Privacy Policy

Agency.lk is owned and operated by Fuchsius (Private) Limited.

This policy applies when you visit Agency.lk, use an account, apply for a job, recruit candidates, purchase a promotion, or otherwise use our services. Agency.lk controls personal data processed to operate the platform. Employers are separately responsible for how they use candidate data after receiving an application.

Where consent is required for a particular use, we will request it separately.

The information we collect depends on how you use the platform. It may include:

• Account information, including email address, account role and status, profile photo, and social sign-in provider identifiers.
• Candidate information, including name, phone number, address, location, skills, education, work experience, CV, portfolio, GitHub and LinkedIn links.
• Application information, including the job, cover letter, submitted profile details, CV, status, and submission dates.
• Employer information, including company and contact details, logo, website, business registration document, verification status, job posts, and advertising material.
• Activity information, including saved jobs, followed companies, job views, and interactions needed to provide platform features.
• Transaction information, including order and gateway references, campaign, amount, currency, and payment status. We do not store complete payment-card details.
• Technical and security information in server logs, such as IP address, browser or device information, timestamps, and request details.

Most information comes directly from you. If you sign in through Google, GitHub, or LinkedIn, we receive verified details made available by that provider, such as your provider ID, email, name, and profile photo.

We may receive payment confirmation and transaction references from iPay, Stripe, or PayPal. Employers provide information about their organisations and vacancies.

We process information to provide requested services, meet legal obligations, protect legitimate business and security interests, and, where applicable, based on consent. We use it to:

• Create, authenticate, secure, and administer candidate, employer, and administrator accounts.
• Publish company profiles, job advertisements, and approved promotional content.
• Send applications to the relevant employer and let employers manage those applications.
• Remember saved jobs, followed companies, preferences, and sign-in state.
• Verify employers and review registration documents, jobs, and advertisements.
• Create payment orders, confirm transactions, keep payment history, and prevent fraud.
• Send verification codes and essential account or service communications.
• Maintain, troubleshoot, secure, and improve the platform and enforce our terms.

We do not sell personal information. We share it only where needed to operate the platform or meet a lawful obligation, including with:

• The employer responsible for a vacancy when you apply, including relevant contact details, CV, experience, education, skills, links, profile photo, and cover letter.
• Google, GitHub, or LinkedIn when you choose that sign-in method.
• iPay, Stripe, or PayPal when you choose that provider for payment.
• Hosting, storage, email delivery, security, and technical providers acting on our behalf.
• Professional advisers, regulators, courts, law-enforcement bodies, or other authorities where disclosure is required or permitted by law.
• A successor organisation during a merger, reorganisation, or transfer of the platform, subject to appropriate safeguards.

Approved company profiles, logos, websites, job advertisements, and banners may be public. Candidate profiles and CVs are not public listings; they are available to the employer connected to an application and authorised platform administrators.

Do not place sensitive or unnecessary personal information in fields intended for publication.

Some social sign-in, payment, hosting, and technical providers may process information outside Sri Lanka. Where applicable, we use reasonable contractual, technical, and organisational safeguards and follow requirements for cross-border processing.

We keep information while your account is active and as long as reasonably necessary to provide services, resolve disputes, prevent fraud, maintain security, enforce agreements, and meet legal, tax, or accounting requirements. The period varies by record and purpose.

Deletion may not immediately remove backups, applications already received by employers, required transaction records, or records retained for legal and security purposes.

Depending on applicable law, you may ask to access personal data, correct incomplete or inaccurate data, erase data, withdraw consent, or object to or restrict certain processing. Much of your profile can be updated directly in your account.

• Send requests from the email linked to your account to privacy@agency.lk.
• Describe your request clearly. We may verify your identity before responding.

We use reasonable technical and organisational measures intended to protect information from accidental loss and unauthorised access, alteration, disclosure, or destruction. No internet service is completely secure, so protect access to your email and device and notify us about suspected unauthorised use.

Agency.lk is intended for people aged 18 or older. We do not knowingly create accounts for children. Contact us if you believe a child has provided personal information.

We may update this policy as the service or applicable requirements change. We will publish the revised policy here and update the date above. Questions and privacy requests can be sent to privacy@agency.lk.