Data Protection & Privacy

Privacy Policy

Your privacy matters to us. This policy explains how O.G. Agency collects, uses, stores, and protects your personal data when you use our recruitment services or visit our website.

Jump to Section

Contents

DOCUMENT REF: OGA-PP-2026-V1LAST UPDATED: JUNE 27, 2026

Our Commitment to Privacy

O.G. Agency is committed to protecting your personal information. This policy explains what data we collect, why we collect it, and how we handle it. We comply with the Sri Lankan Data Protection Act and international standards (GDPR, CCPA) where applicable.

1. Introduction

This Privacy Policy describes how O.G. Agency ("we", "us", or "our") collects, uses, stores, and shares personal information when you use our website, mobile application, recruitment portal, or interact with our services (collectively, the "Platform").

By using our Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

2. Information We Collect

We collect various types of information to provide and improve our services:

  • Personal Identification Data: Full name, date of birth, passport details, national ID, contact information (email, phone, address).
  • Professional & Employment Data: Resume/CV, work history, educational qualifications, skills, certifications, references, and job preferences.
  • Visa & Immigration Data: Passport scans, previous visa records, medical history (where required for visa applications), and travel documents.
  • Usage Data: How you interact with our Platform (pages visited, time spent, clicks, IP address, browser type, device information).
  • Cookies & Tracking: We use cookies and similar technologies to enhance user experience and analyze traffic (see Section 7).

We collect data directly from you when you register, upload documents, submit inquiries, or interact with our forms. We may also receive data from third-party verification services (e.g., background check providers) with your consent.

3. How We Use Your Data

Your information is used for the following purposes:

  • To match candidates with suitable job opportunities and employer requirements.
  • To process visa applications, work permits, and other immigration formalities.
  • To verify credentials, qualifications, and references through third-party background check services.
  • To communicate with you about your account, applications, and relevant job alerts.
  • To improve our Platform, analyze usage patterns, and personalize your experience.
  • To comply with legal obligations and regulatory requirements (SLBFE, immigration authorities, etc.).

We will never use your data for purposes incompatible with this policy without obtaining your explicit consent.

4. Data Sharing & Disclosure

We may share your data with the following categories of recipients, strictly for the purposes described above:

  • Employer Partners: When you apply for a job, we share your CV and relevant information with the hiring company.
  • Service Providers: Third-party vendors who help us operate (e.g., hosting, analytics, background verification, translation, and legal services).
  • Government & Regulatory Bodies: Sri Lanka Bureau of Foreign Employment (SLBFE), embassies, immigration departments, and other authorities as required by law.
  • Professional Advisors: Lawyers, auditors, and consultants who assist us in compliance and business operations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We require all third parties to respect your data and comply with applicable privacy laws.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

  • Data is encrypted in transit (SSL/TLS) and at rest.
  • Access to personal data is restricted to authorized personnel on a need-to-know basis.
  • We conduct regular security assessments and vulnerability scans.
  • All third-party processors are contractually bound to maintain similar security standards.

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we continuously update our practices to mitigate risks.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your data, subject to legal retention obligations.
  • Restriction: Request that we limit processing of your data.
  • Object: Object to certain processing (e.g., direct marketing).
  • Portability: Request transfer of your data to another service provider.

To exercise any of these rights, contact us at privacy@ogagency.com. We will respond within 30 days.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and improve our services. Cookies are small text files stored on your device.

  • Essential Cookies: Necessary for site functionality (e.g., login sessions).
  • Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics).
  • Preference Cookies: Remember your settings and preferences.

You can manage cookie preferences in your browser settings. However, disabling certain cookies may affect site functionality. We do not use cookies for targeted advertising.

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

  • Candidate profiles: Retained for up to 5 years after last activity, unless you request deletion.
  • Visa and immigration documents: Retained for up to 10 years to comply with regulatory requirements.
  • Usage data and analytics: Retained for up to 2 years.

When data is no longer needed, we securely delete or anonymize it.

9. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us, and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated "Last Updated" date. You are advised to review this policy periodically.

Your continued use of the Platform after any changes constitutes acceptance of the new policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

O.G. Agency Privacy Team
Postal AddressO.G. Agency, No. 586/3, Walgama, Nagahawatta Malwana, Western Province, Sri Lanka.