Privacy Policy

Effective Date: 01/08/2026

Last Updated: 24/08/2026

Introduction

Welcome to the official website of Sri Lanka AI Week 2026 – AI Amplified, accessible through www.aiexpo.lk (“Website”).

Sri Lanka AI Week 2026 (“AI Week”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information you provide to us or that we collect when you use our Website, register for our events, participate in our programmes, communicate with us, or otherwise interact with us.

This Privacy Policy explains how we collect, use, disclose, retain and protect your personal data and the rights available to you under applicable Sri Lankan data protection laws, including the Personal Data Protection Act, No. 9 of 2022, as amended from time to time.

By using this Website or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.

Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Information You Provide Directly

• Full name
• Email address
• Telephone/mobile number
• Organisation/company name
• Job title or designation
• Country and city
• Areas of professional interest
• Registration details
• Event attendance preferences
• Information submitted through contact, registration, speaker, exhibitor, sponsor or partnership forms
• Information provided when making enquiries or requesting information
• Information provided when applying to participate as a speaker, exhibitor, sponsor, partner or delegate

Event-Related Information

When you register for or attend Sri Lanka AI Week events, we may collect information necessary to administer your participation, including registration status, session preferences, access credentials and attendance information.

Technical Information

When you visit our Website, certain information may be collected automatically, including:

• IP address
• Browser type and version
• Device type
• Operating system
• Date and time of access
• Pages visited
• Referring website
• General Website usage information
• Cookies and similar technologies

We use this information primarily to operate, secure, maintain and improve the Website and to understand how visitors use our digital platforms.

How We Collect Personal Data

We may collect personal data through:

• Registration forms on the Website
• Contact and enquiry forms
• Event registration platforms
• Exhibitor, sponsor and partnership forms
• Speaker and participant applications
• Emails and other communications
• Social media or digital platforms
• Cookies and analytics technologies
• Information provided by authorised event partners or service providers
• Information collected when you attend our events

Where personal data is provided to us by another organisation or event partner, that organisation should have an appropriate legal basis to share the information with us.

How We Use Your Personal Data

We may process your personal data for purposes including:

Event Management

• Processing event registrations
• Confirming attendance
• Managing access to events and sessions
• Communicating event information
• Coordinating speakers, exhibitors, sponsors and partners
• Managing event logistics
• Providing certificates or other participation-related information

Communication

• Responding to enquiries
• Sending registration confirmations
• Providing important event announcements
• Communicating programme updates, changes or cancellations
• Providing information requested by you

Marketing and Promotion

Where permitted by applicable law, we may use your contact information to send information about Sri Lanka AI Week, future events, programmes, initiatives and related opportunities.

Where consent is required, we will obtain your consent before sending marketing communications.

You may opt out of marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.

Website and Service Improvement

We may analyse Website usage and engagement to:

• Improve Website functionality
• Understand visitor interests
• Improve the user experience
• Measure campaign and event performance
• Maintain the security and reliability of our digital platforms

Legal and Security Purposes

We may process personal data where necessary to:

• Comply with applicable laws and regulations
• Respond to lawful requests from competent authorities
• Prevent fraud, misuse or security incidents
• Protect the rights, property and safety of our organisation, participants and others
• Establish, exercise or defend legal claims.

Legal Basis for Processing

We will process personal data in accordance with applicable data protection laws.

Depending on the circumstances, processing may be based on:

• Your consent;
• The performance of a contract or arrangements with you;
• Compliance with a legal or regulatory obligation;
• Our legitimate and lawful purposes, where applicable; or
• Another lawful basis permitted under applicable law.

Where we rely on consent, you may withdraw your consent, subject to applicable legal or contractual limitations.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

Cookies and Similar Technologies

The Website may use cookies and similar technologies to provide, secure and improve the Website.

Cookies may be used for purposes such as:

• Essential Website functionality
• Remembering preferences
• Website analytics
• Understanding Website traffic and usage
• Measuring the effectiveness of digital campaigns
• Improving Website performance

Where required, we will request your consent before placing non-essential cookies on your device.

You may also manage cookies through your browser settings. Disabling certain cookies may affect some Website functionality.

Where third-party analytics, advertising or social media technologies are used, those third parties may process information in accordance with their own privacy policies.

Third-Party Services

We may use trusted third-party service providers to support the operation and delivery of Sri Lanka AI Week, including providers of:

• Website hosting
• Event registration
• Email communications
• Analytics
• Digital advertising
• Cloud services
• Payment services, where applicable
• Event management services
• IT and cybersecurity services

Such service providers may process personal data on our behalf where necessary to provide their services.

We will take reasonable steps to ensure that appropriate contractual, technical and organisational safeguards are applied to personal data processed by service providers.

Sharing of Personal Data

We do not sell your personal data.

We may disclose personal data where necessary to:

• Event organisers and authorised personnel
• Approved event partners
• Speakers, exhibitors and sponsors where appropriate and permitted
• Service providers supporting the event or Website
• Professional advisers
• Government authorities or regulatory bodies where legally required
• Other parties where disclosure is authorised or permitted by applicable law

We will seek to limit disclosure to information reasonably necessary for the relevant purpose.

International Data Transfers

Some of our technology, cloud, analytics, communication or event service providers may process personal data outside Sri Lanka.

Where personal data is transferred or processed across borders, we will take appropriate steps to ensure that such processing is carried out in accordance with applicable data protection laws and appropriate safeguards.

Photography, Video and Event Recording

Sri Lanka AI Week may include photography, videography, livestreaming and other forms of event recording.

By attending an event organised as part of Sri Lanka AI Week, you acknowledge that you may appear in photographs, videos or other recordings made during the event.

Such recordings may be used for purposes including:

• Event documentation
• News and media coverage
• Website content
• Social media
• Promotional and marketing communications
• Future event promotion
• Publicity and reporting relating to Sri Lanka AI Week

Where appropriate, specific notices or consent mechanisms may be provided for particular recordings or activities.

If you have concerns about your inclusion in particular promotional material, please contact us using the details provided in this Privacy Policy.

Data Retention

We will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:

• Event administration
• Communication and relationship management
• Legal and regulatory obligations
• Record keeping
• Resolving disputes
• Security and fraud prevention
• Legitimate business and event-related purposes

When personal data is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it in accordance with applicable requirements.

Data Security

We take reasonable technical and organisational measures to protect personal data against:

• Unauthorised access
• Unauthorised disclosure
• Loss
• Misuse
• Alteration
• Destruction

However, no method of transmission or storage over the Internet can be guaranteed to be completely secure.

Accordingly, while we take appropriate measures to protect your information, we cannot guarantee absolute security.

Your Rights

Subject to applicable law and any relevant limitations, you may have rights in relation to your personal data, including rights to:

• Request information regarding the processing of your personal data;
• Request access to personal data held about you;
• Request correction or updating of inaccurate or incomplete personal data;
• Request deletion or erasure where applicable;
• Withdraw consent where processing is based on consent;
• Object to certain processing;
• Request restriction of processing in circumstances permitted by law; and
• Exercise other rights available under applicable data protection legislation.

Requests relating to your personal data should be submitted to:

Email: info@aiexpo.lk

We may need to verify your identity before responding to a request.

We will respond to requests within the timeframe required by applicable law.

Children and Minors

The Website and Sri Lanka AI Week are not intended to knowingly collect personal data from children except where participation is specifically organised or permitted as part of an event or programme.

Where applicable, appropriate consent or authorisation will be obtained from a parent, guardian or other authorised person in accordance with applicable law.

If you believe that a child has provided personal data to us without appropriate authorisation, please contact us.

Links to Third-Party Websites

The Website may contain links to third-party websites, platforms or services.

These third-party websites operate independently from us and may have their own privacy policies and terms of use.

We are not responsible for the privacy practices, content or security of third-party websites.

We encourage you to review the privacy policies of third-party websites before providing them with personal data.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Applicable laws and regulations;
• Our event activities;
• Website functionality;
• Technology and service providers; or
• Our data processing practices.

Any updated version will be published on this Website with the revised “Last Updated” date.

We encourage you to review this Privacy Policy periodically.

Governing Law

This Privacy Policy shall be interpreted and applied in accordance with the applicable laws of the Democratic Socialist Republic of Sri Lanka.

Last Updated: 24/08/2026