Privacy policy

This website, ratnayake.info, is run by Isuru Sampath Ratnayake, a freelance developer based in Minuwangoda, Sri Lanka. This page explains what personal data the site collects, why, and the choices you have.

Contact form

When you send an enquiry through the contact form, the site stores:

• the details you enter: name, email address, and optionally company, service, budget and your message;
• a one-way hash of your IP address, used only to limit spam (at most 5 messages per hour). The raw IP address is not stored in the database;
• your browser's user-agent string.

I receive a copy of the enquiry by email, which also includes your IP address, the page you came from and your browser language, so I can spot spam and reply properly. I use this information only to answer your enquiry and discuss your project. It is never sold or shared for marketing.

Legal basis: taking steps at your request before a possible contract, and my legitimate interest in replying to messages and preventing abuse.

Analytics and cookies

The site uses Google Tag Manager and Google Analytics 4 to understand which pages are visited and how people find the site. Google Analytics may set cookies such as _ga and _ga_*. No advertising or remarketing is run on this site.

If you are in the European Economic Area, the United Kingdom or Switzerland, analytics cookies are off by defaultand are only used after you click “Accept”. Until then, Google may receive cookieless signals without identifiers (Google Consent Mode). Your choice is saved in your browser's local storage under the key consent.

Legal basis: your consent. You can change or withdraw it at any time: Cookie settings.

Service providers

These companies process data on my behalf to run the site:

• Amazon Web Services: hosting and content delivery (CloudFront, Lambda, S3) and sending enquiry emails (Amazon SES).
• Neon: the database that stores contact form enquiries.
• Cloudflare: DNS for the domain.
• Google: Tag Manager and Analytics (with consent where required) and my email inbox (Google Workspace).

These providers may process data outside your country, including in the United States, under their own data protection terms. Like most websites, the hosting infrastructure may keep short-term technical logs (such as IP address and requested page) for security and reliability.

How long data is kept

Enquiries are kept for as long as needed to reply and for my business records. You can ask me to delete yours at any time. Google Analytics data is kept according to the retention setting in my Google Analytics account.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict its use, to data portability, and to withdraw consent. You can also complain to your local data protection authority.

Contact

For any privacy question or request, send a message through the contact form or contact me on Upwork.