Privacy Policy

Lavona Digital ("Lavona", "we", "us", "our") is a digital marketing agency operated by [CONFIRM: registered business name and BR number], based in [CONFIRM: town], Sri Lanka.

For this Privacy Policy, we are the party that decides how your personal data is used (the "controller").

Contact for privacy questions: hello@lavonadigital.com [CONFIRM: use a domain email, not Gmail]
Address: [CONFIRM: registered business address], Sri Lanka

This policy applies to the website lavonadigital.com (the "Website") and to our communications with prospective clients, clients and subscribers.

Information you give us

• Contact form: your name, email address, company name and the message you write.
• Strategy call bookings: your name, email address, company, and any details you share when booking [CONFIRM: tool used, for example Calendly or Google Calendar].
• Newsletter: your email address (and name, if you give it).
• Emails and calls: whatever you choose to tell us when you contact us directly.

Information collected automatically

When you visit the Website, we and our providers may collect your IP address, browser and device type, operating system, language, referring website, pages viewed, time spent and approximate location (city or country level). This is collected through cookies and similar technologies. See our Cookie Policy for details.

We do not intentionally collect sensitive personal data (such as health data, religion or political opinions). Please do not send it to us.

Where the Sri Lanka Personal Data Protection Act, No. 9 of 2022 ("PDPA") applies, we process personal data in line with its principles, including lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.

We use cookies and similar technologies for analytics [CONFIRM: and advertising measurement]. Non-essential cookies are only set after you give consent through our cookie banner. You can change your choice at any time. Please read our Cookie Policy, or change your cookie settings.

We do not sell your personal data. We share it only with:

• Service providers who act on our behalf, such as website hosting ([CONFIRM: Vercel Inc.]), analytics ([CONFIRM: Google LLC, Google Analytics 4]), email and newsletter tools ([CONFIRM: provider]), scheduling tools ([CONFIRM]), and customer relationship management or file storage tools ([CONFIRM: for example Google Workspace]).
• Professional advisers, such as accountants and lawyers, where needed.
• Authorities, where we are required to by law or to protect our legal rights.
• A successor business, if Lavona is sold or restructured. We would tell you if your data became subject to a different policy.

These providers may only use your data to provide services to us and must protect it.

We are based in Sri Lanka, and some of our providers store data in other countries, including the United States and the European Union. When we transfer personal data across borders, we take steps to make sure it stays protected, such as using providers with recognised safeguards (for example standard contractual clauses) and limiting the data we share.

After this, we delete or anonymise the data.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Ask us to delete your data
• Restrict or object to certain processing, including direct marketing
• Withdraw your consent at any time (this does not affect earlier processing)
• Receive your data in a portable format
• Not be subject to decisions based solely on automated processing that significantly affect you

To use any of these rights, email hello@lavonadigital.com. We may need to verify your identity first, and we will respond within the time required by applicable law (usually within one month).

You can also complain to a data protection authority. In Sri Lanka this is the Data Protection Authority established under the PDPA. If you are in the EU or UK, you can contact your local supervisory authority.

You can unsubscribe from marketing emails at any time using the link in each email or by contacting us. We will still send service messages related to any work we do for you.

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and trusted providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Website is not directed at children under 18, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

The Website may link to third-party websites and social platforms. We are not responsible for their privacy practices. Please read their policies.

We may update this policy from time to time. The "Last updated" date at the top shows the latest version. If we make significant changes, we will highlight them on the Website.

Lavona Digital
[CONFIRM: address], Sri Lanka
Email: hello@lavonadigital.com