Privacy Policy

Effective Date: 14/10/2025
Organisation: Association for Health and Counselling (AHC) – Shanthiham
Address: Jaffna, Northern Province, Sri Lanka
Website: https://shanthiham.org

1. Introduction

Shanthiham (Association for Health and Counselling – AHC) is a non-governmental organisation based in Jaffna, Sri Lanka, dedicated to mental health, psychosocial wellbeing, and community development.

We are committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the Sri Lanka Personal Data Protection Act, No. 9 of 2022, and other applicable laws.

By visiting our website or engaging with us online or offline, you agree to the terms of this Privacy Policy.

2. Information We Collect

We may collect both personal and non-personal information depending on your interaction with us.

a. Information You Provide Directly

• Name
• Email address
• Telephone number
• Postal address (if provided)
• Details submitted through contact, feedback, or registration forms
• Information shared during volunteer, training, or donation activities

b. Information Collected Automatically

• IP address
• Browser type and version
• Device information
• Operating system and language settings
• Pages visited and time spent on the website
• Referring and exit pages

c. Cookies and Tracking

We may use cookies or similar technologies to enhance user experience and gather analytics. You can disable cookies through your browser settings.

3. Purpose of Collecting Your Data

We use your data only for legitimate and necessary purposes, including:

• Responding to your enquiries and requests
• Registering participants for training, counselling, or community events
• Processing donations and maintaining donor records
• Sending newsletters and updates (only with consent)
• Managing volunteer communication
• Improving our website and services
• Complying with legal or regulatory requirements

4. Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds:

• Your consent
• Fulfilment of a service or contract
• Compliance with legal obligations
• Legitimate interests pursued by Shanthiham (such as service improvement or fraud prevention)

5. Sharing and Disclosure of Information

We do not sell, trade, or rent your personal data. However, data may be shared in limited circumstances with:

• Service providers who manage hosting, communications, or payment processing, under confidentiality agreements
• Regulatory authorities or law enforcement when required by law
• Auditors or consultants assisting in organisational operations, bound by confidentiality

All data sharing complies with applicable privacy and data-protection laws.

6. Data Retention

Personal information is retained only for as long as necessary to fulfil its purpose or as required by law.
When data is no longer needed, it is securely deleted, anonymised, or archived according to organisational policy.

7. Data Protection and Security

We maintain strict security measures to safeguard your data from:

• Unauthorised access
• Disclosure, alteration, or loss
• Accidental destruction

Our website is hosted on secure servers and regularly monitored. However, internet-based communication is not entirely risk-free, and while we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights

In line with the Sri Lanka Personal Data Protection Act, you have the right to:

• Access the personal data we hold about you
• Request corrections or updates to inaccurate information
• Request deletion of your personal data
• Withdraw consent for specific processing activities
• Restrict or object to certain data processing
• Request a copy of your data in a portable format

We respect and uphold these rights, and will act promptly upon valid requests.

9. International Data Transfers

Although we mainly process data within Sri Lanka, certain third-party service providers (such as hosting or email platforms) may process information outside the country.
When this occurs, we ensure that appropriate safeguards and privacy protections are in place.

10. Links to External Websites

Our website may include links to other organisations’ websites for informational purposes.
Shanthiham is not responsible for the content or privacy practices of these external websites. We encourage you to read their privacy policies.

11. Children’s Privacy

Shanthiham’s services are intended for adults and not directed at children under 13.
We do not knowingly collect personal data from children. If such data is found, it will be deleted immediately.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or technical changes.
When changes are made, the new effective date will be displayed at the top of this page. We encourage you to review this policy periodically for updates.