How the Association collects, uses, and protects your personal data, in line with the Personal Data Protection Act No. 9 of 2022.
Your data, your say.
Nothing is collected without a reason tied to your membership.
Every field on this page exists to answer one question honestly: what do we hold, why, and how do you get it corrected or removed. Write to the General Secretary any time and we'll act on it — not just file it.
Last updated: [DD Month 2026] · Applies to mbakelaniya.lk and the Member Portal.
Name, NIC/passport number, contact details, MBA batch year, employer, and photo when you apply for membership.
Event registration details, including dietary requirements where relevant.
Payment confirmation from PayHere — we do not store card numbers ourselves; PayHere is PCI DSS compliant.
Directory visibility preferences you set in the Member Portal.
To process membership applications, renewals, and event registrations.
To publish your directory profile at the visibility level you choose (name and batch are shown to the public; employer, location, and contact details are shown to logged-in members only, unless you opt out entirely).
To send Association communications — the monthly bulletin, event notices, and AGM/SGM notices. You can unsubscribe from the bulletin at any time; statutory notices cannot be opted out of while you remain a member.
Under the PDPA No. 9 of 2022, you may request a copy of the data we hold on you, ask us to correct it, or ask us to delete your directory profile while retaining the statutory minimum required for company and audit records.
Requests are handled by the General Secretary as the Association's data point of contact and acknowledged within 14 days.
The public website uses only essential cookies for the payment flow and, if you accept, an analytics cookie to understand which pages are useful. You'll see a consent banner on first visit; declining analytics does not affect site functionality.
Data protection queries: gs@mbakelaniya.lk — addressed to the General Secretary as Single Point of Contact (Art. 4.2(c)).
This is placeholder wireframe copy. The final policy should be reviewed by the Company Secretary before publishing, per the Development Brief’s content checklist (item C6).