Privacy Policy
Last updated: July 2026
This Privacy Policy sets out how Centura22 ("Centura22", "we", "us" or "our") collects, uses, discloses, stores and protects personal information. It applies to our website at www.centura22.com (the "Website"), to the Centura22 platform and its modules, and to all other dealings you have with us, including sales inquiries, demonstrations, support and marketing communications. We take our privacy obligations seriously. We are committed to preventing serious invasions of privacy and to protecting the personal information we hold. If you have any questions or concerns, please contact us using the details in section 14. We may update this Privacy Policy from time to time by publishing an updated version on the Website. We encourage you to review this page periodically. Where changes are material, we will take reasonable steps to notify you.
1. Who we are and the laws that apply
Centura22 operates internationally, with offices in the United States, Australia and Sri Lanka. Depending on where you are located, different privacy laws may apply to our handling of your personal information, including:
- The Privacy Act 1988 (Cth) and the Australian Privacy Principles (Australia);
- The California Consumer Privacy Act, as amended by the California Privacy Rights Act, and other applicable United States state privacy laws;
- The EU General Data Protection Regulation and the UK GDPR, where we offer goods or services to, or monitor the behavior of, individuals in those territories; and
- The Personal Data Protection Act No. 9 of 2022 (Sri Lanka).
Where a particular law gives you rights that are broader than those described in this Privacy Policy, those rights apply.
2. Personal information we collect
We collect only the personal information reasonably necessary for our business functions and activities. The information we collect may include:
Information you provide to us
- name and job title;
- business email address and telephone number;
- company name, industry and business address;
- country or region;
- the content of inquiries, messages, support requests and survey responses;
- information provided in connection with a job application, including your curriculum vitae; and
- any other information you choose to provide to us.
Information collected automatically
- IP address and approximate geographic location;
- device type, operating system and browser;
- pages viewed, time spent on pages, referring website and navigation paths; and
- standard web log information and analytics data collected through cookies and similar technologies.
Information from third parties
We may receive personal information from third parties, including business partners, event organisers, publicly available professional sources and our service providers, where it is lawful for them to disclose it to us. We do not seek to collect sensitive information as defined under applicable privacy law. If you provide sensitive information to us, you consent to us handling it in accordance with this Privacy Policy.
3. How we collect personal information
We may collect personal information when you:
- submit a contact, demonstration or consultation request through the Website;
- download a resource or subscribe to updates;
- communicate with us by email, telephone or messaging services;
- meet us at a trade show, conference or industry event;
- engage us to provide products or services;
- apply for employment with us; or
- browse or interact with the Website, our social media pages or our advertising.
4. Why we use personal information
We use personal information for the following purposes:
- to respond to your inquiries and provide the information, products or services you request;
- to arrange and conduct product demonstrations and consultations;
- to administer, maintain and improve our products, services and Website;
- to manage our relationship with you and provide customer support;
- to send you administrative messages, service notices, security alerts and updates;
- to send you marketing communications where permitted, and where you have not opted out;
- for record keeping, internal administration and business analysis;
- to assess an application for employment;
- to comply with our legal and regulatory obligations; and
- to establish, exercise or defend legal claims, resolve disputes and enforce our agreements.
Lawful bases (where GDPR or UK GDPR applies)
Where the GDPR or UK GDPR applies, we rely on the following lawful bases:
| Lawful basis | When we rely on it | Examples |
|---|---|---|
| Contract | Where processing is necessary to enter into or perform a contract with you | Providing services, managing an account, support |
| Legitimate interests | Where processing is necessary for our legitimate business interests and not overridden by your rights | Responding to inquiries, B2B marketing, improving the Website, security |
| Consent | Where you have given clear consent | Non-essential cookies, certain marketing communications |
| Legal obligation | Where processing is required by law | Tax, accounting and regulatory record keeping |
5. Cookies and analytics
We use cookies and similar technologies on the Website for functionality, performance, analytics and, where applicable, advertising purposes. We use Google Analytics and may use other analytics providers to help us understand how the Website is used. Information about how Google uses data from sites that use its services is available at policies.google.com/technologies/partner-sites.
