Introduction
Alumex PLC (collectively “Alumex”, “we”, “us”, or “our”) is a subsidiary of Hayleys PLC and Sri Lanka’s foremost manufacturer of aluminium extrusions and value-added aluminium solutions. We are committed to protecting the privacy and confidentiality of the personal information you share with us.
This Notice explains how information is handled on the Alumex 3D Product Studio (the “Platform”), an official product visualization experience for Alumex architectural systems. It covers interactive 3D product models, product information and technical resources, and the optional Alumex Vision image-preview feature. For other interactions with Alumex, such as purchases, recruitment, or visits to our premises, please consult the privacy notice on the official Alumex website.
This Notice is issued in line with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (“PDPA”) and other applicable data protection laws. You can browse product models without submitting your name or an image. If you choose to use Vision, you will need to provide an image for processing.
Who This Notice Applies To
This Notice applies to visitors who explore Alumex products and technical resources on this Platform, people who use its 3D product studio or Vision feature, and anyone who contacts us about the Platform. It does not replace notices provided separately when you interact with Alumex through other channels.
Information We Handle
“Personal Information” means information that identifies or can be used to identify you, directly or indirectly. Depending on how you use the Platform, the following information may be processed:
- Technical information: your IP address, browser, device details, pages requested, and error or security data needed to deliver and protect the Platform.
- Product interactions: product views and selections, configuration choices, and requests for technical resources as you use the visualization experience.
- Vision inputs and results: an image you choose to upload, a session identifier, selected product and settings, and URLs for uploaded and generated images used to create your preview.
- Communications: your email address and any details you choose to provide if you contact us about the Platform.
We do not require your NIC, payment details, CV, or other sensitive personal information to use the Platform. Please do not include such information in images or messages you submit.
3D Models and Alumex Vision
Interactive models represent official Alumex product architectures. Exploring models and available technical materials does not require a Vision upload. If you use Vision, your chosen image is uploaded through the Platform to Cloudinary. The image URL, session identifier, and product and configuration details are sent to an external image-processing workflow to analyse the scene and generate a visualization.
Generated previews are visualizations, not construction or specification documents. Upload only images you have permission to use, and avoid images showing people, private spaces, or sensitive details unless you are comfortable having that content processed by these services. Once uploaded, an image is no longer stored only on your device.
Legal Bases for Processing
We process personal information where a valid basis under the PDPA or other applicable law applies. Depending on the context, this may include:
- Consent, where we request it for a specific processing purpose;
- Steps needed to provide a service you request, such as generating a Vision preview;
- Our legitimate interests in operating, improving, and protecting the Platform, where these do not override your rights and interests; and
- Compliance with applicable legal obligations.
Where we rely on consent, you may withdraw it as described in Your Data Subject Rights below. Withdrawal does not affect processing already carried out lawfully.
How We Use Information
We use information only for purposes relevant to the Platform, including:
- Displaying product models, specifications, and available technical resources;
- Processing your Vision image and product selections to create and display a preview;
- Remembering your local preferences, Vision history, onboarding status, and usage count;
- Responding to your enquiries or requests about the Platform; and
- Maintaining the Platform and detecting, preventing, or addressing errors and security issues.
We do not use personal information for a materially different purpose without informing you and, where required, obtaining your consent.
Browser Storage and Cookies
The Platform uses browser local storage to remember your preferred viewing mode, whether you have seen Vision guidance, your daily Vision usage count, and your Vision history. That history includes references to original and generated images and your product choices. It is saved in your browser, not in a Platform account.
You can remove this local information through your browser's site-data settings. Clearing your browser history or local storage does not necessarily remove uploaded images or workflow data held by service providers. Your browser or providers delivering Platform content may also use cookies or similar technologies; browser settings can restrict these, although some features may not work as expected.
Retention and Data Security
We keep personal information for no longer than reasonably necessary for the purposes described here and applicable legal requirements. Vision history stored locally remains until you clear site data or your browser removes it. Uploaded images and workflow data may remain with the providers that process them; clearing local history does not delete those copies. Please contact us if you wish to request removal of an upload.
We aim to protect personal information against unauthorised access, loss, and misuse. No internet transmission or electronic storage method is completely secure, and we cannot guarantee absolute security. Please avoid submitting sensitive information through Vision uploads or unsecured communications.
Your Data Subject Rights
Subject to applicable law, you may have the right to:
- Request access to the personal information we hold about you;
- Request correction of inaccurate or incomplete information;
- Request erasure, subject to applicable retention requirements;
- Withdraw consent or request restriction of or object to certain processing;
- Request data portability where technically feasible; and
- Raise a concern with us or lodge a complaint with the Data Protection Authority of Sri Lanka.
To exercise these rights, use the contact details below. We may ask you to verify your identity before responding. Clearing your browser's site data removes your local Vision history; for data held by external providers, please contact us so we can review your request.
Children and Third-Party Links
The Platform is not directed at children under 16. We do not knowingly collect personal information from them; please contact us if you believe a child has submitted information here.
Links to other websites, including Alumex or Hayleys Group sites, are subject to those sites' own privacy practices. This Notice applies to this Platform, not to third-party websites you visit through a link.
Contact Us
For questions or requests about this Notice or how your information is handled on the Platform, contact:
Alumex PLCPattiwila Road, Sapugaskanda, Makola, Sri Lanka
+94-11-2400332
+94-77-7552992
pdp@alumexgroup.com
We will endeavour to respond within a reasonable period, as required by applicable law.
Changes to This Notice
We may update this Notice when the Platform, its providers, or legal requirements change. Changes will be posted here with an updated “Last Updated” date. Where changes are material, we will take reasonable steps to notify you. We encourage you to review this page periodically.


