Terms and Conditions

1. Altrium Terms of Use

Last Revised on 8th November 2025.

Introduction

These Terms of Use (“Terms”) govern your access to and use of the Altrium website, products, and related services (“Services”). By using our Services, you agree to be bound by these Terms and our Privacy Policy, forming a legal agreement between you and Altrium LLC (United States) and its affiliates, including Altrium (Private) Limited (Sri Lanka) (collectively, “Altrium,” “we,” “us,” or “our”). Each entity acts either jointly or separately as applicable to your jurisdiction or the specific Service you use. These Terms apply to all Services provided directly or indirectly by Altrium through its websites and platforms. If you do not agree to these Terms, you must not access or use the Services.

If you do not agree to these Terms, you must not access or use the Services.

Acceptance of Terms

• Have the legal capacity and authority to enter this agreement;
• Are at least 18 years old or using the Services under appropriate supervision; and
• Will comply with these Terms and applicable laws.

If using on behalf of an organization, you represent that you are authorized to bind it to these Terms.

Use of Services

Altrium grants you a limited, non-exclusive, non-transferable, and revocable license to use the Services in accordance with these Terms. You agree not to:

• Violate laws or infringe intellectual property rights;
• Gain unauthorized access to systems or data, including through automated means such as bots or scraping;
• Transmit malware or harmful content;
• Harass or harm others.

Use of the Services must always comply with our Privacy Policy and related policies.

Intellectual Property

All content, design, and software on the Services are owned or licensed by Altrium. You may not copy, modify, distribute, or use Altrium trademarks or logos without prior written consent. All rights not expressly granted are reserved. All other trademarks and logos appearing on the Services are the property of their respective owners.

Privacy and Data Protection

Altrium protects your personal data in line with the EU GDPR and Sri Lanka PDPA (No. 9 of 2022). Use of the Services implies acceptance of our Privacy Policy, which explains:

• What personal data we collect and why;
• Legal bases for processing; and
• Your data rights and how to exercise them.

Cookies

Our website uses cookies and similar technologies to enhance your browsing experience. For details on how cookies are used and managed, refer to our Cookie Policy, which is part of these Terms by reference.

Modifications

We may update these Terms or our Services periodically. Changes will be posted here with an updated “Last Revised” date. Continued use of the Services after posting constitutes acceptance of the revised Terms. For material updates, Altrium may provide additional notice on the website or by email.

Disclaimers and Liability

The Services are provided “as is” and “as available”, without warranties of any kind. To the maximum extent permitted by law, Altrium and its affiliates shall not be liable for indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenue, or data, arising from your use of or inability to use the Services, even if advised of the possibility of such damages. In no event shall Altrium’s total liability exceed the amount you paid (if any) for use of the Services s, even if advised of the possibility of such damages. In no event shall Altrium’s total liability exceed the amount you paid (if any) for use of the Services during the six months preceding the claim.

Indemnification

You agree to indemnify, defend, and hold harmless Altrium LLC, Altrium (Private) Limited, their affiliates, officers, directors, employees, and agents from and against any and all claims, liabilities, damages, losses, costs, or expenses (including reasonable legal fees) arising out of or in connection with:

• Your access to or use of the Services;
• Your violation of these Terms or any applicable law; or
• Any content or information you submit, post, or transmit through the Services.

Altrium reserves the right to assume exclusive defense and control of any matter otherwise subject to indemnification by you, in which event you agree to cooperate fully with Altrium in asserting any available defenses.

Third-Party Links

Our Services may contain links to third-party websites. Altrium is not responsible for their content, policies, or practices. Accessing such sites is at your own risk.

Force Majeure

Altrium is not liable for any delay or failure to perform due to causes beyond its reasonable control, including natural disasters, internet outages, or government actions.

Entire Agreement

These Terms, along with our Privacy Policy and Cookie Policy, constitute the entire agreement between you and Altrium.

Termination

Altrium may suspend or terminate access to the Services at any time, without prior notice, if you violate these Terms or compromise the integrity, security, or operation of the Services. You may stop using the Services at any time. Termination of your access does not affect any rights or obligations that arose prior to the effective date of termination.

The following sections shall survive termination and continue to apply: Section 4 (Intellectual Property), Section 5 (Privacy and Data Protection), Section 8 (Disclaimers and Liability), Section 9 (Indemnification), Section 14 (Governing Law), and Section 15 (Contact).

Governing Law

These Terms are governed by the laws of the United States of America and, for Services operated or managed by Altrium (Private) Limited, by the laws of Sri Lanka. This interpretation shall be made without regard to any conflict-of-law principles that would require the application of another jurisdiction’s laws. In the event of any inconsistency between the two jurisdictions, the laws of the United States of America shall prevail. Disputes shall be resolved through confidential arbitration in accordance with the applicable governing jurisdiction’s laws.

Contact

For legal inquiries: legal@altrium.io
For privacy matters: rukshan@altrium.io (Data Protection Officer)

2. Altrium Privacy Policy

Please read this Website Privacy Policy (hereinafter referred to as “this Policy”) carefully before using this website: www.altrium.io.

The protection of privacy and the safeguarding of your personal information, including Personal Data, is our highest priority. We respect your privacy rights and are strongly committed to protecting your personal data.

In this Policy, “we”, “us”, “Company” and “our” refer to Altrium LLC (United States), its subsidiaries, and its associated companies within the Altrium Group, including Altrium (Private) Limited (Sri Lanka). “You”, “your”, or “the user” refers to any individual or authorized representative of a legal entity who accesses or uses this site from anywhere in the world.

This Policy explains how we collect, process, and protect your Personal Data. We ensure that any Personal Data obtained from you is not used or disclosed unless we have obtained your consent or are legally required to do so. By using our Site or submitting information through our Contact Us or Careers pages, you acknowledge and consent to the collection, processing, and disclosure of your Personal Data in accordance with this Policy.

Before submitting your details via our website, you will be prompted to acknowledge that you have read and accepted this Privacy Policy.

Definitions

Controller: Any person or entity who alone or jointly determines the purposes and means of processing Personal Data.

Data Subject: An individual whose Personal Data is collected, processed, or stored by the Controller.

GDPR: Refers to General Data Protection Regulation (GDPR) of European Union.

DPL / PDPA: Refers to the Personal Data Protection Act, No. 9 of 2022 (the “Act”) of Sri Lanka.

Personal Data: Any information referring to an identified or identifiable natural person (“Data Subject”).

Processor: An entity or person that processes Personal Data on behalf of a Controller.

Services: The services and digital platforms made available to you through our website, including the Sentiva Careers Site.

Collection of Personal Data

We collect your Personal Data through this Site when you voluntarily fill and submit information via the Contact Us or Careers pages. Personal Data collected may include:

• Name
• Email address
• Mobile number
• Resume or employment application details

Purpose of Collecting Personal Data

• To respond to inquiries and provide requested information or services.
• To process job applications submitted via the Sentiva Careers Site.
• To improve our services and user experience.
• To follow up on your inquiries and ensure customer satisfaction.

We may contact you after your inquiry or application to follow up and confirm that your request has been addressed.

Retention of Personal Data

We retain your Personal Data only as long as necessary to fulfill the purposes described in this Policy. We may also retain Personal Data after an inquiry or application has been fulfilled, declined, or abandoned for legitimate business, legal, or regulatory purposes. Unless otherwise required by applicable law, Personal Data will generally be retained for three (3) years or as otherwise required under applicable data protection regulations, including but not limited to the Personal Data Protection Act No. 9 of 2022 (Sri Lanka), the General Data Protection Regulation (GDPR), and other relevant international privacy frameworks.

Disclosure of Personal Data

We may disclose your Personal Data to:

• Authorized employees and agents of the Company.
• Third-party service providers who assist us in operating the website, recruitment management, or communication systems (including Sentiva, a recruitment and talent management platform operated by an affiliated company).
• Legal or regulatory authorities when required by applicable law.

All third parties handling Personal Data on our behalf are bound by strict confidentiality and data protection obligations.

Data Security and Protection

We have implemented appropriate organizational, technical, and physical safeguards to protect Personal Data from unauthorized access, alteration, disclosure, or destruction. This includes restricted access to servers, encrypted communication channels (HTTPS/SSL), and data transmission using 128-bit encryption. While we are in the process of implementing ISO/IEC 27001 information security standards, all data handling procedures are aligned with those principles to ensure confidentiality, integrity, and availability. However, transmission of data over the internet carries inherent risks, and complete security cannot be guaranteed. You transmit data at your own risk.

Data Subject Rights under Applicable Laws

Depending on your jurisdiction and applicable data protection laws — including the Personal Data Protection Act No. 9 of 2022 (Sri Lanka) and the EU General Data Protection Regulation (GDPR) — you may have the right to:

• Request access to or correction of your Personal Data.
• Restrict or object to processing.
• Request deletion (“Right to be Forgotten”), except where data retention is required by law.
• Request data portability, where applicable.
• Withdraw consent at any time (without affecting prior lawful processing).

Requests can be made by contacting the Data Protection Officer (DPO) using the details provided below.

Processing, Storage, and Transfer of Personal Data

We will process your Personal Data in accordance with the GDPR, PDPA and applicable data protection laws. Your Personal Data may be stored and processed in secure cloud environments, including those located outside the United States, EU and Sri Lanka. Where cross-border transfers occur, we will ensure that adequate safeguards are in place to maintain the same level of data protection.

Minor’s Privacy

We do not knowingly collect personal data from individuals under the age of 18. If such data is inadvertently collected, it will be deleted immediately upon discovery.

Use of Cookies

Our website uses cookies to improve performance and enhance your browsing experience. Cookies do not contain Personal Data. We do not control or take responsibility for cookies used by third-party websites linked to our site. We may collect anonymous data such as:

• Frequency of visits
• Average session duration
• Pages viewed per visit

You may disable cookies via browser settings, though some website functionality may be affected.

Links to Other Websites

Our site may contain links to external websites. We are not responsible for the privacy practices or content of such third-party sites. Users should refer to the respective site’s privacy notices before sharing data.

Modifications

We may amend this Policy from time to time by posting the updated version on our website. Such changes will take effect upon posting. You are encouraged to review this Policy periodically to stay informed about how we protect your data. The version number and date will be updated with each revision.

Contact Point for Data Protection Inquiries

If you have questions, wish to exercise your rights, or wish to file a complaint, please contact our Data Protection Officer:

Name: Rukshan Salgado
Email: rukshan@altrium.io

Notification of Data Breaches

If a Personal Data Breach occurs that is likely to result in a high risk to your rights or freedoms, we will notify you and the relevant supervisory authorities promptly, in compliance with applicable data protection laws, including the PDPA and GDPR, where relevant.

Governing Law

This Policy is governed by and construed in accordance with the laws of the United States of America and, where applicable, the laws of Sri Lanka. We comply with data protection regulations relevant to the jurisdictions in which we operate, including the EU General Data Protection Regulation (GDPR) and the Personal Data Protection Act No. 9 of 2022 (Sri Lanka).