ESG SEC Sri Lanka reviews mandatory ESG disclosure timeline  |  CSR Dialog Axiata expands digital literacy programme to 50,000 students  |  POLICY CBSL Sustainable Finance Roadmap: Q2 2026 update  |  DATA 47 CSE-listed companies now publish standalone sustainability reports  |  ESG SEC Sri Lanka reviews mandatory ESG disclosure timeline  |  CSR Dialog Axiata expands digital literacy programme to 50,000 students  |  POLICY CBSL Sustainable Finance Roadmap: Q2 2026 update  |  DATA 47 CSE-listed companies now publish standalone sustainability reports  | 

Privacy Policy

ESGNexus Policy

Version 1.0 – Effective July 2026

This Privacy Policy complies with the Sri Lanka Personal Data Protection Act (PDPA) No. 9 of 2022. It explains what personal data ESGNexus.lk collects, why we collect it, how we use it, and what rights you have.

1. Who We Are

ESGNexus.lk is operated by Brain Business and Technologies (Private) Limited, trading as ESGNexus, incorporated in Sri Lanka. We are Sri Lanka’s independent platform for ESG, CSR, and sustainability intelligence.

Privacy enquiries: editor@esgnexus.lk

2. What Personal Data We Collect

Newsletter Subscribers

  • Email address (required)
  • Name (optional, if provided)
  • Date and time of subscription
  • Email engagement data (opens, clicks) – collected automatically by Beehiiv

Contact Form Submissions

Name, email address, the content of your message, and the date of submission.

Website Analytics

We use Google Analytics 4 and Microsoft Clarity to understand how visitors use the site. This collects pages visited, time on page, device type, approximate city-level location, and referral source. GA4 operates with IP anonymisation enabled. You may opt out via the cookie consent banner.

Professional Contact Data

We maintain a database of professional contacts at Sri Lankan companies compiled from publicly listed information on company websites, CSE filings, and professional introductions. This is used for editorial outreach and data verification only. It is not shared with third parties and is not used for unsolicited marketing.

3. How We Use Your Data

PurposeDescription
Newsletter deliverySending the ESGNexus Weekly and editorial updates to subscribers
Service communicationResponding to enquiries, correction requests, and editorial correspondence
AnalyticsUnderstanding site usage to improve content and navigation
Professional outreachContacting company contacts for interview requests and data verification
Legal complianceRetaining records where required by Sri Lankan law

We do not use personal data for automated decision-making, profiling, or targeted advertising. We do not sell personal data to third parties under any circumstances.

4. Third-Party Processors

ServicePurpose
BeehiivNewsletter delivery – stores email addresses and engagement data
Google Analytics 4Website analytics – anonymised usage data only
Microsoft ClarityUser behaviour analytics – anonymised session data only
Google WorkspaceEmail infrastructure
HubSpot CRMProfessional contact management – business contact details only

5. Your Rights Under the PDPA

Under the Personal Data Protection Act No. 9 of 2022, you have the right to access, correct, delete, restrict processing of, and port your personal data. You may also object to processing and withdraw consent at any time.

To exercise your rights: editor@esgnexus.lk. We respond within 14 calendar days at no charge.

6. Cookies

  • Essential: Required for the website to function. Cannot be disabled.
  • Analytics: Google Analytics 4 and Microsoft Clarity. Opt out via the cookie consent banner.
  • Preference: Remembers your cookie consent choice.

We do not use advertising cookies or third-party tracking cookies for commercial profiling.

7. Data Retention

  • Newsletter subscribers: retained while you remain subscribed. Unsubscribe via the link in any newsletter.
  • Contact form data: retained for 24 months or until the matter is resolved.
  • Analytics data: retained per Google Analytics 4 default settings (14 months).
  • Professional contact data: reviewed annually; contacts inactive for 24 months are removed.

8. Data Security

ESGNexus uses HTTPS encryption site-wide, two-factor authentication on all administrative accounts, access controls limiting data access to authorised personnel, and daily automated backups with secure off-site storage.

9. Children

ESGNexus.lk is a professional platform not directed at children. We do not knowingly collect personal data from individuals under 16. Contact editor@esgnexus.lk if you believe a child has provided data to us.

10. Changes to This Policy

We will notify newsletter subscribers of material changes by email. Continued use of ESGNexus.lk after a policy update constitutes acceptance of the revised policy.


ESGNexus.lk – Sri Lanka’s independent ESG, CSR and Sustainability Intelligence Platform

Brain Business and Technologies (Pvt) Ltd trading as ESGNexus

Related policies: Editorial PolicyData MethodologyCorrection Policy

Questions? Contact editor@esgnexus.lk

Stay ahead of Sri Lanka's ESG agenda

Join sustainability officers, investors, and policy professionals who read The ESGNexus Weekly every Friday.