You can control cookies through your browser settings and, where a consent banner is presented, through your consent preferences. Blocking or deleting cookies may affect your experience of the Website.
6. Who we disclose personal information to
We may disclose personal information to:
- our employees, contractors and consultants, where necessary for their role;
- service providers who support our business, including hosting, cloud infrastructure, customer relationship management, email delivery, analytics and IT support providers;
- professional advisers, including lawyers, accountants and auditors;
- business partners, where relevant to a product or service you have requested and where lawful to do so;
- a purchaser or prospective purchaser in connection with an actual or proposed sale, merger or restructure of our business; and government agencies, regulators and law enforcement, where required or authorized by law.
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are defined under California law.
7. International transfers
Because we operate in the United States, Australia and Sri Lanka, and because our service providers may be located in other countries, your personal information may be transferred to, stored in, or accessed from a country other than the one in which you are located.
Where we transfer personal information across borders, we take reasonable steps to ensure that the recipient handles it in a manner consistent with this Privacy Policy and applicable law. Where the GDPR or UK GDPR applies, transfers outside the EEA or the UK are made under an appropriate safeguard such as Standard Contractual Clauses, or another lawful transfer mechanism.
8. How long we keep personal information
We retain personal information only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, regulatory or reporting requirements, or to establish, exercise or defend legal claims.
When personal information is no longer required, we take reasonable steps to destroy it or de-identify it securely.
9. Security
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorized access, modification or disclosure. Our measures include access controls, authentication requirements, encryption in transit, network protections, and administrative and organizational controls. No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of your personal information. If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the relevant regulator as required by applicable law.
10. Your rights and choices
Subject to applicable law, you may have the following rights in relation to your personal information:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal information we hold about you |
| Correction | Ask us to correct information that is inaccurate, out of date or incomplete |
| Deletion | Ask us to delete personal information, where we are not required to retain it |
| Objection | Object to processing based on our legitimate interests, including direct marketing |
| Restriction | Ask us to restrict processing in certain circumstances |
| Portability | Receive certain information in a structured, commonly used, machine-readable format |
| Withdraw consent | Withdraw consent where processing is based on consent |
| Non-discrimination | Not be discriminated against for exercising your privacy rights |
To exercise any of these rights, please contact us using the details in section 14. We may need to verify your identity before acting on a request. We will respond within the time frame required by applicable law and, where we are unable to act on a request, we will explain why.
You may also authorise an agent to make a request on your behalf, where applicable law permits.
11. Marketing communications
Where permitted by law, we may send you marketing communications about our products, services and events. Every marketing email includes an unsubscribe link, and you may opt out at any time by using that link or by contacting us directly.
Opting out of marketing does not stop us sending you administrative or service-related messages that are necessary for our dealings with you.
12. Children
The Website and the Centura22 platform are intended for business users and are not directed to children. We do not knowingly collect personal information from children.
If you believe a child has provided personal information to us, please contact us and we will take reasonable steps to delete it.
13. Links to other websites
The Website may contain links to third-party websites, including those of our partners. Those links are provided for convenience only. We do not control and are not responsible for the privacy practices or content of linked websites, and we encourage you to review their privacy policies before providing personal information to them.
14. How to contact us and make a complaint
For any question about this Privacy Policy, to exercise your rights, or to make a privacy complaint, please contact us:
| Details | |
|---|---|
| Privacy contact | Legal Officer - Centura Corporation |
| [email protected] |
We will acknowledge your complaint promptly, investigate it, and respond within a reasonable timeframe.
If you are not satisfied with our response, you may complain to the relevant regulator or supervisory authority. The United States does not have a single national privacy regulator; enforcement is shared between federal and state authorities:
- United States (California) - California Privacy Protection Agency (cppa.ca.gov) or the California Attorney General (oag.ca.gov)
- United States (other states) - the Attorney General of your state
- United States (federal) - Federal Trade Commission (ftc.gov)
- Australia - Office of the Australian Information Commissioner (oaic.gov.au)
- United Kingdom - Information Commissioner's Office (ico.org.uk)
- European Union - your local supervisory authority
- Sri Lanka - Data Protection Authority of Sri Lanka
