Skip to main content

Let's Work

LET'SWORK POLICIES

Privacy Policy

This Privacy Policy explains how Let’sWork collects, uses, stores and shares personal data when employers use our vacancy campaign services, candidates submit applications, or visitors interact with Let’sWork.lk.

Last updated: 14 August 2026
Privacy by Purpose

We aim to collect and use only the personal data reasonably required to operate vacancy campaigns, manage applications, provide our services and maintain our website and business operations.

01

Overview

Let’sWork.lk provides campaign-based vacancy advertising and applicant generation services for employers.

Employers provide vacancy requirements to Let’sWork. We may create and promote the vacancy campaign, collect applications and organise applicant-stated information according to the selected service package.

For packages that include application filtering, applicant records may also be filtered against job-related criteria agreed with the Employer before the campaign.

This Privacy Policy applies to personal data processed through our website, vacancy application forms, campaign activities and official business communications.

02

Our Data Protection Roles

Our role may differ depending on why personal data is being processed.

EMPLOYER CAMPAIGNS Employer as Controller

Where an Employer determines the vacancy, application purpose, job-related criteria and use of applicant information, the Employer will generally act as the controller of that applicant data.

CAMPAIGN PROCESSING Let’sWork as Processor

Where Let’sWork processes applicant data solely to provide the Employer's campaign under documented instructions, Let’sWork generally acts as a processor to the extent applicable.

LET'SWORK OPERATIONS Let’sWork as Controller

Let’sWork may act as controller for its own website enquiries, client records, billing, security, administration and other independent business operations.

03

Personal Data We May Collect

Employer and Business Information

  • Name and business contact details
  • Company or business information
  • Email address and telephone number
  • Vacancy and campaign requirements
  • Quotations, invoices and payment-related records
  • Communications with Let’sWork

Applicant Information

Depending on the vacancy, applicants may be asked to provide information such as:

  • Name and contact details
  • District or job location
  • Education and qualifications
  • Employment experience
  • Job-related skills
  • Availability
  • Answers to relevant application questions
  • CV or other job-related documents voluntarily submitted

Standard Let’sWork campaigns are designed to collect information relevant to the vacancy. Applicants should avoid submitting unnecessary sensitive or special-category information unless specifically required for a lawful purpose.

Website and Technical Information

  • IP address
  • Browser and device information
  • Website usage and security information
  • Cookie or analytics information where enabled
04

How We Use Personal Data

Depending on the circumstances and applicable lawful basis, personal data may be processed to:

  • Respond to enquiries from employers and applicants.
  • Prepare, manage and deliver vacancy advertising campaigns.
  • Collect and organise vacancy applications.
  • Filter applicant records where this is included in the selected package.
  • Deliver applicant information to the relevant Employer.
  • Provide customer service and campaign support.
  • Manage quotations, payments, invoices and business records.
  • Protect our website, systems and users from misuse, fraud or security threats.
  • Meet applicable legal, regulatory or record-keeping obligations.
  • Improve our website and services using appropriate statistical or analytical information.

Depending on the processing activity, the lawful basis may include consent, steps connected with a contract, performance of contractual obligations, compliance with applicable law or legitimate business interests where permitted.

05

Application Filtering

Some Let’sWork packages include application filtering for the Employer.

Where filtering applies, applicant records are compared against job-related criteria agreed with the Employer for that campaign.

Candidate-Stated Information Filtering is based on information provided by applicants. It does not mean that Let’sWork has independently verified, recommended or made a hiring decision about an applicant.

The Employer remains responsible for reviewing the applicant information, independently verifying relevant details, conducting interviews and making the final hiring decision.

Let’sWork does not make the Employer's final hiring decision through automated processing.

06

Who We May Share Personal Data With

Personal data may be shared only where reasonably necessary for the relevant purpose.

Relevant Employer

Applicant information collected for a vacancy campaign may be provided to the Employer responsible for that vacancy.

Service Providers

We may use authorised hosting, cloud, email, website, form, payment, security or technology providers to operate our services.

Professional Advisers

Information may be shared with authorised legal, accounting or professional advisers where reasonably necessary.

Authorities

Information may be disclosed where required by applicable law, lawful process or a competent authority.

We do not sell candidate personal data to third parties.

07

How Long We Keep Personal Data

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal, contractual and operational requirements.

APPLICANT CAMPAIGN DATA Approximately 90 Days

Applicant campaign data held by Let’sWork will normally be deleted or anonymised within approximately 90 days after campaign handover or completion, unless a longer period is required by documented Employer instructions, applicable law, a dispute, security matter or another legitimate retention requirement.

Employers may retain applicant information after handover according to their own legal obligations, privacy practices and retention requirements. Applicants should contact the relevant Employer regarding data retained by that Employer.

Client, financial, contractual, security and business records may be retained for longer where reasonably required for legal, accounting, contractual or administrative purposes.

08

Data Security

Let’sWork uses reasonable technical and organisational safeguards designed to protect personal data from unauthorised access, loss, misuse, alteration or disclosure.

  • Access to applicant information is limited to authorised persons who require it for the relevant business purpose.
  • Official business systems and controlled access methods are used for campaign data.
  • Appropriate account, password and access controls are used.
  • Security practices may be reviewed and updated based on operational risk.

No internet transmission or storage system can be guaranteed to be completely secure, but we take reasonable steps to reduce security risks.

09

Cookies and Website Data

Let’sWork.lk may use cookies and similar technologies required for website functionality, security and performance.

Where optional analytics or similar tools are enabled, they may collect technical information about how visitors interact with the website.

You can control or delete cookies through your browser settings. Disabling certain cookies may affect some website functionality.

10

Your Personal Data Rights

Subject to applicable law and any permitted limitations, you may have rights relating to personal data processed about you, including:

  • Requesting access to your personal data.
  • Requesting correction or completion of inaccurate or incomplete information.
  • Requesting erasure where the applicable legal conditions are met.
  • Withdrawing consent where processing is based on consent.
  • Objecting to or requesting that certain processing stop where applicable.
  • Requesting review of certain decisions based solely on automated processing, where applicable.

If Let’sWork is acting only as processor for an Employer, the relevant Employer may be the appropriate controller for your request. Let’sWork may assist the Employer in handling the request where appropriate.

We may request reasonable information to verify identity before acting on a personal data request.

11

Cloud Services and International Processing

Some technology, hosting, cloud or communication service providers used to operate Let’sWork may process or store information using infrastructure located outside Sri Lanka.

Where personal data is processed internationally, Let’sWork will take reasonable steps to use appropriate arrangements and safeguards required by applicable data protection law.

12

Questions, Requests and Complaints

If you have a privacy question or wish to make a request regarding personal data handled by Let’sWork, contact us using the details below.

EMAIL info@letswork.lk PHONE +94 70 685 6857

Where your request relates to an application submitted for a particular Employer's vacancy, we may need to identify the relevant campaign or Employer before the request can be handled.

Terms & Conditions • Delivery & Refund Policy

We may update this Privacy Policy when our services, systems or legal obligations change. The latest version will be published on this page.