Legal
Privacy Notice
A.Who we are
This notice explains how RAQ Consultation ("RAQ", "we", "us") handles personal information when you visit this website, send us an enquiry, or contact us by email or telephone about our regulatory affairs and quality assurance services.
RAQ Consultation is a trading name of Healin' (Pvt) Ltd (company registration PV 00282060), which is responsible for that information. Our details are:
- Business name
- RAQ Consultation
- Legal entity
- Healin' (Pvt) Ltd (registration PV 00282060)
- info@raqsl.com
- Hotline
- +94 72 090 6020
- +94 72 090 6020
- Address
- No. 18, Walana, Panadura, Sri LankaPlease arrange an appointment before visiting.
This notice does not cover information handled under a consultancy engagement, which is governed by the terms agreed with each client, or any client portal, which will have its own terms.
B.Information we collect
When you contact us by email, telephone or WhatsApp
This website does not have an online enquiry form. To contact us, you send an email from your own email account, telephone us or send us a WhatsApp message. We receive the information you choose to give us, such as your name, contact details, country, the organisation you represent and details of your project or question.
You do not have to give us this information, but we need enough contact details and information about your enquiry to reply.
If you contact us through WhatsApp, the messaging service is provided by WhatsApp under its own terms and privacy policy.
When we correspond about possible services
We keep the correspondence and the business contact details of the people we deal with while we discuss your requirements.
When you browse this website
We do not use cookies, analytics or tracking, and the website does not load content from other companies' servers (see section J). Our website hosting provider may record technical information, such as IP addresses, the pages requested and browser details, in server logs.
Please do not send sensitive personal information, such as health information or identity documents, by email, telephone or WhatsApp unless we have asked for it.
C.Why we use your information
We use the information described above to:
- review and reply to your enquiry;
- understand your regulatory or quality requirements and whether we can help;
- communicate with you about the services you have asked about, including any proposal;
- keep the website and our communications secure and prevent misuse;
- comply with legal obligations that apply to us.
If you engage RAQ, information handled during the engagement, including any regulatory documents, is governed by the engagement terms. We do not use enquiry information to send marketing messages.
D.Lawful grounds for using your information
Sri Lanka's Personal Data Protection Act, No. 9 of 2022, as amended, sets out the grounds on which personal information may be processed. We expect to rely on the following:
| Activity | Ground |
|---|---|
| Replying to your enquiry and discussing possible services | Taking steps at your request before entering into a contract; or our legitimate interest in responding to business enquiries |
| Keeping a record of enquiries and correspondence | Our legitimate interest in managing our business and following up |
| Website security and preventing misuse | Our legitimate interest in protecting the website and our communications |
| Meeting legal obligations | Compliance with a legal obligation |
We do not ask for your consent to reply to an enquiry, because replying is what you have asked us to do. If we ever offer optional newsletters or other marketing, we will ask separately, and you will not need to agree to receive a reply to your enquiry.
E.Sharing your information
Your information is available to RAQ personnel who need it to deal with your enquiry. We may also share it with:
- service providers acting on our instructions, such as our website hosting and email service providers;
- professional advisers or public authorities where the law requires it.
Sending us an enquiry does not mean your information is passed to the National Medicines Regulatory Authority (NMRA) or any other regulator. Information is submitted to a regulator only later, within an agreed engagement, as part of an application you have authorised. We do not sell personal information.
F.Processing outside Sri Lanka
Some of the services we use, such as our website hosting and email providers, may store or process information outside Sri Lanka.
We will review these arrangements against the cross-border requirements of the Personal Data Protection Act as they come into operation, and update this notice to name the providers and locations involved.
G.How long we keep information
We keep personal information only for as long as we need it for the purposes in section C. In deciding how long that is, we consider:
- whether your enquiry has been answered and whether further discussion is likely;
- whether an engagement has started, in which case its terms apply;
- any legal, tax or accounting requirement to keep records;
- for technical logs, how long they are needed to keep the website secure.
When information is no longer needed, we delete it.
H.Security
This website has no enquiry form and does not accept file uploads. Apart from technical server logs, it does not collect information itself, and it does not use cookies, analytics or tracking. We take reasonable steps to protect the information we hold, and we expect our service providers to do the same.
No website, email or internet transmission is completely secure, so please do not send confidential or sensitive information by ordinary email or messaging services.
I.Your rights and privacy enquiries
Sri Lanka's Personal Data Protection Act, No. 9 of 2022, as amended, provides rights for individuals, including the right to access personal information about you, to ask for it to be corrected, completed or erased, to withdraw consent or object to some processing, to ask for a review of certain automated decisions, and to appeal to the Data Protection Authority.
These rights are set out in Part II of the Act. At the date of this notice, Part II has not yet been brought into operation; the Act's main processing obligations (Parts I and III) are due to come into operation on 1 January 2027. We will update this notice as further provisions come into operation.
In the meantime, you can contact us at any time to ask what information we hold about you, to correct it, or to ask us to delete it. We will consider every request and reply as soon as we reasonably can.
- Privacy enquiries
- info@raqsl.comPlease put "Privacy request" in the subject line.
You may also contact the Data Protection Authority of Sri Lanka: First Floor, Block 5, Bandaranaike Memorial International Conference Hall (BMICH), Bauddhaloka Mawatha, Colombo 07; info@dpa.gov.lk; www.dpa.gov.lk (opens in a new tab).
We do not make decisions about you based solely on automated processing.
J.Cookies, analytics and other technologies
This website does not set cookies and does not use analytics, advertising or tracking tools, so there is no cookie banner.
The website's typeface, images and scripts are served from the website itself. Pages do not load fonts, scripts or other content from third-party servers, such as Google Fonts, so visiting the website does not send your information to those providers.
If we introduce cookies or analytics in future, we will update this notice first and ask for your agreement where required.
Confidential documents
Our work can involve confidential manufacturer documents, formulations, technical dossiers and regulatory correspondence. Our public contact details are for initial enquiries only.
Please do not send confidential technical documents, formulations, dossiers or sensitive personal information in a first email or message. If an engagement goes ahead, we will agree with you how documents are to be exchanged.
K.External websites
This website links to other websites, including the NMRA's. Those websites are operated independently of RAQ, and their own privacy terms apply.
L.Changes to this notice
We may update this notice when our services, the way we handle information, or the law changes. The version and date at the top of the page show when it was last updated.
Version 1.0. Effective 26 October 2026.