1. Introduction
We at Gazette.lk (“we”, “us”, “our”) respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share and protect your personal information when you visit https://www.gazette.lk (the “Site”) and your rights under applicable law.
2. Data Controller
The data controller for the purposes of this Privacy Policy is the operator of Gazette.lk (contact: admin@gazette.lk).
3. Personal Data We Collect
We may collect the following categories of personal data:
- Technical/log‑file data (e.g., IP address, browser type, ISP, date/time stamp, referring/exit pages) when you visit the Site.
- Any information you voluntarily provide (such as when you contact us by email).
4. How We Use Your Personal Data
We use your personal data for the following purposes:
- To monitor and administer the Site, analyze trends and traffic, and track movements around the Site.
- To respond to your inquiries and communicate with you.
- For legal compliance and to protect our rights.
5. Lawfulness of Processing
Under the Personal Data Protection Act No. 9 of 2022, we process your personal data lawfully on one or more of the following bases:
- Your consent (where required).
- Compliance with a legal obligation or a legitimate interest, so long as your rights are not overridden.
6. Data Retention
We will retain your personal data only for as long as necessary for the purposes stated in this policy, or as required by law. After that, we will securely delete or anonymize the data.
7. Cookies and Tracking Technologies
Like many websites, the Site uses log‑files and may use cookies or other tracking technologies to understand user behaviour, provide personalised content, and improve the Site’s functionality.
8. Data Security
We implement appropriate technical and organisational measures to protect personal data from unauthorized or unlawful processing, accidental loss, destruction or damage in accordance with Section 10 of the PDPA.
9. Sharing Your Personal Data
We will not sell your personal data to third parties. We may share data with trusted service providers who process data on our behalf, under appropriate confidentiality and security obligations.
10. International Transfers
If your personal data is transferred outside Sri Lanka, we will ensure that appropriate safeguards are in place (for example, contractual arrangements) in accordance with the PDPA.
11. Your Rights
Under the PDPA you have the following rights:
- To access your personal data that we hold.
- To rectify or complete inaccurate or incomplete data.
- To erase your data under certain conditions.
- To withdraw consent and object to processing where applicable.
- To complain to the designated authority.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the revised version on this Site with the date of last update.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at admin@gazette.lk.
Last updated: 19 November 2025