Privacy Policy

1. Information We Collect

We collect personal information that you voluntarily provide to us when you:

• • Make an online donation through our CyberSource payment gateway

• • Submit a bank transfer confirmation form

• • Fill out our contact form

• • Subscribe to communications from us

The personal information we collect may include:

• • Full name

• • Email address

• • Phone number

• • Donation amount and transaction reference

• • Message or communication content

• • Billing address (for online payment processing)

2. Payment Information

Online donations are processed through CyberSource (a Visa company), provided via the Bank of Ceylon Internet Payment Gateway. We do not store, process, or have access to your full credit/debit card details. All payment data is handled directly by CyberSource in accordance with PCI DSS (Payment Card Industry Data Security Standard) compliance requirements. We only receive confirmation of successful or failed transactions along with a transaction reference number.

3. How We Use Your Information

We use the information we collect to:

• • Process and confirm your donations

• • Send donation receipts and acknowledgements

• • Respond to your enquiries and communications

• • Notify you about upcoming events and community projects

• • Maintain accurate financial records as required by law

• • Comply with legal obligations and regulatory requirements

4. Information Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• • Payment Processors: CyberSource (Visa) and Bank of Ceylon for processing online donations

• • Legal Requirements: When required by Sri Lankan law, court order, or governmental regulation

• • Lions Clubs International: Aggregate, non-identifiable data for reporting purposes as required by our charter

• • Service Providers: EmailJS for delivering form submission notifications (limited to name and email)

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• • SSL/TLS encryption (HTTPS) for all data in transit

• • Strict Content Security Policy (CSP) headers

• • CSRF token protection for form submissions

• • HTTP Strict Transport Security (HSTS) with preload

• • Regular security audits and monitoring

6. Cookies & Tracking

Our website uses only essential cookies required for the website to function properly (e.g., language preference, session management). We do not use third-party advertising or tracking cookies. No personal data is collected through cookies.

7. Your Rights

Under applicable data protection laws, you have the right to:

• • Access the personal information we hold about you

• • Request correction of inaccurate personal information

• • Request deletion of your personal information

• • Withdraw consent for marketing communications at any time

• • Lodge a complaint with the relevant data protection authority

To exercise any of these rights, please contact us using the details provided below.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Donation records are retained for a minimum of 6 years in accordance with Sri Lankan financial regulations.

9. Third-Party Links

Our website may contain links to third-party websites, including Lions Clubs International, CyberSource, and the Bank of Ceylon. We are not responsible for the privacy practices of these external websites. We encourage you to review their privacy policies independently.

10. Children's Privacy

Our website and donation services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: