Last updated: September 11, 2025
This Privacy Policy explains how we collect, use, disclose, and protect personal information when
you use our website and related services. By using the site you accept the practices described
in this policy.
1. Controller
For the purposes of applicable data protection laws, the data controller is the operator of this
website. If you have questions, requests, or complaints about how your data is handled, please
contact us at infothebookmarkedlife@gmail.com.
2. Definitions
Personal data means any information relating to an identified or identifiable
person. Processing means any operation performed on personal data (collecting,
storing, using, sharing, deleting).
3. Information we collect
- Telegram bot interaction data — temporary, anonymous identifiers and
message content needed to fulfill the request. We do not link this identifier to other
personal data or retain it beyond the time necessary to fulfill the request, unless you
explicitly provide additional details.
- Voluntary submissions — information you supply through third-party forms
(e.g., contact forms, donations). These third parties may collect and store your data under
their own policies.
- Cookies & similar technologies — this site does not use analytics cookies
for tracking by default. If we introduce cookies in future, we will disclose them and
provide an opt-out mechanism.
4. Legal bases for processing
Where applicable (for users covered by laws such as the EU GDPR), we rely on the following lawful
bases:
- Consent — where you voluntarily provide personal data (e.g., contact forms,
donations).
- Contractual necessity — to perform services you requested (e.g., fulfill a
donation or contact request).
- Legitimate interests — for security, abuse prevention, and basic site
operation, balanced against user rights.
- Legal obligation — where required by law to preserve records or respond to
legal process.
5. Data subject rights
Depending on your jurisdiction, you may have some or all of the following rights with respect to
your personal data:
- Right to access the personal data we hold about you.
- Right to rectification (fix inaccurate data).
- Right to erasure (delete) where legal grounds permit.
- Right to restriction of processing.
- Right to data portability where technically feasible.
- Right to object to processing based on legitimate interests or direct marketing.
To exercise any right, contact us at infothebookmarkedlife@gmail.com. We will
respond within the shorter of the timeframes required by applicable law or within 30 calendar
days. If we need more time, we will inform you and explain why.
6. Children’s privacy
The site is not intended for children under 13. We do not knowingly collect personal information
from minors under 13. If you believe we have collected such information, contact us to request
deletion. Note: U.S. law (COPPA) treats under-13s as a protected group and requires parental
consent for data collection in many cases.
7. Sharing & third parties
We do not sell personal data. We may share data with third-party service providers who perform
services on our behalf (hosting, forms, donation processors). Those providers are contractually
bound to handle data securely and only for purposes we authorize.
8. International transfers
If personal data are transferred out of your jurisdiction (e.g., servers or processors outside
Sri Lanka or the EU), we will protect such transfers using lawful mechanisms (adequacy decision,
standard contractual clauses or other safeguards) as required by applicable law.
9. Data retention
We retain personal data only as long as necessary for the purpose collected, statutory
obligations, or to resolve disputes. Typical retention periods:
- Contact form submissions: up to 2 years unless you request deletion.
- Donation records (for tax/financial recordkeeping): up to 7 years or as required by law.
10. Security
We use reasonable technical and organizational measures to protect data (HTTPS, limited access,
regular backups). No system is 100% secure; if a breach occurs we will follow applicable law for
notification and remediation.
11. Breach notification
If a personal data breach occurs that poses a risk to individuals' rights and freedoms, we will
promptly notify the relevant supervisory authority, and where possible, within the timelines
required by applicable laws (for instance, within 72 hours under GDPR and in accordance with the
notification requirements of Sri Lanka’s PDPA). We will also inform affected individuals when
mandated by law.
12. Your choices and opt-outs
You may opt out of future communications or withdraw consents by contacting us at infothebookmarkedlife@gmail.com. For
third-party services (payment providers, Google Forms, Buy Me a Coffee) please review and use
their opt-out settings.
13. Changes to this policy
We may update this policy. The “Last updated” date will show the effective date of the current
version.
14. Supervisory authority & complaints
If you are in Sri Lanka, you may contact the Personal Data Protection Authority (or other
designated supervisory authority) to lodge a complaint. If you are in the EU, you may contact
your local data protection authority. You retain the right to seek judicial remedies where
permitted by law.
15. Contact
Questions, requests or concerns: infothebookmarkedlife@gmail.com.