Privacy Policy

Introduction

Welcome to kavindu.me ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website kavindu.me, including any subdomains and related services. It is written with regard to Sri Lanka's Personal Data Protection Act, No. 9 of 2022 (as amended).

Please read this Privacy Policy carefully. By accessing or using our website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Information We Collect

Automatically Collected Information

When you visit our website, we automatically collect certain information through Google Analytics, including:

• Device information (browser type, operating system, device type)
• IP address (anonymized)
• Pages visited and time spent on pages
• Referring website or source
• Geographic location (country/city level)
• Interactions with website elements (clicks, scrolls)

Information You Provide

We may collect information you voluntarily provide when you:

• Contact us via email
• Request a quotation or hire us for a project
• Purchase templates from our marketplace
• Make a payment to us
• Subscribe to newsletters (if applicable)

This may include your name, email address, phone number, company name, billing address and project details.

Payment Information

Payments are processed by Dialog Pay (formerly Genie), operated by Dialog Axiata PLC and Dialog Finance PLC. When you pay us by QR code or through the Dialog Pay payment gateway, we receive only transaction details such as:

• Transaction ID, date, time, amount and currency
• Payment status and authorisation or reference code
• Payer name, masked card or account number and the paying bank or app, where Dialog Pay provides them
• The invoice or order reference you enter

We never receive or store your full card number, CVV, banking login, passwords or PINs. These are entered only in your own banking or wallet app or on Dialog Pay's secure hosted payment page.

How We Use Your Information

• To analyze website traffic and user behavior
• To improve our website and user experience
• To respond to your inquiries and communications
• To prepare quotations, invoices and receipts
• To process and verify payments, deliver products and services, and handle refunds, disputes and chargebacks
• To detect and prevent fraud or security issues
• To comply with legal obligations

Legal Basis for Processing

• Contract: to provide services, process payments and deliver products you request
• Legal obligation: to keep financial and tax records and meet requirements of payment providers and regulators
• Legitimate interests: to secure our website, prevent fraud and improve our services
• Consent: for optional communications, which you may withdraw at any time

Google Analytics

We use Google Analytics 4 (GA4) to understand how visitors interact with our website. Google Analytics collects information such as how often users visit our site, what pages they visit, and what other sites they used prior to coming to our site.

Google Analytics uses cookies to collect this information. The information generated by the cookie about your use of our website is transmitted to and stored by Google on servers in the United States.

You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use, please see our Cookie Policy.

Third-Party Services

We may use third-party services that collect, monitor, and analyze data:

• Google Analytics: Web analytics service
• Dialog Pay (Genie): QR and online payment processing for client services and products, operated by Dialog Axiata PLC and Dialog Finance PLC (Privacy Notice). Dialog Pay and the banks and card networks involved process your payment data as independent controllers, and we may share transaction records with them to resolve refunds, disputes and chargebacks or where required by law.
• Your bank or wallet app: the LankaQR or other app you use to scan and pay is governed by its own terms and privacy policy
• Buy Me a Coffee: Payment processing for some template purchases
• Hostinger: Website hosting and deployment

These third parties have their own privacy policies addressing how they use such information. We do not sell your personal information.

International Transfers

Some of our providers (such as Google and Hostinger) store data outside Sri Lanka. Where personal data is transferred abroad, we rely on providers that apply appropriate safeguards to protect it.

Data Security

Our website is served over HTTPS (TLS encryption). Payment data is handled by Dialog Pay, which is certified to the PCI DSS standard. We limit access to client and payment records to what is needed to provide our services. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

Data Retention

We retain collected information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Google Analytics data is retained for 14 months. Invoices, payment and transaction records are kept for at least six (6) years to meet tax, accounting and payment provider requirements. Project communications are kept for the duration of the engagement and a reasonable period afterwards.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access your personal information
• The right to correct inaccurate information
• The right to request deletion of your information
• The right to opt-out of certain data processing
• The right to data portability
• The right to withdraw consent

To exercise these rights, please contact us using the information provided below. We may need to keep some records (such as payment records) where the law requires it. If you are not satisfied with our response, you may lodge a complaint with the Data Protection Authority of Sri Lanka.

Children's Privacy

Our website is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: contact@kavindu.me

Website: kavindu.me