tracking data
3.3 Information from third parties: We may receive information about you from third parties such as marketing partners, event organisers, referral agencies, or publicly available sources, which we may combine with information we already hold about you.
4. HOW WE USE YOUR INFORMATION
We use your personal information for the following purposes:
4.1 To respond to your enquiries and provide you with information about CPG’s property projects (Crystal Sands, The Six, Digana by CPG, and future developments) and hotel services.
4.2 To process and manage expressions of interest, reservations, or sales-related communications.
4.3 To send you marketing communications, newsletters, project updates, and event invitations, where you have consented to receive such communications or where we have a legitimate interest to do so.
4.4 To improve and personalise your experience on our website and to understand how visitors use our website.
4.5 To conduct market research, customer satisfaction surveys, and analysis to improve our services and offerings.
4.6 To comply with our legal obligations and to protect the rights and interests of CPG, our clients, and third parties.
4.7 To manage our business relationships, including with investors, partners, media, and vendors.
5. LEGAL BASIS FOR PROCESSING
We process your personal information on the following legal grounds:
5.1 Consent — Where you have given us clear consent to process your personal information for a specific purpose, such as subscribing to marketing communications.
5.2 Contractual necessity — Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
5.3 Legitimate interests — Where processing is necessary for our legitimate business interests, such as improving our website, marketing our projects, and managing client relationships, provided these interests do not override your rights.
5.4 Legal obligation — Where we are required to process your information to comply with applicable law or regulatory requirements in Sri Lanka.
6. COOKIES AND TRACKING TECHNOLOGIES
6.1 Our website uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyse website performance, and support targeted marketing.
6.2 The types of cookies we may use include:
- Essential cookies — Required for the website to function properly.
- Analytics cookies — Help us understand how visitors use our website (e.g., Google Analytics).
- Marketing and targeting cookies — Used to deliver relevant advertisements and track the effectiveness of marketing campaigns.
- Preference cookies — Remember your settings and choices to personalise your experience.
6.3 You may control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
7. SHARING YOUR INFORMATION
We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:
7.1 With CPG group entities and project-specific entities, including The One Group of Hotels, Crystal Sands, The Six, and Digana by CPG, for the purpose of providing integrated services and communications relevant to your enquiry.
7.2 With trusted service providers and partners who assist us in operating our website, managing CRM systems, conducting email marketing, processing data analytics, and delivering other business services — such providers are contractually required to handle your data securely and in accordance with this policy.
7.3 With legal and regulatory authorities where we are required to do so by applicable law, court order, or government regulation in Sri Lanka.
7.4 In connection with a business transaction, such as a merger, acquisition, restructuring, or sale of assets, in which case your information may be transferred to the relevant parties subject to appropriate confidentiality obligations.
7.5 With your consent, where you have specifically authorised us to share your information with a named third party.
8. INTERNATIONAL DATA TRANSFERS
CPG operates primarily in Sri Lanka and the Maldives. If you are accessing our website from outside Sri Lanka, please be aware that your personal information may be transferred to, stored, and processed in Sri Lanka or in other jurisdictions where our service providers operate. By using our website, you consent to such transfers. We will take reasonable steps to ensure your information is handled securely in accordance with this Privacy Policy.
9. DATA RETENTION
We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The criteria used to determine retention periods include the nature of the information, the purpose for which it is held, and applicable legal obligations. When your information is no longer needed, we will securely delete or anonymise it.
10. DATA SECURITY
We take the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. These measures include secure server infrastructure, access controls, and staff awareness. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
11. YOUR RIGHTS
Depending on applicable law, you may have the following rights in relation to your personal information:
11.1 Right of access — You have the right to request a copy of the personal information we hold about you.
11.2 Right to rectification — You have the right to request that we correct any inaccurate or incomplete personal information.
11.3 Right to erasure — You may request that we delete your personal information where it is no longer necessary for the purpose for which it was collected, or where you withdraw your consent.
11.4 Right to restrict processing — You may request that we limit how we use your personal information in certain circumstances.
11.5 Right to object — You may object to our processing of your personal information for direct marketing purposes at any time.
11.6 Right to withdraw consent — Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe and in accordance with applicable law.
12. MARKETING COMMUNICATIONS
If you have consented to receive marketing communications from us, you may unsubscribe at any time by clicking the “unsubscribe” link in any of our emails, or by contacting us directly at [email protected]. We will process your opt-out request promptly.
13. CHILDREN’S PRIVACY
Our website is not intended for children under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
14. LINKS TO THIRD-PARTY WEBSITES
Our website may contain links to third-party websites. This Privacy Policy applies solely to information collected by CPG through our own website. We are not responsible for the privacy practices or content of any third-party website, and we encourage you to review the privacy policy of any third-party site you visit.
15. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we do, we will revise the “Last Updated” date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
16. GOVERNING LAW
This Privacy Policy is governed by the laws of the Democratic Socialist Republic of Sri Lanka. Any disputes arising in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Sri Lanka.
17. CONTACT US
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us at:
Crystal Property Group (Pvt) Ltd Level 4, Westin Tower, 2 Lake Drive, Rajagiriya, Sri Lanka (10100) Email: [email protected] Phone: +94 77 2292 202