ISHAN Foundation ("we", "us", "our") operates ishanfoundation.lk (the "Site"). This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.
1. Information We Collect
Information you provide directly:
- Name, email address, and phone number when you fill out a booking or contact form
- Number of participants and package selection when booking a Samanvaya journey
- Payment information is processed directly by PayPal — we do not collect or store your card or PayPal account details on our servers
Information collected automatically:
- Basic analytics data (pages visited, time on site, general location based on IP) if analytics tools are active on the Site
- Cookies used for site functionality and, if applicable, marketing pixels (e.g. Pinterest, Google) for advertising and verification purposes
2. How We Use Your Information
We use the information we collect to:
- Process and confirm your booking and payment
- Send you booking confirmations and related communications by email
- Respond to inquiries you send us
- Improve our Site and services
- Comply with legal and accounting obligations
3. Third-Party Services We Use
We share limited information with the following third-party services to operate the Site:
- PayPal — to process payments securely. See PayPal's own privacy policy for how they handle your payment data.
- Supabase — to securely store booking records (name, email, phone, package, payment reference).
- Resend — to send booking confirmation and notification emails.
- [PLACEHOLDER — add Google Analytics/Search Console and Pinterest here if actively used, with a short line each]
We do not sell your personal information to third parties.
4. Data Retention
We retain booking records for as long as necessary to fulfill the purpose they were collected for, and as required by applicable tax, accounting, or legal obligations. [PLACEHOLDER — client to confirm specific retention period, e.g. "7 years" or similar]
5. Your Rights
Depending on your location, you may have the right to:
- Request access to the personal information we hold about you
- Request correction or deletion of your information
- Withdraw consent for marketing communications at any time
To exercise any of these rights, contact us at [PLACEHOLDER — privacy contact email, e.g. privacy@ishanfoundation.lk]
6. Cookies
Our Site may use cookies to improve your browsing experience and, where applicable, for analytics and marketing purposes. You can control cookies through your browser settings.
7. Children's Privacy
Our Site and services are not directed at children under 18, and we do not knowingly collect personal information from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
9. Contact Us
If you have questions about this Privacy Policy, contact us at:
[PLACEHOLDER — contact email][PLACEHOLDER — physical address if applicable]