Privacy Policy

EASTERN MEDICAL CORPORATION (PVT) LTD is responsible for the personal information collected directly through this website.

For questions about your personal information, email info@emcgroups.com.

The information collected depends on how you contact EMC. Contact enquiries may include your name, email address, telephone number, organisation name, subject, and enquiry message.

Product quotation requests may include your name, email address, telephone number, organisation name, product category, product or equipment requirement, quantity, preferred brand or specification, general delivery requirement, and additional notes. A quotation request through the website does not itself create an order or contract.

Service requests may include your name, email address, telephone number, organisation name, service location where provided, request type, equipment name, equipment brand, model, serial number, general issue description, and other information voluntarily provided.

Career enquiries may include your name, email address, telephone number, area of interest, enquiry message, and an attached CV or resume. You can attach a PDF CV or resume up to the 5 MB limit shown on the form.

Before delivery to EMC, the complete original PDF and a security-reconstructed copy are each sent to Cloudmersive for malware scanning. PDF resumes can contain personal information. If either scan cannot confirm that the file is clean, the career enquiry is not delivered through the website.

After successful validation and scanning, only the security-reconstructed PDF is sent by email to EMC for recruitment review; it is not published on the website. It may be retained by our email provider and in our recruitment correspondence according to the retention approach described in this policy and applicable requirements.

EMC HMS consultation enquiries may include contact name, email address, telephone number, organisation or hospital name, general information about branches, general department information, expected user groups, infrastructure overview, operational requirements, and enquiry message.

If a website enquiry later proceeds into a quotation, order, delivery, service agreement, invoice, warranty matter, installation, maintenance arrangement, or other business transaction outside the website, EMC may collect and maintain related business records.

Those records may include organisation details, contact-person details, quotation records, product requirements, purchase-order details, billing details, delivery address, delivery-contact details, invoice records, payment confirmation, warranty information, installation records, service and maintenance records, and communications relating to the transaction.

The public website does not collect payment-card details, operate an ecommerce checkout, process online orders, use online card payment gateways, or store payment-card information.

Some technical information may be recorded automatically by the website, hosting provider, or security services to operate, secure, troubleshoot, and maintain the website.

This may include your IP address, browser, device and operating system, pages requested, visit time, referring page, and records of website errors, security checks, and form verification. The information collected depends on the hosting and security services in use.

The current public website does not use website analytics cookies, advertising trackers, marketing pixels, live chat, session recording, newsletter subscription forms, visitor or customer accounts, patient accounts, or public authentication-session cookies.

EMC uses Cloudflare Turnstile to protect public forms against automated abuse and spam. Cloudflare Turnstile evaluates technical and browser-related signals to distinguish legitimate visitors from automated traffic and protect website forms.

Turnstile may process your IP address, browser and connection details, information identifying this website, and security-check results to help distinguish visitors from automated traffic.

EMC uses Turnstile for website security and spam prevention, not for advertising or marketing profiling.

EMC uses Cloudmersive as an external malware-scanning service for PDF CVs and resumes submitted through the Careers form. The complete original PDF and a security-reconstructed copy are transferred separately to Cloudmersive for scanning before the reconstructed copy is delivered to EMC by email.

The PDFs may contain the applicant information included in the CV or resume. The website rejects the submission if malware is reported or if scanning is unavailable or cannot confirm a clean result.

For questions about how resume malware scanning affects your personal information, contact EMC using the details in this policy.

EMC uses Resend as an email-delivery service provider to transmit website enquiries to authorised EMC recipients.

Information processed for email delivery may include sender or contact name, email address, telephone number where provided, organisation, form subject, form message, quotation details, service-request details, career-enquiry details and an attached PDF CV or resume, EMC HMS enquiry details, email recipient information, message-delivery information, and technical delivery records.

Resend and its authorised service providers may process information outside Sri Lanka, including in the United States, subject to the provider's terms and applicable safeguards.

The website may use necessary browser storage to support security features.

Cloudflare Turnstile or hosting and security services may use necessary cookies, storage, or browser signals to support security and website operation.

The Contact Us page includes an embedded Google Map to show the EMC location. Google may process technical information when the map loads or when visitors open Google Maps.

The Videos page includes two YouTube players in privacy-enhanced mode using youtube-nocookie.com. Google or YouTube may process technical information when an embedded player loads or when a visitor interacts with it. Privacy-enhanced mode does not mean that no information is processed.

EMC does not currently use advertising cookies, marketing-tracking cookies, or website analytics cookies on the public website. The Cookie Policy should be read together with this Privacy Policy.

EMC may use personal information to respond to enquiries, prepare and follow up quotations, review product requirements, handle service and maintenance requests, respond to career enquiries, review EMC HMS consultation requests, communicate about requested products or services, and arrange delivery, installation, maintenance, or support.

EMC may also use information to manage customer and supplier relationships, maintain transaction, accounting, warranty, and service records, protect website forms from spam, bots, misuse, and security threats, troubleshoot and maintain the website, comply with legal, regulatory, accounting, audit, and contractual requirements, establish, exercise, or defend legal claims, and improve EMC services based on genuine operational feedback.

EMC does not use website information for behavioural advertising, sale of visitor profiles, automatic newsletter subscription, unrelated marketing, automated medical decisions, AI diagnosis, or patient profiling.

