Privacypolicy.

This website (www.sabc.lk) is operated by Metropolitan Digital Bureau (Pvt) Ltd (“MDB”, “we”, “us”), together with our brands. We are the controller responsible for the personal information described in this policy.

We follow the Sri Lanka Personal Data Protection Act, No. 9 of 2022, and, where they apply to visitors from those regions, the EU and UK General Data Protection Regulations.

Information you give us

This website has no sign-up or contact forms. When you contact us by WhatsApp, phone, email or social media, we receive the details you choose to share — such as your name, phone number, email address and the content of your message, including event dates, budgets or preferences.

Information collected with your consent

Only if you accept Analytics or Performance cookies, we collect usage information: pages viewed, time on page, how far you scroll, which page sections you see, buttons and links you click (for example “Chat on WhatsApp”), the site that referred you, your device type, browser, operating system, and approximate location (country and city, derived from your IP address — we don’t store the IP address itself in our own analytics). A random identifier is stored on your device so we can tell new visits from returning ones; it is not linked to your name or contact details.

Information collected automatically

Like every website, our hosting provider processes technical data needed to deliver pages and keep the site secure — such as IP address, browser type, requested page and time — in short-lived server and security logs.

Staff accounts

Our content-management area is used only by authorised staff, who sign in with an email address and password managed by Firebase Authentication.

We only use personal information when we have a lawful reason to do so:

We never sell your personal information, never use it for advertising, and never make decisions about you based solely on automated processing.

We use essential storage to run the site and, only with your permission, analytics, performance and map cookies. Nothing optional loads until you choose. Our Cookie policy lists every cookie and storage item, who sets it and how long it lasts.

Change your cookie settings

We share personal information only with trusted service providers who process it on our behalf under contract, and only as much as they need:

When you contact us through WhatsApp, Facebook or Instagram, those services process your messages under their own privacy policies. We may also disclose information where required by law, or to protect our rights, our customers or the public.

A full list of the technology behind this website, with links to each provider’s terms, is in our Terms of use.

Our service providers may store or process information outside Sri Lanka, including in the United States and the European Union. Where this happens, we rely on the providers’ data-processing terms and recognised safeguards (such as Standard Contractual Clauses) to make sure your information stays protected to the standard required by law.

• Enquiries and messages: for as long as needed to respond and deliver any service, then up to 7 years where tax or accounting law requires booking records.
• Our own analytics: individual visit records are kept for up to 90 days, then deleted. After that we keep only anonymous daily totals that can’t identify anyone.
• Google Analytics: event data is kept for up to 14 months under our Google Analytics settings.
• Security logs: kept by our hosting provider for a short period, typically days to weeks.
• Your cookie choice: 12 months, after which we ask again.

The website is served only over encrypted HTTPS connections. Our database is protected by access rules so that visitor statistics can be written but only authorised staff can read them, and staff accounts are individually authenticated. No system is perfectly secure, but we review our safeguards regularly and will notify you and the authorities of a breach where the law requires.

Depending on where you live, you have the right to:

• access the personal information we hold about you and receive a copy;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information, or to restrict how we use it;
• object to processing based on our legitimate interests;
• withdraw your consent at any time — for cookies, through Cookie settings in the footer;
• ask for your information in a portable format, where applicable;
• complain to a data-protection authority — in Sri Lanka, the Data Protection Authority of Sri Lanka.

To use any of these rights, contact us using the details below. We will reply within the time the law allows (normally within 21 working days) and may need to confirm your identity first.

This website is intended for adults planning events and services. We do not knowingly collect personal information from children under 16. If you believe a child has shared information with us, please contact us and we will delete it.

Our site links to other websites and apps, such as WhatsApp, Facebook, Instagram and Google Maps. We are not responsible for their privacy practices, so please read their policies when you visit them.

We may update this policy when our services or the law change. The “Last updated” date at the top shows the latest version. If the changes affect the cookies we use, we will ask for your consent again.

Questions about this policy or your personal information? We’re happy to help.