Last updated: 24 September 2026
This policy explains what personal information is collected when you visit supunsamarakoon.com or get in touch, how it is used, and the choices you have. The site is a personal portfolio. It does not sell anything, run ads or use tracking or analytics tools.
Who is responsible
Supun Samarakoon, Colombo, Sri Lanka, is responsible for this website and for the personal information described here. For any privacy question or request, email hello@supunsamarakoon.com.
What is collected
- Contact form: your name, email address, subject and message. They are sent by email to hello@supunsamarakoon.com so I can reply. You also receive an automatic confirmation email.
- Emails you send directly: whatever you include in your email.
- Spam protection: the contact form uses Cloudflare Turnstile to tell people from bots. To do this, Cloudflare processes technical information such as your IP address and browser details. See Cloudflare’s privacy policy.
- Server logs: like most websites, the hosting server keeps short-lived technical logs (IP address, browser type, pages requested, date and time) for security and to keep the site running.
No analytics, advertising or social media tracking code is used, and no profile is built about visitors.
How it is used
- To reply to your message and continue the conversation you started, for example about a role or a project.
- To protect the site and the contact form from spam and abuse.
Your information is used on the basis of your request (you chose to get in touch) and a legitimate interest in keeping the site secure. It is never sold, rented or used for marketing lists.
Other services you can choose to use
The Contact section links to services run by other companies. When you use them, their own privacy policies apply:
- Book a call: Google Calendar appointment booking (Google Privacy Policy). The details you enter when booking are shared with me so the meeting can take place.
- WhatsApp: opens a chat in WhatsApp (WhatsApp Privacy Policy).
- LinkedIn, GitHub and X: links to my profiles (each has its own privacy policy).
Nothing from these services is loaded on this site until you click the link.
Cookies
The site does not use advertising or tracking cookies. Cloudflare Turnstile may use strictly necessary technical data to protect the contact form. WordPress sets login cookies only for the site administrator.
How long it is kept
Messages and emails are kept for as long as needed to handle your enquiry and any follow-up conversation, and are deleted or reviewed after 24 months of no contact. Server logs are kept for a short period by the hosting provider and then deleted automatically. You can ask for your messages to be deleted at any time.
Where it is stored
The website host, the email provider and Cloudflare may store or process information on servers outside Sri Lanka. These are established providers that use appropriate safeguards to protect personal data.
Your rights
Under Sri Lanka’s Personal Data Protection Act No. 9 of 2022 and, where it applies, the EU/UK General Data Protection Regulation, you can ask to:
- see the personal information held about you;
- correct it if it is wrong;
- have it deleted;
- object to or limit how it is used;
- withdraw your consent where it was the basis for using your information.
Email hello@supunsamarakoon.com and you will get a reply within 30 days. If you are not happy with the answer, you can complain to the Data Protection Authority of Sri Lanka or to the data protection authority where you live.
Children
This site is meant for professional contacts and is not aimed at children. Please do not send personal information about anyone under 18.
Changes to this policy
If this policy changes, the new version will be posted on this page with a new “Last updated” date.