Privacy & Cookie Policy – Lanka Book of Records

Last Revised: July 11th, 2025

Startup Sri (Private) Limited, including its brand Lanka Book of Records (“Startup Sri,” “LBR,” “we,” “us,” or “our”), is committed to protecting your privacy and ensuring the security of your personal data. This Privacy & Cookie Policy explains how we collect, use, process, disclose, and protect your personal information when you visit our website https://www.startupsri.com (the “Website”), use our services, or interact with us.

We comply with the Personal Data Protection Act, No. 9 of 2022 (PDPA) of Sri Lanka and strive to align with international best practices regarding data protection.

Definitions

Personal Data: Any information relating to an identified or identifiable natural person (”data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Special Categories of Personal Data: Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, genetic data, biometric data, data concerning health or a natural person’s sex life or sexual orientation, personal data in relation to offences, criminal proceedings and convictions.
Processing: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Controller: The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. (In this policy, Startup Sri is the Controller).
Processor: A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the Controller.
Cookies: Small data files stored on your device (computer, tablet, mobile) by your web browser when you visit a website.

Information We Collect

We collect various types of information for different purposes to provide and improve our services to you, primarily through your interactions with startupsri.com and the Lanka Book of Records platform.

2.1. Personal Data You Provide Directly to Us: This includes information you voluntarily provide when you:

Create an account (e.g., name, email address, phone number, password).
Apply for a record with Lanka Book of Records (e.g., full name, contact details, address, date of birth, nationality, specific details about your record attempt, supporting documentation like photos/videos).
Register for events, workshops, or programs (e.g., name, contact information, payment details, dietary restrictions).
Make a purchase or payment (e.g., billing address, credit card details – though processed via secure third-party payment gateways, we do not store full card numbers).
Subscribe to newsletters or marketing communications (e.g., email address).
Contact us for support, inquiries, or feedback (e.g., name, email, details of your inquiry).
Participate in surveys, contests, or promotions.

2.2. Special Categories of Personal Data: In very limited circumstances, primarily for Lanka Book of Records applications, you may voluntarily provide Special Categories of Personal Data if it is directly relevant and necessary for your record attempt (e.g., health information for endurance records, or biometric data if a record is specifically based on a unique biological attribute). We will only collect such data with your explicit consent and where absolutely necessary for the purpose of verifying your record.

2.3. Information We Collect Automatically (Usage Data & Cookies): When you access or use our Website, we may automatically collect certain information about your device and usage patterns. This may include:

Log Data: Your IP address, browser type and version, operating system, pages visited, time and date of your visit, time spent on pages, referral sources, and other statistics.
Device Information: Device type, unique device identifiers, mobile network information.
Location Data: General location derived from your IP address or, with your consent, precise location data from your mobile device.
Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies. (See Section 6 for detailed Cookie Policy).

How We Use Your Information

We use the collected information for various purposes, primarily based on the necessity for providing our services, fulfilling contractual obligations, our legitimate interests, or your explicit consent.

To Provide and Maintain Our Services:
- To operate and deliver the Website and its functionalities.
- To process your Lanka Book of Records applications, verify records, issue certificates, and publish record achievements.
- To manage your account and provide customer support.
- To process transactions, registrations, and payments.
For Communication:
- To send you service-related notifications, updates, and confirmations (e.g., application status, event details).
- To respond to your inquiries and feedback.
- To send you newsletters, marketing communications, and promotional offers, where you have consented or where permitted by law.
For Improvement and Personalization:
- To analyze Website usage and identify trends to improve our services and user experience.
- To personalize your experience on the Website (e.g., remembering preferences).
- To develop new features and offerings.
For Safety and Security:
- To detect, prevent, and address technical issues, fraud, or other malicious activities.
- To maintain the security and integrity of our Website and data.
- To enforce our Terms of Service and other policies.
For Legal and Regulatory Compliance:
- To comply with applicable laws, regulations, and legal processes (e.g., PDPA).
- To respond to lawful requests from public authorities.
- To establish, exercise, or defend legal claims.

How We Share Your Information

We may share your information with third parties in the following circumstances:

With Service Providers: We engage trusted third-party companies and individuals to facilitate our services, perform service-related tasks on our behalf, or assist us in analyzing how our services are used (e.g., payment processors, hosting providers, analytics providers, email service providers, professional adjudicators for LBR). These third parties are obligated to protect your data and are only authorized to use it as necessary to provide the services we’ve requested.
For Lanka Book of Records Publication: If your record attempt is successful and verified, we may publish your name, record details, and related media (photos, videos) on the Lanka Book of Records website, in LBR publications (digital or print), and in associated promotional materials. This is fundamental to the nature of LBR’s service.
With Affiliates: We may share information with our current or future affiliates (companies under common ownership or control with Startup Sri) for purposes consistent with this Privacy Policy.
For Business Transfers: In the event of a merger, acquisition, asset sale, or other business transaction involving all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Website of any such change in ownership or control of your personal data.
For Legal Reasons: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
With Your Consent: We may share your information with any other third party with your explicit consent.

We do not sell your personal data to third parties for their marketing purposes.

Data Security

We implement reasonable and appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

Using secure servers and data centers.
Implementing encryption (SSL/TLS) for data in transit (e.g., when you submit forms or make payments).
Restricting access to personal data to authorized personnel only, who are bound by confidentiality obligations.
Regularly reviewing our security practices.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

Cookie Policy

Our Website uses cookies and similar tracking technologies to enhance your Browse experience, analyze site usage, and support our services.

6.1. What are Cookies? Cookies are small text files that are downloaded to your device when you visit a website. They allow the website to remember your actions and preferences over time.

6.2. How We Use Cookies: We use cookies for various purposes, including:

Strictly Necessary Cookies: Essential for the Website to function correctly (e.g., enabling secure login, remembering items in a shopping cart). These do not require your consent.
Analytical/Performance Cookies: Allow us to collect information about how visitors use our Website (e.g., pages visited, time spent on site, referral sources). This helps us improve the Website’s performance and design.
Functionality Cookies: Remember your choices and preferences (e.g., language selection, region) to provide a more personalized experience.
Targeting/Advertising Cookies: Used to deliver advertisements more relevant to you and your interests, and to measure the effectiveness of advertising campaigns. These may be placed by third-party advertising networks with our permission.

6.3. Third-Party Cookies: Our Website may also use cookies placed by third parties (e.g., Google Analytics, social media platforms, embedded content from YouTube). These third parties have their own privacy and cookie policies, which we recommend you review.

6.4. Your Choices Regarding Cookies (Cookie Consent): When you first visit our Website, you will be presented with a cookie consent banner. This banner will provide you with options to:

Accept All Cookies: Consent to the use of all types of cookies.
Reject All Non-Essential Cookies: Only allow strictly necessary cookies.
Customize Preferences: Select which categories of cookies you wish to allow (e.g., only analytical, not targeting).

You can also manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and features of our Website. For detailed instructions on managing cookies in your browser, refer to your browser’s help menu.

Your Data Protection Rights (PDPA & General Rights)

Under the Personal Data Protection Act (PDPA) of Sri Lanka and general data protection principles, you have certain rights concerning your personal data:

Right of Access: You have the right to request access to the personal data we hold about you.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure (“Right to be Forgotten”): You have the right to request the deletion of your personal data under certain circumstances (e.g., if the data is no longer necessary for the purposes for which it was collected).
Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain conditions (e.g., if you contest the accuracy of the data).
Right to Object to Processing: You have the right to object to our processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Data Portability: Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
Right to Complain: You have the right to lodge a complaint with the Data Protection Authority of Sri Lanka if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us using the details provided in Section 9. We may require you to verify your identity before responding to such requests.

Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

For Lanka Book of Records, data pertaining to verified records (name, record details, supporting media for publication) will be retained indefinitely as part of the permanent record archive. Unsuccessful application data will be retained for a period necessary for dispute resolution, analytical purposes, or as required by law, after which it will be securely deleted or anonymized.

Children’s Privacy

Our Website and services are generally not directed at individuals under the age of 18. We do not knowingly collect personal data from children under 18 without parental consent, particularly for Lanka Book of Records applications where a parent/guardian must consent. If we become aware that we have collected personal data from a child under 18 without appropriate consent, we will take steps to delete that information promptly.

Links to Other Websites

Our Website may contain links to other websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the Privacy Policy of every site you visit.

Changes to This Privacy & Cookie Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices, technology, legal requirements, or new services. We will notify you of any changes by posting the new policy on this page and updating the “Last Revised” date at the top. We encourage you to review this policy periodically for any changes. Changes are effective when they are posted on this page.

Contact Us

If you have any questions or concerns about this Privacy & Cookie Policy, our data practices, or wish to exercise your data protection rights, please contact us:

By Email: [email protected]
Through Our Contact Form: Contact Page
By Phone: +94 75 512 3878
By Mail: 22/B, Senarathwela, Rajawella, Digana, Kandy, Sri Lanka.

Popular Achivements