Privacy
Privacy Policy
How M. M. Management Services (Private) Limited approaches personal data across its website, professional services and digital workspaces.Effective 28 September 2026
This is a general privacy notice. Engagement-specific requirements, applicable law and any more specific notice may also apply.
1. Scope
This Policy explains how M M may collect, use, disclose, store and otherwise process personal data when you visit our website, communicate with us, request or receive services, or use an M M digital workspace.
2. Information we may process
Depending on the relationship and service, information may include identification and contact details; company, director, officer, shareholder, employee, representative or beneficial-owner information; tax, accounting, payroll and statutory information; documents and correspondence; billing and transaction records; service requests and approvals; account information; and reasonable technical, security and usage records.
3. Sources
We may obtain information from you or an organisation you represent, through our website or platform, during professional engagements and communications, from sources you ask or authorise us to use, from relevant service providers, and from public or official sources where lawful and relevant.
4. Purposes
Information may be processed to respond to enquiries; establish and administer client relationships; provide company secretarial, taxation and supporting corporate services; maintain professional records; coordinate documents, requests, approvals, billing and communications; meet applicable legal, regulatory, professional, accounting and security requirements; protect our systems; manage our business; and improve our services. The applicable basis may differ according to the activity and circumstances.
5. Sharing
Where reasonably necessary and permitted, information may be shared with authorised M M personnel, professional advisers, relevant operational service providers, competent authorities, or parties involved in a service at the client's instruction or with appropriate authority. Access and disclosure should be limited to what is reasonably necessary for the relevant purpose.
6. Service providers and cross-border processing
Technology or professional service providers may use systems outside Sri Lanka. Where cross-border processing occurs, M M will seek to handle it in accordance with applicable requirements and appropriate safeguards. Third-party services operate under their own terms and privacy practices.
7. Security
M M seeks to maintain reasonable and appropriate administrative, technical and organisational safeguards having regard to the information and relevant risks. No internet transmission, electronic storage system or security measure can be guaranteed to be completely secure.
8. Retention
Personal data is retained for no longer than reasonably necessary for relevant purposes, subject to applicable legal, regulatory, professional, accounting, dispute-management, security and legitimate record-keeping requirements. Different records may therefore have different retention periods.
9. Individual requests
Subject to applicable law and lawful limitations or verification requirements, individuals may request action concerning their personal data where recognised by applicable data-protection law. We may require sufficient information to verify identity, authority and the information concerned.
10. Cookies and technical information
Our digital services may use essential technical storage and, where implemented, cookies or similar technologies for security, session management, preferences, performance or service improvement. Where additional consent or choice is required, relevant controls should be provided.
11. Updates
We may update this Policy to reflect changes in services, systems, practices or applicable requirements. The current published version will state its effective date.
12. Contact
Privacy enquiries may be sent to support@mmmservices.online or addressed to M. M. Management Services (Private) Limited, PV - 8852, No. 6-M/1A, Provisix City, International Buddhist Centre Road, Colombo 06, Sri Lanka.
13. Applicable framework
This Policy is intended to operate consistently with applicable Sri Lankan law. Nothing here is intended to exclude or restrict a right or obligation that cannot lawfully be excluded or restricted.