Privacy Policy
[Review with your legal adviser] This template is a starting point written for Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, with GDPR-style rights for international visitors. It is not legal advice. Check every section, fill in the bracketed details and remove this note before relying on it.
Last updated: [Date]
Who we are
This website is operated by Moms Do Digital, part of Moms Do Business (Pvt) Ltd, a company registered in Sri Lanka (“we”, “us”). We are the controller of the personal data described in this policy. Contact: mommy@momsdodigital.com · +94 777 394 815. [Add registered address and company registration number.]
The personal data we collect
- Enquiries and contact forms: your name, business name, email, phone or WhatsApp number, country, website, industry, the services you’re interested in, your message, budget range, timeline, how you heard about us, and any file you choose to attach.
- Growth Lab tools: if you create an account, your login details and the plans, scores and briefs you choose to save. Guest use is stored only in your own browser.
- Communications: emails, WhatsApp messages and call notes when you contact us.
- Technical data: your IP address (used briefly, in hashed form, to prevent spam), browser type and the pages you visit. Analytics and marketing cookies are only used if you accept them — see our Cookie Policy.
How and why we use it
- To reply to your enquiry and provide proposals or services you ask for (taking steps at your request before entering into a contract, and performing our contract).
- To run, secure and improve our website, including preventing spam and abuse (our legitimate interests).
- To send occasional marketing emails, only if you opt in (your consent, which you can withdraw at any time).
- To meet legal, tax and accounting obligations (legal obligation).
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
Who we share it with
- Service providers who help us run the business, such as website hosting, email delivery, form spam protection, and — if we use them — CRM and project tools such as ClickUp or Zoho CRM. They may only use your data on our instructions.
- Analytics and advertising platforms (Google, Meta) only if you accept those cookies.
- Professional advisers, auditors or authorities where required by law.
Some providers may store data outside Sri Lanka. Where that happens we take steps required by the Personal Data Protection Act to make sure your data stays protected. [Review cross-border transfer wording with your adviser.]
How long we keep it
We keep enquiries for as long as needed to respond and manage our relationship with you, and then for [X months/years] unless a longer period is required by law. Uploaded files are deleted with the enquiry. Growth Lab account data is kept until you delete it or close your account.
How we protect it
Enquiries are stored privately and are visible only to authorised administrators. Uploaded files are kept in a protected folder that isn’t publicly accessible. We use secure connections, access controls and regular updates.
Your rights
Under Sri Lanka’s Personal Data Protection Act, No. 9 of 2022 — and, where they apply, laws such as the GDPR — you can ask to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- delete your data, or restrict how we use it;
- withdraw consent at any time, where we rely on consent;
- object to processing based on our legitimate interests;
- receive a copy of your data in a portable format, where applicable.
Email mommy@momsdodigital.com with “Privacy request” in the subject. We’ll respond within the time required by law. If you’re unhappy with our response, you can complain to the Data Protection Authority of Sri Lanka [check the current authority name and contact details].
Children
Our services are intended for businesses and adults. We don’t knowingly collect personal data from children.
Changes
We may update this policy. The date at the top shows when it was last changed.