This Privacy Policy explains how Dr. Madhushala Senaratne (“we”, “us”, “our”) processes personal data in accordance with the UK GDPR, Data Protection Act 2018, and applicable laws. This policy should be read alongside our Website Terms and Conditions and Service Agreements.

1. DATA CONTROLLER
We are the data controller responsible for personal data collected via this website and associated services.

2. DATA COLLECTED
We may collect:
– Identity data (name, email, contact details)
– Submitted materials and documents
– Transaction/payment data
– Technical and usage data

3. LAWFUL BASIS FOR PROCESSING
3.1 We process data under the following bases:
(a) Contract – to deliver services;
(b) Legitimate interests – business operations and communication;
(c) Legal obligation – compliance with laws.
3.2 Where required, consent will be obtained.

4. PURPOSE OF PROCESSING
Data is used for:
– Service delivery and communication;
– Record keeping;
– Legal compliance;
– Business improvement.

5. DATA STORAGE AND RETENTION
5.1 Data may be stored on secure third-party cloud systems.
5.2 Work-related data retained up to 18 months, then deleted.
5.3 Contact data retained as necessary for legitimate business purposes.

6. THIRD-PARTY PROCESSORS
We may use third-party providers including hosting, cloud storage and payment processors. We are not liable for failures outside our control.

7. DATA SUBJECT RIGHTS
You have the right to:
– Access your data (Subject Access Request);
– Rectification;
– Erasure;
– Restriction of processing;
– Data portability;
– Object to processing.
You may also lodge a complaint with the Information Commissioner’s Office (ICO).

8. DATA BREACH PROCEDURE
In the event of a data breach, we will:
– Assess and contain the breach;
– Notify affected parties where required;
– Report to the ICO where legally required.

9. INTERNATIONAL USERS
By using our services, you consent to processing under UK law regardless of location.

10. LIABILITY
We implement reasonable safeguards but are not liable for breaches caused by third-party systems.

11. CROSS-REFERENCE
This policy should be read alongside our Website Terms and service-specific agreements, which provide additional legal protections.

12. CHANGES
We reserve the right to update this policy at any time.