Privacy Policy

1. Statement of Principle

I take privacy and digital sovereignty seriously. This portfolio operates on a philosophy of radical data minimization. We do not engage in unauthorized third-party tracking, do not sell user data, and collect only the absolute minimum information required to respond to architectural inquiries and provide professional engineering services.

2. Information Collected & Data Minimization

When interacting with this website, we only collect data that you voluntarily provide through the contact form:

Name: Used solely to address you professionally in communications.
Email Address: Used strictly to reply to your inquiry.
Project Details / Message Content: The technical specifications, scope, or questions you submit.

We do not ask for or collect sensitive personal data, physical addresses, financial details, or government identifiers on this site.

3. Legal Basis for Processing (GDPR, CCPA & PDPA)

Under the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and Sri Lanka Personal Data Protection Act (PDPA No. 9 of 2022), our data processing is grounded on:

Affirmative Consent (GDPR Art. 6(1)(a) / PDPA Sec. 5): Explicitly granted when selecting the privacy consent checkbox prior to dispatching your message.
Contractual Inquiry (GDPR Art. 6(1)(b) / PDPA Sec. 6): Processing strictly required to respond to architectural proposals or contract engineering inquiries at your request.
Legitimate Interests (GDPR Art. 6(1)(f)): Safeguarding our edge infrastructure, network resilience, and preventing abusive transmission.

4. Cookies & Analytics Telemetry

This website employs a privacy-first approach to cookies:

Strictly Necessary Local Storage: Storing your cookie preferences (gaara_cookie_consent) locally on your device.
Optional Analytics: Google Analytics (GA4) is gated by default and is only loaded if you explicitly choose "Accept All" on the cookie consent banner.

For comprehensive details on how to manage or revoke cookie preferences at any time, please consult our Cookies Policy.

5. Data Retention & Security Measures

Inquiry messages are retained only as long as necessary to complete client discussions or fulfill ongoing project agreements. We implement industry-standard cryptographic protections, including TLS 1.3 encryption in transit, strict HTTP headers (HSTS, CSP, X-Frame-Options), and isolated edge deployments.

6. Your Rights

Regardless of your geographical location, you possess the right to:

Request a copy of any personal data held about you.
Request immediate rectification of inaccurate data.
Request complete erasure of your communication history ("Right to be Forgotten").
Withdraw processing consent at any time without penalty.

7. Contact & Data Officer

For any questions regarding this Privacy Policy or to exercise your data rights, please contact:

Gaara · Software Architect & Systems Engineer
Email: sayurusenavirathna70@gmail.com
Website: https://www.gaaradev.site