Privacy Policy

EASTERN MEDICAL CORPORATION (PVT) LTD is responsible for the personal information collected directly through this website.

Privacy enquiries may be sent to info@emcgroups.com. EMC has not published a separate Data Protection Officer contact for this website.

The information collected depends on how you contact EMC. Contact enquiries may include your name, email address, telephone number, organisation name, subject, and enquiry message.

Product quotation requests may include your name, email address, telephone number, organisation name, product category, product or equipment requirement, quantity, preferred brand or specification, general delivery requirement, and additional notes. A quotation request through the website does not itself create an order or contract.

Service requests may include your name, email address, telephone number, organisation name, service location where provided, request type, equipment name, equipment brand, model, serial number, general issue description, and other information voluntarily provided.

Career enquiries may include your name, email address, telephone number, area of interest, and enquiry message. The website does not currently provide CV upload.

EMC HMS consultation enquiries may include contact name, email address, telephone number, organisation or hospital name, general information about branches, general department information, expected user groups, infrastructure overview, operational requirements, and enquiry message.

If a website enquiry later proceeds into a quotation, order, delivery, service agreement, invoice, warranty matter, installation, maintenance arrangement, or other business transaction outside the website, EMC may collect and maintain related business records.

Those records may include organisation details, contact-person details, quotation records, product requirements, purchase-order details, billing details, delivery address, delivery-contact details, invoice records, payment confirmation, warranty information, installation records, service and maintenance records, and communications relating to the transaction.

The public website does not collect payment-card details, operate an ecommerce checkout, process online orders, use online card payment gateways, or store payment-card information.

Some technical information may be recorded automatically by the website, hosting provider, or security services to operate, secure, troubleshoot, and maintain the website.

Depending on the production hosting configuration, this may include IP address, browser type, device type, operating-system information, requested page or resource, date and time of request, referring page where supplied by the browser, HTTP status, basic request and security information, error and diagnostic records, bot-detection results, and form-verification status.

The current repository review did not identify active website analytics cookies, advertising trackers, marketing pixels, live chat, session recording, newsletter subscription forms, customer accounts, patient accounts, or authentication cookies.

EMC uses Cloudflare Turnstile to protect public forms against automated abuse and spam. Cloudflare Turnstile evaluates technical and browser-related signals to distinguish legitimate visitors from automated traffic and protect website forms.

Turnstile may process technical and security signals such as IP address, user-agent information, browser and connection characteristics, TLS fingerprint, website site key, website origin, challenge or verification result, and related security signals.

Turnstile processing is used for website security and bot prevention, not by EMC for advertising or marketing profiling. EMC does not publish Turnstile secret keys, verification endpoints, token values, hostname configuration, or internal validation logic.

EMC uses Resend as an email-delivery service provider to transmit website enquiries to authorised EMC recipients.

Information processed for email delivery may include sender or contact name, email address, telephone number where provided, organisation, form subject, form message, quotation details, service-request details, career-enquiry details, EMC HMS enquiry details, email recipient information, message-delivery information, and technical delivery records.

Resend and its authorised subprocessors may process information outside Sri Lanka, including in the United States, subject to the provider's terms and applicable safeguards. EMC does not publish Resend API keys, internal recipient configuration, message IDs, internal email templates, or provider logs.

The website may use necessary browser storage to support security features.

Cloudflare Turnstile or hosting and security services may use necessary cookies, storage, or browser signals to support security and website operation.

The Contact Us page includes an embedded Google Map to show the EMC location. Google may process technical information when the map loads or when visitors open Google Maps.

EMC does not currently use advertising cookies, marketing-tracking cookies, or website analytics cookies in the reviewed implementation. The Cookie Policy should be reviewed together with this Privacy Policy when production hosting, analytics, embedded media, or consent settings are finalised.

EMC may use personal information to respond to enquiries, prepare and follow up quotations, review product requirements, handle service and maintenance requests, respond to career enquiries, review EMC HMS consultation requests, communicate about requested products or services, and arrange delivery, installation, maintenance, or support.

EMC may also use information to manage customer and supplier relationships, maintain transaction, accounting, warranty, and service records, protect website forms from spam, bots, misuse, and security threats, troubleshoot and maintain the website, comply with legal, regulatory, accounting, audit, and contractual requirements, establish, exercise, or defend legal claims, and improve EMC services based on genuine operational feedback.

EMC does not use website information for behavioural advertising, sale of visitor profiles, automatic newsletter subscription, unrelated marketing, automated medical decisions, AI diagnosis, or patient profiling.

EMC may process information where necessary to respond to a request made by you, prepare a quotation or take steps requested before a transaction, provide or manage an agreed product or service, comply with legal or regulatory obligations, protect the website and prevent misuse, and maintain legitimate business and administrative records where permitted by law.

Where processing depends on consent, you may withdraw that consent, subject to applicable law. Withdrawal does not affect processing that occurred lawfully before withdrawal.