EMC may process information where necessary to respond to a request made by you, prepare a quotation or take steps requested before a transaction, provide or manage an agreed product or service, comply with legal or regulatory obligations, protect the website and prevent misuse, and maintain legitimate business and administrative records where permitted by law.

Where processing depends on consent, you may withdraw that consent, subject to applicable law. Withdrawal does not affect processing that occurred lawfully before withdrawal.

EMC intends to process personal data in accordance with applicable Sri Lankan law, including applicable requirements of the Personal Data Protection Act. This Privacy Policy does not constitute legal advice or a certification of compliance.

EMC may share information only where reasonably necessary with authorised EMC employees and representatives, Cloudmersive for malware scanning of submitted PDF CVs and resumes, Resend for email delivery, Cloudflare for Turnstile security verification, website-hosting and infrastructure providers, IT maintenance and security providers, suppliers or manufacturers where necessary to assess a product request, delivery and logistics providers where a transaction proceeds, installation, maintenance, or technical-service partners where required, professional advisers, and authorities where required by law.

Information may also be shared with a successor organisation in a lawful merger, restructuring, acquisition, or transfer of relevant business assets, subject to applicable safeguards.

EMC does not sell personal information. Only information reasonably necessary for the relevant purpose is shared, and not every listed provider receives every visitor's information.

Some service providers used by EMC may process or store information outside Sri Lanka.

Resend's international processing may include processing in the United States. Cloudflare and other hosting, infrastructure, or security providers may also process technical and security information in locations required for their services.

EMC will seek to use providers and arrangements that provide appropriate protections as required by applicable law. Your information may be processed outside Sri Lanka.

The public EMC website is not designed to collect patient or highly sensitive information. Please provide only the minimum information necessary for EMC to understand and respond to your request.

Do not submit patient names, patient identification numbers, medical records, diagnosis information, laboratory results, prescriptions, clinical images, biometric data, financial account passwords, system passwords, access credentials, private encryption or licence keys, confidential hospital databases, or full payment-card information through public website forms.

If sensitive information is submitted unintentionally, EMC may restrict, delete, or otherwise handle it as appropriate, subject to legal and operational requirements.

The EMC website is intended for healthcare organisations, professionals, suppliers, job seekers, and other adult business users. It is not directed to children, and EMC does not knowingly request personal information from children through the public website.

EMC uses reasonable and appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss, or misuse.

These measures may include limiting access to authorised staff and service providers, checking submitted information, preventing spam and automated abuse, monitoring security where appropriate, confidentiality requirements, and regular maintenance and security reviews.

No method of internet transmission or electronic storage is completely secure, and EMC cannot guarantee absolute security.

EMC retains information only for as long as reasonably necessary for the relevant purpose. Different categories of information may have different retention periods.

Information may be retained to respond to and close an enquiry, prepare or follow up a quotation, manage a product, service, warranty, delivery, or installation, maintain accounting, tax, contractual, audit, and legal records, resolve complaints or disputes, protect against fraud, misuse, or security incidents, and meet applicable legal or regulatory requirements.

When information is no longer reasonably required, EMC will take appropriate steps to delete, anonymise, or securely restrict it, subject to applicable legal and operational requirements. Retention periods may differ by information category and applicable obligations.

Subject to applicable law and relevant exceptions, you may have the right to request access to personal information held about you, information about how your information is processed, correction or completion of inaccurate or incomplete information, withdrawal of consent where processing is based on consent, that EMC refrain from certain further processing where applicable, erasure of personal information where legally permitted, and review of a privacy concern or complaint.

A written request may be sent to info@emcgroups.com. EMC may need to verify the requester's identity before disclosing, correcting, or deleting information, but EMC will not request excessive identity documents by default.

Some requests may be limited by legal obligations, accounting requirements, contractual requirements, evidentiary requirements, ongoing disputes, security obligations, or the rights of other individuals. Individuals may contact the Data Protection Authority of Sri Lanka regarding applicable data-protection concerns.

Cloudflare Turnstile automatically evaluates technical signals to identify automated or abusive activity. This security check may determine whether a website form submission is accepted or rejected as potentially automated.

EMC does not use website information for automated medical diagnosis, treatment decisions, credit decisions, employment selection, or other decisions producing comparable legal or significant effects.

The website may contain links to third-party websites or resources and may embed third-party resources such as Google Maps for location display and YouTube privacy-enhanced players for videos. EMC is not responsible for the privacy practices of independent third-party websites, and a link or embed does not imply endorsement.

Visitors should review the third party's own privacy information before submitting information to that third party.

Submitting a website enquiry does not automatically subscribe you to marketing communications.

EMC will not use enquiry information for unrelated promotional email without an appropriate basis. Any future newsletter or marketing subscription must use a separate, clear process and allow visitors to unsubscribe from optional marketing.

EMC may update this Privacy Policy to reflect changes in the website, services, providers, operational practices, or applicable legal requirements.

The updated version will be published on this page with a revised Last updated date. EMC does not promise individual email notification for every policy change unless a separate notification process is adopted.

Privacy enquiries may be sent to EASTERN MEDICAL CORPORATION (PVT) LTD at info@emcgroups.com.

Please describe your privacy question or request without including unnecessary sensitive information.