This website uses cookies for the purpose of enhancing your user experience. You can find more information on the types of cookies we collect, what we use these for, and how to manage your cookie settings in our privacy statement.

Find out more
I agree to cookies from this site

Privacy Statement

When you visit the AIA Healthiest Schools website or participate in a campaign, promotion or contest on this website, your personal data is collected by [AIA Company Limited (Company Registration No. [2047]) of [AIA Building, 1 Stubbs Road, Hong Kong], and [AIA Insurance Lanka Ltd] (Company Registration No. [PQ 18 PB ]) of [No.92, Srimath Anagarika Dharmapala Mawatha, Colombo 07]] (collectively “AIA”, “we”, “us” or “our”), acting as joint data controllers.

AIA recognises its responsibilities in relation to the processing of personal data. The provision of your personal data is voluntary and is not a statutory or contractual requirement. You may choose not to provide us with the requested data, however this may inhibit our ability to provide you with information and services or to respond to your enquiries and you will not be able to create a user account for the website or participate in any promotions, campaigns or contests if you do not wish to share your personal data with us. We may change our Privacy Statement and/or the Privacy Policy from time to time by publishing changes to it on the relevant website. We encourage you to check our websites periodically to ensure that you are aware of our current Privacy Statement and Privacy Policy.

How do we collect personal information?

AIA collects your personal data when you register for a user account on this website, when you contact us via this website, when you submit an entry for any promotion, campaign or contest operated via this website, and indirectly when you visit this website, such as cookies and other information to remember you and your preferences, and tailor the website for your needs. [Please refer to our cookie policy on the types of cookies we collect, what we use these for, and how we manage your cookie settings.]

Your personal information may be submitted to us by a third party on your behalf, such as your employer or the company or school which you are under a service contract, and in some cases, we may also obtain personal information about you including your name, school address, telephone number and email address from third party suppliers where applicable and/or from publicly available sources. We may also process your personal data where you are a parent or a legal guardian of a child that attends a school in order to obtain your consent to process such child’s personal data.

What personal information do we collect?

The personal data we collect includes the following:

  • identity information – name, work contact details (including email address, postal address and telephone number(s)) and details of your employer and role; and
  • technical information – such as IP address, browser type and version, time zone settings, browser plugin types, operating systems and platform, device information (including where mobile device the IMEI number, wireless networks and general network information).

Why do we collect, use, disclose and store your personal information?

Personal data is collected and used for the following purposes:

  • to provide you with access to the content on the website;
  • to process and administer your user account and your participation in AIA Healthiest Schools programme;
  • new (or enhance existing) products, information and services, including enhancements to the AIA Healthiest Schools programme;
  • to communicate with you, including, where you have consented to receive marketing communications from us, for direct marketing purposes;
  • for data analytics, data matching, internal business and administrative purposes, provided that we will only use anonymised and aggregated data for this purpose;
  • to assess your entry for any promotions you may participate in via the website, and contact you regarding the outcome of such promotions;
  • to monitor your use of the website and conduct analysis in order to operate, evaluate and improve the website and our services, understand your preferences and troubleshoot any problems;
  • to assist in law enforcement purposes or as otherwise required by law; and
  • other purposes directly relating to any of the above.

We will process your personal data based on the following lawful bases as appropriate for the purposes set out above:

  • our legitimate interests or that of our group entities in managing this website, the AIA Healthiest Schools programme and ancillary matters thereto, where such interests do not override your interests; 
  • your consent, where necessary, such as when you sign up for a promotion or competition carried out by us, when we process personal data relating to children or send you marketing messages using your data; or 
  • our legal obligations, where such obligations arise from applicable Sri Lankan law. 

In the event we process personal data of children, such processing would amount to processing of special categories of personal data and we shall not process such information without the consent of a parent or a legal guardian of such child.

We may disclose your personal information to third parties in connection with the purposes above. In particular, your personal data may be shared with:

  • third party service providers who assist us with the operation of any aspect of this Platform and/or any promotion, including hosting service providers; and

  • any member company of AIA Group Limited.

Your personal information may be provided to any of the above parties and transferred to, stored, and processed in other jurisdictions outside of Sri Lanka, in jurisdictions where any AIA Group entity is located, or jurisdictions where a third-party contractor is located or from which a third-party contractor provides us services, including countries such as Hong Kong and the United Kingdom. When we process your personal data outside Sri Lanka we will only do so in a country prescribed by the Minister in charge of the subject of data protection in Sri Lanka, pursuant to an adequacy decision, or if it is in a country not so prescribed, only when we are satisfied that:

  • regardless of transfer of your personal data to such country, we are able to comply with our mandatory obligations under the data protections laws of Sri Lanka; and 
  • we only do so after executing an appropriate instrument as may be prescribed by the Data Protection Authority of Sri Lanka, with the recipient of data in such country, 

or otherwise only to the extent permitted by the Personal Data Protection Act No. 9 of 2022 (as may be amended) of Sri Lanka.

We will retain your personal data for the purposes described in this Statement for a period of 3 years. Your personal data will be deleted upon the expiry of the retention period or upon its purpose being fulfilled, unless there is a legal obligation or necessity to retain such data.

You have the following rights in relation to your personal data we process in accordance with this Statement:

  • Right to access: You have, at any time, the right to request access to the personal data we process about you. 
  • Right to withdraw consent: You have a right to withdraw your consent to us processing your personal data, where we have obtained your consent to such processing. Your withdrawal of consent would not affect any processing we carried out prior to such withdrawal. 
  • Right to object to the further processing: You have a right to object to us further processing your personal data, to the extent that we are relying on our legitimate interests (or those of a third party) to process your personal information further, which is incompatible with the original purpose. 
  • Right to rectification: You have the right to request us to rectify any errors in your personal data, including inaccurate or incomplete personal data, provided however, if you have directly provided us your personal data by registering for and activating your account on our website, you may log on to the same and update and/or rectify your data. 
  • Right to erasure: Under certain circumstances, you have the right to request that we delete your personal data. Please note that this right only applies under certain circumstances and is not absolute. 
  • Right to request a review of automated processing: You have the right to request a review of a decision made using solely automated processing where such decision has created or is likely to create an irreversible and continuous impact on your rights and freedoms under Sri Lanka law. 

If you wish to exercise your aforesaid rights, you may do so by sending us a written request using the contact details set out below. 

In the event you make such request, we will respond to you within twenty one (21) working days and inform you whether your request has been granted or refused (along with reasons therefor). We may refuse your request based on certain grounds to the extent permitted by applicable Sri Lanka law.  

If you are not satisfied with how we process your personal data, you may lodge a complaint to the Data Protection Authority of Sri Lanka.

You may contact us in relation to any of the matters described within this Privacy Statement as follows:  

The Data Protection Officer 

AIA Insurance Lanka Limited

No. 92, Dharmapala Mawatha, Colombo 07, Sri Lanka

Tel: 0112310122

Email: [[email protected]] (please include "AIA Healthiest Schools" in the subject line of your email)