EMC intends to process personal data in accordance with applicable Sri Lankan law, including applicable requirements of the Personal Data Protection Act. This Privacy Policy does not constitute legal advice or a certification of compliance.

EMC may share information only where reasonably necessary with authorised EMC employees and representatives, Resend for email delivery, Cloudflare for Turnstile security verification, website-hosting and infrastructure providers, IT maintenance and security providers, suppliers or manufacturers where necessary to assess a product request, delivery and logistics providers where a transaction proceeds, installation, maintenance, or technical-service partners where required, professional advisers, and authorities where required by law.

Information may also be shared with a successor organisation in a lawful merger, restructuring, acquisition, or transfer of relevant business assets, subject to applicable safeguards.

EMC does not sell personal information. Only information reasonably necessary for the relevant purpose is shared, and not every listed provider receives every visitor's information.

Some service providers used by EMC may process or store information outside Sri Lanka.

Resend's international processing may include processing in the United States. Cloudflare and other hosting, infrastructure, or security providers may also process technical and security information in locations required for their services.

EMC will seek to use providers and arrangements that provide appropriate protections as required by applicable law. EMC does not promise that all information remains within Sri Lanka, and this policy does not claim a specific transfer mechanism before legal review and active provider agreements confirm it.

The public EMC website is not designed to collect patient or highly sensitive information. Please provide only the minimum information necessary for EMC to understand and respond to your request.

Do not submit patient names, patient identification numbers, medical records, diagnosis information, laboratory results, prescriptions, clinical images, biometric data, financial account passwords, system passwords, access credentials, private encryption or licence keys, confidential hospital databases, or full payment-card information through public website forms.

If sensitive information is submitted unintentionally, EMC may restrict, delete, or otherwise handle it as appropriate, subject to legal and operational requirements.

The EMC website is intended for healthcare organisations, professionals, suppliers, job seekers, and other adult business users. It is not directed to children, and EMC does not knowingly request personal information from children through the public website.

EMC uses reasonable and appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss, or misuse.

These measures may include restricted access, server-side validation, spam and bot protection, secure configuration, access controls, provider access limitation, logging and monitoring where appropriate, staff and service-provider confidentiality expectations, and regular maintenance and security review.

No method of internet transmission or electronic storage is completely secure, and EMC cannot guarantee absolute security.

EMC retains information only for as long as reasonably necessary for the relevant purpose. Different categories of information may have different retention periods.

Information may be retained to respond to and close an enquiry, prepare or follow up a quotation, manage a product, service, warranty, delivery, or installation, maintain accounting, tax, contractual, audit, and legal records, resolve complaints or disputes, protect against fraud, misuse, or security incidents, and meet applicable legal or regulatory requirements.

When information is no longer reasonably required, EMC will take appropriate steps to delete, anonymise, or securely restrict it, subject to applicable legal and operational requirements. A formal retention schedule remains subject to management and legal approval.

Subject to applicable law and relevant exceptions, you may have the right to request access to personal information held about you, information about how your information is processed, correction or completion of inaccurate or incomplete information, withdrawal of consent where processing is based on consent, that EMC refrain from certain further processing where applicable, erasure of personal information where legally permitted, and review of a privacy concern or complaint.

A written request may be sent to info@emcgroups.com. EMC may need to verify the requester's identity before disclosing, correcting, or deleting information, but EMC will not request excessive identity documents by default.

Some requests may be limited by legal obligations, accounting requirements, contractual requirements, evidentiary requirements, ongoing disputes, security obligations, or the rights of other individuals. Individuals may contact the Data Protection Authority of Sri Lanka regarding applicable data-protection concerns.

Cloudflare Turnstile automatically evaluates technical signals to identify automated or abusive activity. This security check may determine whether a website form submission is accepted or rejected as potentially automated.

EMC does not use website information for automated medical diagnosis, treatment decisions, credit decisions, employment selection, or other decisions producing comparable legal or significant effects.

The website may contain links to third-party websites or resources and may embed third-party resources such as Google Maps for location display. EMC is not responsible for the privacy practices of independent third-party websites, and a link or embed does not imply endorsement.

Visitors should review the third party's own privacy information before submitting information to that third party.

Submitting a website enquiry does not automatically subscribe you to marketing communications.

EMC will not use enquiry information for unrelated promotional email without an appropriate basis. Any future newsletter or marketing subscription must use a separate, clear process and allow visitors to unsubscribe from optional marketing.

EMC may update this Privacy Policy to reflect changes in the website, services, providers, operational practices, or applicable legal requirements.

The updated version will be published on this page with a revised Last updated date. EMC does not promise individual email notification for every policy change unless a separate notification process is adopted.

Privacy enquiries may be sent to EASTERN MEDICAL CORPORATION (PVT) LTD at info@emcgroups.com.

This website does not publish a separate privacy hotline or name an individual employee as the permanent privacy contact.