Privacy Policy

1. Information we collect

When you register and make an event contribution, we collect your full name, email address, mobile number (optional), and contribution amount. After payment, we receive the transaction status, PayHere payment ID, and status code from PayHere.

We do not collect or store your card number, CVV, or banking credentials - PayHere handles all payment card data directly and never shares it with us.

2. How we use your information

We use your information to process your event contribution and payment through PayHere, send you a participation confirmation email, verify and reconcile payments on our admin dashboard, and respond to support or refund inquiries.

3. Who we share it with

We share the minimum information necessary with: PayHere (to process your payment), Supabase (our database provider, to securely store your registration and transaction record), and our email delivery provider (to send your confirmation email). We do not sell or rent your personal information to third parties.

4. Data security

Contribution records are stored with row-level security enabled and are only accessible through trusted, authenticated server-side code - never directly from a browser. Every payment notification from PayHere is cryptographically verified before we trust it. Access to the admin dashboard requires authenticated login.

5. Data retention

We retain contribution records for event record-keeping, reporting, and reconciliation. You may contact us to request deletion of your personal data, subject to any legal or record-keeping obligations we may have.

6. Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at office.iai@sjp.ac.lk.

7. Cookies

We use a session cookie solely to keep administrators signed in to the admin dashboard. Participants filling out the registration and contribution form are not tracked with cookies.

8. Children's privacy

This platform is not directed at children under 13, and we do not knowingly collect personal information from them.

9. Changes to this policy

We may update this policy from time to time. The effective date above reflects the latest revision.

10. Contact

Questions about this policy? Reach us at office.iai@sjp.ac.lk.