This Privacy Policy explains how Amila Welengoda (“I”, “me”, “my”) collects, uses, and protects information about you when you visit welengoda.com or contact me about my services. I take your privacy seriously and am committed to handling your data responsibly and transparently.
Who we are
The data controller for this website is:
Data we collect
Information you provide directly
When you submit the contact form on this website, I collect:
- First and last name
- Email address
- Company name or website (optional)
- The service you are interested in
- Any message or information you choose to include
Information collected automatically
When you visit this website, certain technical information may be collected automatically, including:
- Your IP address and approximate geographic location
- Browser type and version
- Operating system
- Pages visited and time spent on the site
- Referring URL (the page that brought you here)
- Date and time of your visit
This information is collected via cookies and similar technologies, and through third-party analytics services. See Section 5 for full details on cookies.
Information I do not collect
I do not collect payment card details, government identification numbers, or any special category data (such as health, religious, or political information) through this website.
How we use your data
I use the information collected for the following purposes:
- Responding to enquiries — to reply to messages you send via the contact form and discuss potential work together
- Providing services — to deliver digital marketing consultancy services you have engaged me for
- Service improvement — to understand how visitors use this website so I can improve its content and usability
- Legal obligations — to comply with applicable laws and regulations
- Legitimate business administration — including record-keeping, invoicing, and general business correspondence
I will never sell your personal data to third parties, use it for unsolicited marketing without your consent, or share it with anyone who does not need it to provide or improve the services outlined above.
Legal basis
Under the UK General Data Protection Regulation (UK GDPR), I rely on the following legal bases for processing your personal data:
Legitimate interests
Processing enquiry data to respond to potential clients and operate my consultancy business. I have assessed that this does not override your rights and freedoms.
Contract performance
Processing data necessary to fulfil a contract with you, or to take steps at your request before entering into a contract.
Consent
Where you have explicitly consented — for example, by accepting cookies when prompted on this website. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Legal obligation
Where processing is necessary to comply with a legal obligation under UK or EU law.
Cookies
This website uses cookies — small text files placed on your device to help the site function and to understand how it is used. You are asked for your consent to non-essential cookies when you first visit the site.
Essential cookies
These are necessary for the website to function and cannot be disabled. They include cookies that remember your cookie consent preference so you are not asked repeatedly.
Analytics cookies
If you accept cookies, analytics tools may set cookies to help me understand visitor behaviour, such as which pages are most popular and how long people spend on the site. This data is aggregated and anonymised where possible. I may use services such as Google Analytics for this purpose. Google Analytics data may be transferred to and stored on servers in the United States, but Google is certified under the EU-US Data Privacy Framework and appropriate safeguards are in place.
Managing cookies
You can control and delete cookies through your browser settings. Disabling cookies may affect some functionality of this website. You can also withdraw your consent at any time by clearing your browser cookies, which will reset your preference the next time you visit.
For more information on managing cookies, visit aboutcookies.org.
Third parties
I use a small number of trusted third-party services to operate this website and deliver my services. Where these services process your personal data, they do so as data processors acting on my instructions.
Formspree
Contact form submissions are processed by Formspree (formspree.io), a US-based form handling service. When you submit the contact form, your data is transmitted to Formspree’s servers and forwarded to my email address. Formspree operates under appropriate data transfer safeguards. You can review their privacy policy at formspree.io/legal/privacy-policy.
Google Fonts
This website loads fonts from Google Fonts. When your browser requests a font, your IP address is sent to Google’s servers. Google may use this data in accordance with their privacy policy at policies.google.com/privacy.
Google Analytics (if cookies accepted)
If you consent to analytics cookies, I may use Google Analytics to understand site traffic patterns. Google Analytics uses cookies and may transfer data to the United States. You can opt out of Google Analytics across all websites by installing the Google Analytics opt-out browser add-on.
This website contains a link to my LinkedIn profile. Clicking it will take you to LinkedIn’s platform, which is governed by LinkedIn’s own privacy policy.
I do not sell, rent, or trade your personal data with any third parties for their own marketing purposes.
Data retention
I retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law:
- Enquiry data — retained for up to 2 years from the date of your enquiry, or the end of any subsequent working relationship, whichever is later
- Client records — retained for 6 years after the end of our working relationship, in line with UK tax and accounting requirements
- Analytics data — retained in accordance with the third-party service’s own retention settings (typically 14 months for Google Analytics)
- Cookie consent records — stored in your browser’s local storage until you clear it
When data is no longer required, it is securely deleted or anonymised.
Your rights
Under UK GDPR, you have the following rights regarding your personal data. To exercise any of these rights, please contact me at amila@welengoda.com. I will respond within one calendar month.
You also have the right to complain directly to the UK Information Commissioner’s Office (ICO) at any time: ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.
Security
I take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:
- HTTPS encryption on this website (SSL/TLS)
- Using reputable, security-conscious third-party service providers
- Limiting access to personal data to only those who need it
- Regular review of data practices and access controls
No method of transmission over the internet or electronic storage is 100% secure. While I strive to use commercially acceptable means to protect your data, I cannot guarantee its absolute security. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, I will notify you and the ICO as required by law.
Children
This website is directed at business professionals and is not intended for individuals under the age of 18. I do not knowingly collect personal data from children. If you believe a child has submitted personal data through this website, please contact me immediately at amila@welengoda.com and I will take steps to delete it promptly.
Changes to this policy
I may update this Privacy Policy from time to time to reflect changes in my practices, services, or legal requirements. When I make material changes, I will update the “Last updated” date at the top of this page.
I encourage you to review this page periodically. Continued use of this website following the posting of any changes constitutes acceptance of those changes.
Previous versions of this policy can be requested by emailing amila@welengoda.com.
Contact us
If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how your data is being handled, please get in touch:
If you are not satisfied with my response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection: ico.org.uk