Last Updated: October 22, 2025
At WordCraft Academy & Solutions, accessible via WordCraft.lk, protecting your privacy and ensuring the confidentiality of your data is our top priority. This Privacy Policy explains how we collect, process, store, and protect personal information whenever you visit our website or use our services. We are based in Nuwara Eliya, Sri Lanka, and our operations comply with the Personal Data Protection Act, No. 9 of 2022, while also maintaining partial compliance with the European Union General Data Protection Regulation (GDPR) to safeguard international visitors. By accessing WordCraft.lk or submitting your personal information, you acknowledge and consent to the practices outlined in this Privacy Policy. Transparency, trust, and accountability guide every aspect of our approach to data management, ensuring that your interactions with our website and services remain secure, reliable, and professional.
When you engage with our website, we may collect personal information that you voluntarily provide, including your name, email address, phone number, and any messages submitted through our contact forms. This data is necessary for responding to inquiries, providing quotations, scheduling appointments, and delivering professional services such as translation, WordPress development, website training, graphic designing, business email solutions, copywriting, and ongoing support and maintenance. Contact form submissions are managed through WP Forms, and email communications are secured via Microsoft 365 Business infrastructure, ensuring encryption and restricted access only to authorized personnel. We do not sell or rent personal data to third parties. All communications are handled with strict confidentiality, and your information is used solely to provide the services you request or to improve your experience on WordCraft.lk.
In addition to voluntarily submitted data, we automatically collect technical and analytical information about your interaction with our website. This includes IP addresses, browser type, operating system, referring website, pages visited, time spent on each page, and device information. We gather these details using tools such as Google Analytics, Google Search Console, and Cloudflare to monitor website performance, optimize content delivery, and maintain security. Analytical data is anonymized and aggregated to prevent the identification of individual users. Collecting this information allows us to understand user behavior, improve website functionality, detect technical issues, and protect against cyber threats. None of this automatically collected data is used to personally identify visitors without their consent.
Cookies and similar tracking technologies are employed to improve website functionality, remember user preferences, and enhance overall performance. Google Analytics cookies help analyze user behavior and traffic patterns, while Cloudflare cookies assist with secure content delivery and threat mitigation. Cookies also maintain session states, ensuring that user interactions with the website are smooth and efficient. Users can choose to disable cookies through their browser settings; however, certain features of the website may not function correctly if cookies are blocked. We do not use cookies to track users across unrelated websites or to collect sensitive personal information. Clear and transparent explanations of cookie usage are provided, allowing visitors to understand how their data contributes to website optimization, security, and a better user experience.
The personal data we collect is utilized exclusively for operational purposes, communication, project management, security monitoring, and service delivery. Your information allows us to respond promptly to inquiries, manage projects efficiently, and provide specialized services. Technical and analytical data is used to monitor website performance, enhance functionality, and ensure optimal content delivery. At WordCraft.lk, we work only with trusted service providers such as Google, Microsoft, Cloudflare, and Wordfence. These partners receive limited data strictly for the purpose of analytics, email services, security monitoring, and website maintenance. Each provider is contractually bound to maintain confidentiality and adhere to international privacy and security standards. Data sharing is conducted with the sole aim of improving service quality, security, and user experience.
For international visitors subject to GDPR, personal data processing occurs on lawful grounds such as consent, legitimate interests, and legal obligations. Consent is obtained when users voluntarily submit personal data, legitimate interests apply to website analytics, security monitoring, and operational optimization, and legal obligations ensure compliance with statutory requirements. Sri Lankan users are protected under the Personal Data Protection Act, No. 9 of 2022, which defines the principles of lawful processing, the rights of data subjects, and the responsibilities of organizations handling personal information. We ensure that all data collection is minimal, processing is transparent, and appropriate security measures are in place to comply with both local and international privacy laws. Visitors are informed of their rights, and all personal data is treated with integrity, professionalism, and accountability.
