Privacy Policy

Effective Date: August 18, 2026

Last Updated: August 18, 2026

Biodiversity Sri Lanka (BSL) (“we,” “us,” or “our”) is a non-profit organisation registered in Sri Lanka. We are committed to protecting the privacy and personal data of our members, website visitors, partners, and users of our website, www.biodiversitysrilanka.org This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or interact with our services, in accordance with the Personal Data Protection Act (PDPA), No. 9 of 2022 of Sri Lanka.

1. Information We Collect

We may collect personal and non-personal data in the following ways:

A. Information You Provide Directly



• Membership & Registration Details: Name, email address, corporate entity name, job title, contact number, and address when you apply for membership, register for events, or subscribe to newsletters.
• Inquiries & Feedback: Personal details submitted via contact forms, inquiries, or direct email communications.
• Project & Event Participation: Information provided when participating in BSL programs, ecosystem restoration initiatives, webinars, or workshops.


B. Information Collected Automatically



• Log & Technical Data: IP address, browser type, operating system, referring URLs, and access times.
• Cookies and Tracking Technologies: Information gathered via cookies to optimise website navigation, analyse web traffic, and improve user experience.

2. How We Use Your Information

We process your personal data for legitimate organisational purposes, including:

• Platform Operations:Managing memberships, processing applications, and maintaining user records.
• Communication:Sending technical publications, event invitations, updates on biodiversity initiatives, and newsletters
• Event & Project Management:Coordinating workshops, webinars, and field activities.
• Website Improvement:Monitoring usage patterns and analytics to optimise website navigation and platform performance.
• Legal Compliance:Fulfilling statutory requirements under Sri Lankan law or regulatory mandates.

3. Legal Basis for Processing Data

Under the Personal Data Protection Act (PDPA) No. 9 of 2022, we process your personal data under the following legal bases:

• Consent:When you explicitly provide consent (e.g., subscribing to communications or submitting web forms).
• Contractual/Membership Obligations:To fulfill our responsibilities regarding your membership or participation in BSL initiatives.
• Legitimate Interests:To advance our core objectives of driving corporate environmental conservation and biodiversity action in Sri Lanka.

4. Disclosure and Sharing of Information

We do not sell, rent, or trade your personal data. We may share your information only under the following conditions:

• Secretariat & Technical Partners:Authorised staff at the BSL Secretariat (housed at the Ceylon Chamber of Commerce) and technical partners directly involved in implementing collaborative projects.
• Third-Party Service Providers:Trusted IT vendors, web hosting services, and email platform providers operating under strict confidentiality agreements.
• Legal Obligations:If required by law, court order, or government authority in Sri Lanka.

5. Cookies and Web Analytics

Our website uses cookies to enhance user experience. You can choose to accept or decline cookies through your browser settings. Disabling cookies may affect the functional capability of certain website features.

6. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal data against unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, satisfy legal or audit requirements, or until you request the removal of your data.

8. Your Rights Under Sri Lanka’s PDPA

Subject to statutory provisions, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request the rectification of inaccurate or incomplete personal data.
• Right to Withdraw Consent: Withdraw your consent to data processing at any time.
• Right to Object/Erasure: Request the limitation or deletion of your personal data under specific statutory conditions.

To exercise any of these rights, please contact us using the details provided below.

9. Third-Party Links

Our website may contain links to external partner websites, government bodies, or international agencies. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party site you visit.

10. Updates to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Updated" date. Continued use of our website following any updates indicates your acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact the BSL Secretariat:Biodiversity Sri Lanka (BSL)
Secretariat: Housed at the Ceylon Chamber of Commerce
Address: No. 110/1/1 Park Road, Colombo, Sri Lanka.
Email: info@biodiversitysrilanka.org
Phone: +94 112 314 454