Legal & Transparency
Privacy Policy
Clear, transparent, and built to protect your rights. Here is how Ishara Bandara handles your personal data, client project materials, and privacy.
Zero Data Selling
We never monetize, rent, or trade your personal information or client project files to third parties.
Encrypted & Secure
All client inquiries, emails, and database interactions leverage SSL/TLS 256-bit encryption.
Minimalist Collection
We only collect information strictly required to communicate, quote, and deliver engineering projects.
Full User Sovereignty
You maintain complete rights to access, update, export, or permanently delete your stored data.
Overview & Scope
Welcome to Ishara Bandara (https://isharabandara.com). This Privacy Policy transparently outlines our practices regarding the collection, handling, safeguarding, and disclosure of personal data when you visit our website, utilize our software applications, contract our engineering or consulting services, or interact with us through electronic forms and messaging channels.
Operating from Bogahakumbura, Badulla, Sri Lanka and serving global clients across custom web development, software engineering, branding, and cloud consulting, we adhere strictly to the principle of privacy by design.
Information We Collect
Depending on your interaction with our site and services, we collect information across three specific categories:
A. Information You Voluntarily Provide
- Contact Details: Your name, email address, phone number, and location provided via our Contact Form or direct email (
hello@isharabandara.com). - Project Briefs: Business name, requirements, budget estimates, tech stack preferences, and timelines.
- Direct Inquiries: Any messages, feedback, or files sent via our direct WhatsApp widget or email channels.
B. Technical & Automated Information
- Device & Browser Telemetry: Browser type, operating system, display resolution, and preferred language.
- Network Identifiers: Obfuscated/truncated IP addresses and general geographical region (country/city level).
- Performance Metrics: Page response times, load errors, and Core Web Vitals to monitor website health.
C. Client Confidential Assets
When under active contract, you may provide brand style guides, Figma files, API tokens, staging database credentials, or server configurations. These are treated with strict non-disclosure confidentiality.
How We Use Your Information
Every piece of data collected has a direct, transparent purpose. We use your details solely for:
Delivering Contracted Services
Designing, coding, testing, and deploying custom software, web platforms, and mobile-friendly applications.
Client Communications
Responding to inquiries, sending project proposals, setting schedules, and delivering progress updates.
Security & Threat Mitigation
Protecting our infrastructure against malicious bots, automated attacks, and spam form submissions.
Accounting & Legal Compliance
Issuing invoices, receipts, milestone tracking, and maintaining standard business accounting records.
Third-Party Services & Integrations
To provide reliable high-performance infrastructure, we partner with industry-standard service providers. Each provider maintains strict independent compliance:
Google Cloud & Firebase
Used for secure database storage, authentication, and form message routing. Encrypted at rest and in transit.
WhatsApp (Meta Platforms)
Used for instant client chat. Clicking navigates directly to WhatsApp's end-to-end encrypted protocol.
Vercel & Global CDN Hosting
Edge network hosting providing DDoS mitigation, automated TLS certificates, and low-latency global delivery.
Data Security & Storage Measures
We adopt comprehensive industry security practices to safeguard all client communication and digital assets from unauthorized access, breach, alteration, or disclosure:
All data transferred between your browser and our servers is protected with TLS 1.3 encryption.
Database read/write operations utilize strict Firestore Security Rules and secret key isolation.
Form inputs are strictly validated and sanitized to eliminate XSS, SQL injection, and replay attacks.
Data Retention & Archiving
We do not retain personal information longer than strictly necessary:
- General Inquiries: Retained for up to 12 months for correspondence and proposal reference, after which they are safely pruned.
- Active Client Project Materials: Retained for the contract duration plus warranty period (60 to 90 days following deployment), after which staging keys are revoked and access destroyed.
- Invoicing & Tax Records: Retained for the minimum duration required by applicable financial regulations in Sri Lanka.
Your Rights (GDPR & Global Standards)
Regardless of your country of residence, we afford all visitors and clients complete control over their personal information in alignment with international privacy regulations such as the GDPR (General Data Protection Regulation):
Right to Access
Request a full copy of the personal details we hold about you.
Right to Rectification
Ask us to correct or update inaccurate contact or business details.
Right to Erasure
Request the permanent deletion of your messages and records at any time.
Right to Data Portability
Obtain your provided project files in a structured, standard electronic format.
To exercise any of these rights, email us at hello@isharabandara.com. We will process your request within 48 hours free of charge.
Children's Privacy
Our services and website are intended solely for professional business clients, developers, and individuals aged 18 and older. We do not knowingly collect or solicit personal information from children under the age of 16. If we discover that personal data has been collected from a minor without verified parental consent, we will promptly delete that data.
Policy Updates & Revisions
We may revise this Privacy Policy periodically to reflect technological advancements, new services, or statutory changes. Any changes will be posted on this page with an updated "Last Updated" timestamp at the top.
Contact & Data Protection Inquiries
Ishara Bandara
Software Engineer & Data Controller
For questions concerning this Privacy Policy, your personal data, or to issue a deletion or export request, contact us directly: