Privacy Policy

1. Who we are

Synergy Pharmaceuticals Corporation Pvt. Ltd. (“Synergy Pharma”, “we”, “us”) is the data controller responsible for personal data collected through this Careers Portal. Our registered address is Astoria Colombo, Level 14, Commercial Tower III, 422 R. A. De Mel Mawatha, Colombo 3, Sri Lanka.

For privacy-related queries, contact us at: info@synergypharma.lk

2. What data we collect

When you submit a job application or join our talent pool, we collect:

• Full name, email address, and phone number
• CV / résumé (uploaded as a PDF file)
• Cover letter (optional)
• Area of professional interest (talent pool only)
• Date and time of submission

We do not collect sensitive personal data such as national identity numbers, health information, or financial details at the application stage.

3. Legal basis for processing

We process your personal data on the basis of your explicit consent (GDPR Article 6(1)(a); Sri Lanka Personal Data Protection Act 2022, Section 7). You provide this consent by ticking the consent checkbox before submitting your application.

You may withdraw your consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. How we use your data

Your data is used exclusively for recruitment purposes:

• Evaluating your suitability for open or future roles
• Communicating with you about your application
• Maintaining records of our hiring process

We will not use your data for marketing, sell it to third parties, or share it with external recruiters without your explicit permission.

5. Who has access to your data

Access to application data is restricted to authorised HR personnel within Synergy Pharma. Our Careers Portal is hosted on secure infrastructure. Your application details are held in Google Sheets and your uploaded CV in Google Drive, within Synergy Pharma's own Google Workspace account, and are accessible only to authorised recruitment staff. Google acts as a data processor on our behalf and does not use your data for its own purposes. No third-party analytics or advertising services receive your personal information.

6. Data retention

We retain your personal data for a maximum of 12 months from the date of submission, or until a final hiring decision has been made for the role you applied for — whichever comes first. After this period, your data and uploaded CV will be permanently deleted from our systems.

Talent pool submissions are retained for up to 12 months and reviewed periodically for relevant openings.

7. Your rights

Under the GDPR and Sri Lanka's Personal Data Protection Act 2022, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data (“right to be forgotten”)
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing in certain circumstances
• Restriction — request that we limit how we use your data
• Withdraw consent — at any time, without affecting prior lawful processing

To exercise any of these rights, email us at info@synergypharma.lk with your full name and email address used during registration. We will respond within 30 days.

8. Data security

Uploaded CV files are stored in a private Google Drive folder inside our Google Workspace account. The folder is not shared publicly and is not accessible to the public internet, and we never publish a link to your file. Access is restricted through authenticated API routes. We apply industry-standard security controls including HTTPS encryption, HTTP-only session cookies, and access logging.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the effective date above. Continued use of the portal after changes constitutes acceptance of the updated policy.

10. Contact

For all privacy-related questions, requests, or complaints, contact our HR team at info@synergypharma.lk .