At Associated Motor Finance PLC, we value the privacy and security of our customers' personally identifiable information (PII). This Privacy Policy governs PII collection, use, and disclosure through our newly implemented Self-care web application. We are committed to ensuring the confidentiality and integrity of the data we handle, and this policy outlines our best practices and methodology used for safeguarding.

We collect and store PII from our customers solely for the purpose of providing our financial services and ensuring a seamless user experience. The types of PII we collect may include but are not limited to:

• Full name
• Contact information (e.g., NIC, email address, phone number)
• Any other information required for the provision of our services

We only collect PII that is necessary for the intended purpose and do not retain it longer than required.

We use the collected PII for the following purposes:

• Providing and improving our financial services
• Verifying customer identity and eligibility for our services
• Processing transactions and requests (Enabling the function to access IPG – Internet Payment Gateway)
• Communicating important updates, notifications, and service-related information
• Addressing customer inquiries and support requests

We do not sell, rent, or disclose our customers' PII to third parties for marketing purposes.

We may also disclose PII in response to lawful requests from public authorities, including to meet legal requirements, enforce our policies, or protect the rights, property, or safety of our customers or others.

We implement industry-standard security measures to safeguard the PII in our possession. These measures include, but are not limited to:

• Secure transmission and storage of data using encryption protocols according to Technology Risk Management and Resilience under the Finance Business Act Directions issued by the Monetary Board, Central Bank of Sri Lanka.
• Regular system monitoring and vulnerability assessments.
• Access controls and authentication (2FA – 2 Factor Authentication) mechanisms to ensure authorized access.
• Employee training on data protection and privacy best practices.
• Confidentiality and Non-Disclosure agreements with employees and third-party service providers.

We continuously assess and enhance our security practices to protect against unauthorized access, disclosure, alteration, or destruction of PII.

We retain customer PII only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, and resolve disputes. Once the retention period expires, we securely dispose of or anonymize the data.

Customers have certain rights regarding their PII, including:

• The right to access, correct, or update their personal information.
• The right to request the deletion of their personal information (subject to legal obligations)
• The right to opt-out of certain communications or data processing activities.
• The right to withdraw consent for processing their personal information.

To exercise these rights or obtain further information, customers can contact our Privacy Officer using the contact details provided below.

We reserve the right to update or modify this Privacy Policy from time to time. Any changes will be effective upon posting the revised version on our website. Customers will be notified of significant changes through appropriate communication channels. We encourage customers to review this Privacy Policy periodically for any updates.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer at:

Associated Motor Finance PLC