Privacy Policy – To Do Sri Lanka
Last updated: February 23, 2026
At To Do Sri Lanka, we are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This policy outlines how we collect, use, and safeguard your data when you interact with our platform.
We believe in transparency and want you to understand your rights regarding the information you share with us. By using our website, you consent to the practices described in this policy.
This Privacy Policy complies with the Sri Lanka Personal Data Protection Act No. 9 of 2022 (PDPA), the European Union General Data Protection Regulation (GDPR), and other applicable data protection laws.
1. Information We Collect
We collect information that helps us provide a better experience for our users. This includes:
- Personal Information: When you subscribe to our newsletter or use our contact forms, we may collect your name, email address, and any details you provide in your message.
- Usage Data: We automatically collect information about how you interact with our site, such as pages visited, time spent on pages, links clicked, and the type of device or browser you are using.
- Location Data: With your permission, we may collect general location information (based on your IP address) to show you relevant activities and experiences nearby.
2. How We Use Your Information
The information we collect is used solely to maintain and improve the To Do Sri Lanka platform. Specifically, we use it to:
- Provide and maintain our services, including personalized activity recommendations.
- Analyze site usage and performance to enhance user experience and content quality.
- Communicate with you regarding updates, inquiries sent via our contact forms, or newsletter content if you have opted in.
- Protect the security and integrity of our platform and prevent fraudulent activity.
3. Cookies and Tracking
We use cookies and similar tracking technologies to ensure our website works correctly and to understand how visitors interact with our content. Cookies help us remember your preferences, such as your language settings or recently viewed activities, providing a smoother browsing experience.
You have full control over these technologies. You can manage your preferences at any time through our Cookie Settings page or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of some features on our site.
4. Data Security and Third Parties
We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, or disclosure. While no method of transmission over the internet is 100% secure, we strive to use commercially acceptable means to protect your data.
We do not sell, trade, or otherwise transfer your personal information to outside parties. We only share data with trusted third-party service providers who assist us in operating our website, so long as those parties agree to keep this information confidential and comply with privacy regulations.
Our third-party service providers include:
- Google Analytics: For website analytics and usage tracking. Google's privacy policy and terms apply. You can opt out of Google Analytics tracking through your browser settings or by installing the Google Analytics Opt-out Browser Add-on.
- Google Tag Manager: For managing tracking tags and analytics scripts on our website.
- Hosting Providers: We use cloud hosting services (such as Vercel and Supabase) to store and process data securely.
5. Data Retention
We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.
Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our service, or we are legally obligated to retain this data for longer time periods.
6. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
- The right to access, update, or delete the information we have on you.
- The right of rectification if that information is inaccurate or incomplete.
- The right to object to our processing of your personal data.
- The right to withdraw consent at any time where we relied on your consent to process your personal information.
If you wish to exercise any of these rights, please contact us via our Contact page.
7. Children's Privacy
Our service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from children. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.
If we become aware that we have collected personal data from anyone under the age of 18 without verification of parental consent, we take steps to remove that information from our servers.
8. Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
9. Contact Us
If you have any questions or concerns about this Privacy Policy or how your data is handled, please reach out to us through our Contact page or email us directly at privacy@todosl.com.
Related Policies
Please also review our Terms & Conditions which govern your use of the To Do Sri Lanka platform.
