1. Who we are and scope
Sri Lanka Aid and Humanitarian Development Agency (SLAHDA) is responsible for personal data collected through this website and its authorised programme, partnership, professional, event, communication and donation channels. This policy applies to visitors, donors, applicants, consultants, partners, suppliers, volunteers and others who communicate with us. Contact: info@slahda.org.
2. Information we collect
Depending on the interaction, we may collect names, addresses, telephone numbers, email addresses, identity or organisation details, professional qualifications and CVs, correspondence, programme information, donation and transaction records, consent choices, authorised photographs or stories, and limited device, browser, IP-address, security-log and cookie information. Please do not send unnecessary sensitive information.
3. Sources
Information may come directly from you; from an organisation, referee or partner authorised to provide it; during an SLAHDA activity; from lawful public sources; or automatically through essential website and security technologies. Appropriate notice will be provided for indirect collection where required and practicable.
4. Purposes and lawful grounds
We process information to answer enquiries; assess applications and partnerships; plan, deliver, monitor and report programmes; administer donations; conduct due diligence; safeguard people and assets; maintain financial, audit and governance records; operate and secure the site; and comply with law. We use an appropriate legal ground, such as consent, requested pre-contractual steps or contract, legal obligation, vital interests, a permitted public-interest purpose, or a legitimate organisational interest that does not improperly override individual rights.
5. Sensitive data, children and vulnerable persons
Health, disability, financial, biometric, ethnicity, belief or other sensitive information is collected only when necessary, lawful and protected by additional controls. Children and vulnerable persons receive heightened safeguards. Images, names and stories are used only with appropriate authority and informed consent or another lawful basis, after considering dignity, safety and best interests.
6. Donations and payments
When online payments are activated, details may be processed by an authorised bank or payment provider under its own privacy and security terms. SLAHDA retains only transaction, donor, receipt and compliance information reasonably required and does not intend to store complete payment-card credentials on this site. Anonymous donations may be limited where identification is legally or operationally required.
7. Cookies, logs and analytics
Essential cookies, hosting logs and security technologies may deliver and protect the site. Non-essential analytics, advertising or similar tracking will not be introduced without appropriate notice and choice where consent is required. Blocking cookies may affect site functions.
8. Sharing
We do not sell or rent personal data. On a need-to-know basis, information may be shared with authorised personnel, advisers, auditors, banks, technology or payment providers, delivery partners, funders where reporting is lawfully required, and public authorities where legally required. Suitable confidentiality, security and data-handling obligations apply. Public reports use aggregation, anonymisation or careful redaction where appropriate.
9. International transfers
Some providers, partners or funders may process information outside Sri Lanka. Before transfer, SLAHDA considers applicable restrictions, necessity and risk and uses a lawful mechanism with proportionate contractual, organisational or technical safeguards. International standards are benchmarks where useful; this does not mean foreign law governs every activity.
10. Retention
Data is kept only as long as reasonably necessary for its purpose and applicable legal, contractual, donor, safeguarding, audit and dispute requirements. Periods vary by record type. Information is then securely deleted, anonymised or lawfully archived with restricted access.
11. Security and incidents
SLAHDA uses proportionate administrative, physical and technical measures, including access controls, confidentiality, backups and provider checks. No internet system is completely secure. Suspected incidents are assessed, contained, documented and notified where required by law.
12. Your rights
Subject to applicable law and exceptions, you may ask whether we process your data; request access, correction or completion; withdraw consent; object to or request restriction; and request deletion or another available remedy. We may verify identity and retain information required for law, safeguarding, audit or legal claims. Withdrawal does not invalidate earlier lawful processing.
13. Complaints
Contact info@slahda.org so SLAHDA can investigate. Where the Sri Lankan Personal Data Protection Act applies and the statutory process is available, you may also contact the Data Protection Authority of Sri Lanka. Other legal remedies are not limited.
14. Automated decisions and external links
SLAHDA does not currently use this site for solely automated decisions producing legal or similarly significant effects. Relevant notice and safeguards will be provided if that changes. External sites operate under their own policies.
15. Updates and standards
Effective 1 August 2026. This policy is reviewed periodically and after material change. It supports the Personal Data Protection Act, No. 9 of 2022, as amended by Act No. 22 of 2025, and recognised principles of fairness, transparency, purpose limitation, minimisation, accuracy, retention control, security and accountability.