No. 545/1, Sri Sangaraja Mawatha, Colombo 10

Last updated: 27 October 2026
MAS Associates respects your privacy. This policy explains what personal information we collect, why we collect it, how we protect it and the choices you have. It is written with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka in mind.
We process personal data where it is needed to perform a contract with you or take steps you ask for before one, where we have a legal obligation, where you have given consent, or where we have a legitimate interest in running and improving our firm that is not outweighed by your rights.
We do not sell your personal information. We share it only where needed with:
We use reasonable technical and organisational safeguards such as access controls, secure storage and confidentiality obligations on our staff. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we act promptly if we become aware of a problem.
We keep personal data only as long as needed for the purposes above, including meeting tax, company-law and professional record-keeping periods that apply to our work. After that we delete or anonymise it securely.
The website uses essential cookies so it works properly and may use analytics cookies to understand how visitors use it. You can control or delete cookies through your browser settings, although parts of the website may not work as intended without them.
Subject to the law, you may ask us to give you access to the personal data we hold about you, to correct it, to delete it, to restrict or object to certain uses, and to withdraw consent you have given. To make a request, contact us using the details below. We may need to confirm your identity first. You may also complain to the Data Protection Authority of Sri Lanka if you believe your data has been mishandled.
We only send marketing emails where you have asked for them or the law allows it. Every message includes a way to unsubscribe, or you can email us at any time.
Some of our service providers, such as email or cloud hosting, may store data outside Sri Lanka. Where this happens we take steps to make sure your data is still handled with appropriate protection.
Our website and services are not directed at children and we do not knowingly collect their personal data.
We may update this policy from time to time. The date at the top of this page shows when it was last changed (27 October 2026).
If you have any question about this document, please contact MAS Associates: