Savisthri ("we," "us," or "our") is committed to protecting the privacy and personal data of our donors, volunteers, beneficiaries, website visitors, and partners. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you visit our website https://savisthri.lk/ or interact with our programs in Sri Lanka.
1. Information We Collect
We collect information that you voluntarily provide to us, as well as technical data automatically gathered during your visit.
A. Personal Information You Provide
- Contact Data: Name, email address, phone number, postal address.
- Donation Data: Payment details, billing address, transaction history (note: sensitive payment information is processed directly by secure payment gateways).
- Volunteer & Job Applications: Resume/CV, identification details, references, and skills.
- Inquiries & Communications: Messages submitted through contact forms, emails, or newsletter subscriptions.
B. Information Collected Automatically
- Technical & Usage Data: IP address, browser type, operating system, pages visited, time spent on the site, and referral sources collected via cookies and analytics.
2. How We Use Your Information
We process your personal information for the following purposes:
- Donation Processing: To process online donations, issue official receipts, and send tax-deductible contribution acknowledgments.
- Communication: To send newsletters, impact reports, program updates, and campaign appeals (you can opt out at any time).
- Volunteer & Program Management: To evaluate applications and coordinate volunteer activities or beneficiary support.
- Website Improvement: To monitor website traffic, enhance user experience, and ensure security.
- Legal Compliance: To comply with Sri Lankan regulatory requirements applicable to registered NGOs/NPOs.
3. Legal Basis for Processing Data
Under the Sri Lanka Personal Data Protection Act, No. 9 of 2022, we process your data based on:
- Consent: When you voluntarily subscribe to our communications, submit an inquiry, or donate.
- Contractual Need: To process transactions or manage volunteer/staff arrangements.
- Legal Obligation: To fulfill tax, statutory reporting, and regulatory requirements in Sri Lanka.
- Legitimate Interest: To fulfill our humanitarian and charitable mandate efficiently.
4. How We Share Your Information
We respect your privacy and do not sell, trade, or rent your personal data to third parties. We may share data only with:
- Third-Party Service Providers: Secure payment processors (e.g., PayHere, Stripe), email distribution platforms, or web hosting services operating under strict confidentiality agreements.
- Legal & Regulatory Authorities: When required by Sri Lankan law, court order, or government regulation.
5. Data Security & Retention
- Security: We employ industry-standard technical and organizational measures (SSL encryption, access controls) to protect your personal data from unauthorized access, loss, or misuse.
- Retention: We retain your personal information only as long as necessary to fulfill the purposes for which it was collected or to satisfy statutory accounting and legal obligations.
6. Your Data Protection Rights
Under Sri Lanka’s Personal Data Protection Act, you have the following rights regarding your personal information:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure / Right to be Forgotten: Request deletion of your personal data when it is no longer needed.
- Right to Withdraw Consent: Opt out of receiving promotional/newsletter emails at any time via the "unsubscribe" link or by contacting us directly.
7. Cookies Policy
Our website uses cookies to distinguish you from other users and improve your browsing experience. You can choose to accept or decline cookies through your browser settings, though disabling cookies may affect certain website functionalities.
8. Third-Party Links
Our website may contain links to external sites (e.g., social media pages, partner organizations). We are not responsible for the privacy practices or content of these third-party websites.
9. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Coordinator at: