Iconic Developments (Pvt) Ltd | iconic.lk

At Iconic Developments (Pvt) Ltd (“Iconic”, “we”, “us”, “our”), a subsidiary of The Acres Group, we are committed to safeguarding the privacy of prospective buyers, homeowners, residents, business partners and visitors to iconic.lk, our sales offices, events and other communication channels, including phone, email, WhatsApp and social media (collectively, “Services”). This Privacy Policy explains how we collect, use, disclose and protect your personal data.

1. Information We Collect

We collect personal data only when you voluntarily provide it, for example when you submit an enquiry or home-tour request, call or message us, visit our sales gallery, attend an event or proceed with a booking or purchase. This may include your name, email address, phone and WhatsApp number, postal address, preferred apartment configuration, budget range, how you heard about us and, where you proceed to purchase, identity documents, payment and home-loan details and other information needed to complete the transaction.

We also collect limited technical information automatically when you browse our website, as described under Cookies and Log Files below.

2. How We Use Your Information

We use your information only for the purpose stated at the time of collection, including to:

  • Respond to enquiries and arrange site visits and home tours
  • Share project details, pricing, offers and updates by phone, email, SMS or WhatsApp, where you have agreed to receive them
  • Process bookings, sale agreements, payments and handovers
  • Coordinate home-loan applications with our partner banks, at your request
  • Provide after-sales and resident services
  • Improve our website, marketing and Services

3. Sharing and Disclosure

Your information is kept confidential. We do not sell or rent it. We may share it only with:

  • Entities within The Acres Group, where needed to deliver the Service you requested
  • Partner banks and financial institutions, when you ask us to help with home-loan financing
  • Legal advisers, channel partners and service providers (such as hosting, CRM, form-processing, email and messaging providers) who process data on our behalf under confidentiality obligations
  • Government authorities, courts or regulators, where required by law

Some service providers, including cloud-hosted tools used to store form submissions, may process data outside Sri Lanka. Where this happens, we take reasonable steps to ensure your data remains protected.

4. Consent

By submitting your information, you consent to its use as described in this policy. You may withdraw your consent, or opt out of marketing messages, at any time by contacting us. This will not affect processing already carried out or processing we must do to fulfil a contract with you.

5. Your Rights

Under Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, you have the right to:

  • Access: request confirmation of, and a copy of, the personal data we hold about you
  • Rectification: request that inaccurate or incomplete data be corrected or completed
  • Erasure: request deletion of your data, subject to legal or contractual obligations
  • Withdraw consent: stop us from processing your data going forward
  • Complaint: raise a concern with us, and thereafter with the Data Protection Authority of Sri Lanka

To exercise these rights, please contact us using the details below.

6. Cookies and Analytics

Our website uses cookies and similar technologies, including tools such as Google Analytics, Google Tag Manager and Meta (Facebook) advertising tools, to understand how visitors use the site and to measure and improve our advertising. A cookie is a small text file stored by your browser that helps the site remember your preferences. You can set your browser to refuse cookies or alert you when they are sent; some parts of the site may then not work as intended.

7. Log Files

Like most websites, we collect log information such as IP address, browser type, internet service provider, referring/exit pages, device type, date/time stamp and number of clicks. We use this to analyse trends, administer the site and improve our Services. This information is not used to identify individual users.

8. Data Retention

We keep personal data only for as long as needed to fulfil the purpose for which it was collected, including any period required for property, tax and legal records. After that, it is deleted or anonymised.

9. Security

We use appropriate technical and organisational measures, including SSL encryption on our website, to protect your information against unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Links to Other Sites

Our Services may link to websites we do not operate, including those of partner banks, consultants and social media platforms. We are not responsible for their privacy practices and encourage you to read their privacy policies. This policy applies only to information collected through our Services.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with a new effective date. We encourage you to review it periodically. Continued use of our Services after changes are posted means you accept the revised policy.

12. Contact Us

For questions, requests or complaints about this Privacy Policy, please contact: