🔒 Privacy Policy

Effective Date: July 2025

1. Introduction

The Road Development Authority (RDA) of Sri Lanka ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Loan Application & Status Viewer System ("the System"). By accessing this System, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information to provide and improve our services:

• Personal Identification Information: PF Number, Employee Name, NIC Number, and loan-related information required for application processing.
• Financial Information: Salary details, loan amounts, existing deductions, and repayment history.
• Usage Data: Information about how you use the System, including login timestamps, pages visited, and interaction patterns.
• Device Information: Browser type, IP address, and device type for security and performance monitoring.
• Bank Account Information: Bank code, branch code, account number, and account holder name for loan disbursement purposes.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: Processing loan applications, verifying eligibility, and managing loan status tracking.
• Identity Verification: Authenticating your identity when you access the System using PF and NIC credentials.
• Communication: Sending important updates about your loan status and system notifications.
• Improvement: Analyzing usage patterns to improve System performance and user experience.
• Compliance: Fulfilling legal obligations and government reporting requirements.
• Disbursement: Processing loan disbursements to your registered bank account.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure session management with authentication requirements
• Encrypted database storage for sensitive information
• Regular security audits and vulnerability assessments
• Access controls with role-based permissions
• Secure HTTPS connections for all data transmission

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Loan records are retained in accordance with government financial record-keeping requirements.

6. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• With authorized RDA personnel for official purposes (HR, Finance, and Management)
• When required by law, court order, or legal process
• To protect the rights, property, and safety of RDA and its employees
• With government bodies for audit and compliance purposes
• With banks for loan disbursement processing

7. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your information (subject to legal requirements and record-keeping obligations)
• Restriction: Request restriction of processing in certain circumstances
• Complaint: Lodge a complaint with relevant data protection authorities

8. Cookies and Tracking

The System uses session cookies to maintain your login state and enable essential functionality. These cookies are temporary and are automatically deleted when you close your browser. We do not use tracking cookies for advertising purposes.

9. Third-Party Links

The System may contain links to external websites, including government portals and bank websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any external sites you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date. We encourage you to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

• Email: privacy@rda.gov.lk
• Phone: 011-2046200
• Address: Finance Division, Road Development Authority, Maganeguma Maha Madura, 216, Denzil Kobbekaduwa MW, Battaramulla, Sri Lanka