1. Scope of This Policy

This Privacy Policy governs how SUN PF collects, uses, stores, shares, and protects personal information gathered through our official website (https://suncsasrilanka.lk), donation channels, advertisement submissions, project surveys, and associated digital platforms.

2. Information We Collect

We only collect personal information that is relevant and necessary for charitable donations, advocacy initiatives, newsletter distributions, and public communications:

• Personal Identification Data: Full name, national identity number (where legally required for charitable receipting), organization name, and title.
• Contact Details: Email address, mobile telephone number, postal address, and district of residence.
• Donation & Payment Records: Donation amount, transaction reference, designated cause (e.g., SAM Children Hospital Access, Meal Enrichment, or General Nutrition Aid), and date of contribution. (Note: All credit/debit card numbers and banking details are processed through secure, PCI-DSS certified payment gateways such as PayHere and licensed commercial banks. SUN PF does not store or process your card credentials on our servers.)
• Website Interaction & Technical Data: IP address, device type, browser specifications, and usage patterns collected via essential cookies for security and analytical performance.

3. How We Use Your Information

SUN PF uses the collected personal data strictly for lawful, non-profit, and humanitarian purposes:

• To process and verify online charitable donations and sponsorship contributions.
• To issue official non-profit donation receipts, certificates of contribution, and tax acknowledgements.
• To communicate transparent impact reports, nutritional newsletters, emergency appeals, and project updates.
• To manage community advertising and partner banners according to ethical health standards.
• To comply with regulatory, auditing, and financial reporting standards governed by the Registrar General of Companies and Sri Lankan financial laws.
• To detect, prevent, and mitigate unauthorized transactions, fraudulent activities, or cyber threats.

4. Information Sharing & Third-Party Disclosure

SUN PF strictly adheres to an ethical privacy code: We never sell, rent, trade, or commercialize your personal information to any third party.

Information may only be disclosed under the following controlled circumstances:

• Authorized Payment Processors: Securely shared with licensed payment gateways (e.g., PayHere) and partner commercial banks solely for the purpose of authorizing transactions.
• Statutory & Legal Authorities: Disclosed only when strictly required by a court order, statutory regulation, or lawful governmental mandate under the laws of the Democratic Socialist Republic of Sri Lanka.
• Independent Auditors: Made accessible under strict confidentiality agreements to accredited non-profit chartered auditors for annual statutory financial compliance.

5. Data Security & Encryption Standards

6. Cookies & Tracking Technologies

Our website utilizes necessary and analytical cookies to ensure optimal functionality, such as keeping user sessions secure and maintaining BMI Calculator preferences. You can adjust your browser settings to refuse cookies; however, some interactive features may experience reduced functionality.

7. Your Data Rights

Under the Personal Data Protection Act (PDPA No. 9 of 2022), you are entitled to:

• Request confirmation and a copy of the personal data we hold concerning you.
• Request rectification of inaccurate, incomplete, or outdated personal information.
• Withdraw consent or request removal from our informational and newsletter mailing lists at any time.

8. Contact the Secretariat