Privacy Policy

1. About this policy

Lifeline Association (“Lifeline”, “we”, “us” or “our”) is a Sri Lankan humanitarian non-profit organisation. This Privacy Policy applies to personal information handled through lifelinesrilanka.org and related online interactions with Lifeline.

We aim to handle personal information fairly, transparently and securely in accordance with applicable Sri Lankan data-protection requirements, including the Personal Data Protection Act, No. 9 of 2022, as amended and brought into operation from time to time.

2. Information we collect

The information we handle depends on how you interact with Lifeline. It may include:

• Contact information: your name, email address, enquiry subject and message when you contact us.
• Volunteer information: your name, email address, availability, chosen opportunity and application details.
• Career information: your name, email address, phone number, role applied for and, where enabled, your résumé or CV.
• Donation information: transfer references, donation details or donor information that you voluntarily provide, or information made available to Lifeline through our banking relationship.
• Technical and security information: limited device, browser, network, log or security information where it is generated by our hosting, infrastructure or security systems.

Our current donation flow uses direct bank transfer. Your online-banking username, password, PIN, one-time password and other banking credentials are not entered into or collected by this website.

3. How information is collected

• Directly from you when you complete a contact, volunteer or career form.
• When you email, call or otherwise communicate with Lifeline.
• When you make a bank transfer and provide a donation reference or payment information to us.
• Automatically through the technical systems required to operate, protect and maintain the website.

4. How we use information

• To respond to enquiries and provide requested information or support.
• To administer volunteer applications and participation.
• To review job and internship applications and communicate with applicants.
• To administer donations, reconcile bank transfers and provide acknowledgements where appropriate.
• To maintain website security, prevent abuse and troubleshoot technical problems.
• To meet accounting, governance, regulatory and other legal obligations.
• To improve our website and services using information that is appropriate for that purpose.
• To send updates or other communications where you have requested or consented to receive them, where applicable.

5. Lawful processing

Depending on the activity and the legal requirements in force at the time, Lifeline may process personal information because it is necessary to respond to your request, administer a volunteer or recruitment process, meet legal or governance obligations, pursue a legitimate organisational purpose, or because you have provided consent where consent is appropriate.

We will not rely on a legal basis that does not apply to the relevant processing activity, and we will update this notice when material changes to our processing or applicable requirements make that necessary.

6. Sharing and service providers

Lifeline does not sell personal information. We may share or make information available only where reasonably necessary, including with:

• Hosting, infrastructure, email, form-processing or other technology providers acting on our behalf.
• Banks and financial institutions involved in donation processing or reconciliation.
• Authorised professional advisers such as auditors, accountants or legal advisers where necessary.
• Government, regulatory, law-enforcement or judicial authorities where disclosure is required or permitted by applicable law.

Where service providers process information for Lifeline, we expect them to protect it and use it only for the services they provide to us.

7. International processing

Some technology providers may store or process information outside Sri Lanka. Where this occurs, Lifeline will take reasonable steps to use providers and arrangements that protect personal information in a manner appropriate to the applicable legal requirements.

8. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain appropriate organisational records, meet legal, accounting or regulatory requirements, resolve disputes, or protect legitimate organisational interests.

When information is no longer required, we aim to delete, anonymise or securely dispose of it as appropriate.

9. Security

We use reasonable technical and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No website or electronic transmission can be guaranteed to be completely secure, so we do not promise absolute security.

10. Cookies and analytics

The website may use cookies or similar browser storage where needed for core functionality, security or user experience. If Lifeline introduces non-essential analytics, measurement or similar technologies, this notice and any required consent controls should be updated before those technologies are relied upon.

We do not state that advertising or behavioural tracking is used unless and until such technology is actually introduced and disclosed.

11. Your choices and privacy requests

Depending on the rights and obligations applicable at the time of your request, you may be able to ask us to access, correct, delete, restrict or otherwise address personal information relating to you, or to raise a concern about how it is handled.

Email info@lifelinesrilanka.org with “Privacy Request” in the subject line. We may need to verify your identity before acting on a request. We will respond as promptly as reasonably possible and within any legally applicable period.

Where applicable, you may also contact Sri Lanka's Data Protection Authority about concerns regarding personal-data processing.

12. Children and vulnerable persons

Lifeline's humanitarian work may involve children or vulnerable people, but this website is not designed to invite children to submit personal information independently. Where personal information about children or vulnerable persons is handled in connection with programme activities, Lifeline should apply appropriate safeguarding, consent and data-protection procedures outside the ordinary public website flow.

13. Contact and policy changes

For privacy questions or requests, contact Lifeline Association:

We may update this notice when our services, technology or legal obligations change. The date at the top of this page shows the latest published version. Where a change is material, we will take reasonable steps to make it noticeable to affected users where appropriate.