Privacy Policy

1. Introduction

Sustainu ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website sustainu.org.

2. Information We Collect

2.1 Information You Provide Directly

• Contact form submissions — your name, email address, mobile number, and message content.
• Newsletter sign-ups — your email address if you subscribe.

2.2 Information Collected Automatically

• Usage data — pages visited, time spent on pages, referring URLs, browser type, and device information.
• Cookies & similar technologies — see our Cookie Policy for full details.
• IP address — collected for security and analytics purposes.

3. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and provide customer support.
• Send occasional updates or newsletters if you have opted in.
• Improve and optimise our website and services.
• Monitor and analyse usage patterns to enhance user experience.
• Comply with legal obligations and protect against fraudulent or malicious activity.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent — where you have given clear consent, e.g., subscribing to communications.
• Legitimate interests — to operate and improve our website and communicate about our work.
• Legal obligation — where we are required to process data to comply with the law.

5. Data Sharing and Disclosure

We do not sell or rent your personal data. We may share it only with:

• Service providers — third-party vendors who assist us in operating the Site (e.g., email service providers, analytics platforms). These parties are bound by confidentiality agreements.
• Legal authorities — where required by law, regulation, or valid legal process.

6. Data Retention

We retain personal data only as long as necessary to fulfil the purposes set out in this policy, or as required by applicable law. Contact form submissions are retained for up to 2 years.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict our processing of your data.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@sustainu.lk.

8. Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration. However, no method of transmission over the internet is 100% secure.

9. Third-Party Links

Our Site may link to external websites. We are not responsible for their privacy practices and encourage you to review their policies.

10. Changes to This Policy

We may update this Privacy Policy periodically. The revised date at the top of this page will reflect any changes. Continued use of the Site following updates constitutes your acceptance.

11. Contact

For any privacy-related questions, contact us at info@sustainu.lk or through our Contact page.