We retain personal information only as long as necessary to fulfill its intended purpose or comply with legal requirements. Contact form submissions are securely stored for up to twelve months, providing sufficient time to manage ongoing communications and service requests. Analytical data collected via Google Analytics is retained for twenty-six months before anonymization or deletion, ensuring long-term performance analysis without compromising personal privacy. Security logs from Wordfence and Cloudflare are preserved for ninety days, enabling effective monitoring and response to potential threats. Once the retention period ends, personal data is permanently deleted or anonymized to prevent unauthorized access. Retention schedules are periodically reviewed to comply with legal and security standards while safeguarding users’ information.
We implement stringent technical and organizational measures to secure your data. Website communications are protected with SSL/TLS encryption, and Wordfence firewalls prevent malicious activity. Cloudflare enhances security through DDoS mitigation, real-time traffic filtering, and content caching. Microsoft 365 ensures secure email transmission and storage for contact form submissions. Access to personal information is restricted to authorized personnel, with continuous monitoring, regular software updates, vulnerability scanning, and malware detection implemented to protect against unauthorized access, loss, or corruption. While no system is entirely immune to risks, these layered measures maximize protection and maintain user trust in the services provided.
Users have the right to access, correct, delete, or restrict the processing of their personal data at any time. They may withdraw consent previously provided or object to specific data processing activities. GDPR-covered users can expect a response within thirty days of submitting a request. Requests can be made via [email protected]. WordCraft.lk does not engage in automated decision-making or profiling. Exercising these rights is free of charge. All requests are handled with transparency and in accordance with applicable Sri Lankan law and GDPR principles. Users maintain full control over their personal data while continuing to benefit from WordCraft.lk services.
Certain services we use involve the transfer of data internationally. These transfers are necessary for the operation of Google Analytics, Microsoft 365 email services, Cloudflare security, and Wordfence monitoring. Transfers are conducted only with providers that implement adequate safeguards, including contractual and technical measures to maintain confidentiality, integrity, and security. By using WordCraft.lk, you consent to these international transfers, which are necessary to deliver secure, reliable, and optimized services. Providers adhere strictly to privacy and security requirements and use your data exclusively for its intended purpose.
In addition to the personal and technical information described above, WordCraft.lk uses cookies and similar technologies to enhance user experience, maintain functionality, and provide insights into website performance. Cookies are small text files stored on your device that allow the website to remember preferences, facilitate navigation, and improve service delivery. We use functional cookies to maintain session continuity and ensure that interactive features, such as contact forms, dropdown menus, and service inquiry forms, operate smoothly across pages. Performance cookies are deployed via Google Analytics and Google Search Console to track aggregate traffic, measure visitor engagement, and understand which pages and content resonate most with users. These performance cookies help us identify trends, optimize page load times, and tailor content more effectively to audience needs. Security-related cookies, such as those provided by Wordfence and Cloudflare, help detect malicious traffic, prevent unauthorized access, and mitigate potential Distributed Denial of Service (DDoS) attacks. These security cookies are critical to safeguarding personal data and ensuring uninterrupted service availability.
Cookies and analytics data are stored only as long as necessary to achieve their intended purposes. Google Analytics retains aggregated data for twenty-six months, after which individual-level data is anonymized or deleted. Security logs from Wordfence and Cloudflare are retained for ninety days to ensure effective monitoring, threat detection, and timely response to vulnerabilities. Functional session cookies persist only for the duration of your visit unless explicitly saved to preserve preferences for future interactions. Users have the right to manage cookies through browser settings or opt-out mechanisms provided by third-party analytics platforms. Disabling cookies may affect website performance or limit access to specific interactive features, but it does not impede the basic functionality of WordCraft.lk.
All data collected through cookies, analytics, and technical logs are treated as personal information when linked with user activity, and they are processed in accordance with the GDPR principles of lawfulness, fairness, and transparency, as well as Sri Lanka’s Personal Data Protection Act, No. 9 of 2022. Data is collected for legitimate interests such as security monitoring, website optimization, service delivery, and performance analysis. We ensure that third-party providers involved in analytics, cloud security, and content delivery implement adequate safeguards to protect your data. All access is strictly controlled, and no data is shared with third parties for marketing purposes without explicit consent. Users can request access, deletion, or restriction of data collected through cookies and analytics by contacting [email protected], and we commit to responding within the statutory thirty-day period.
This Privacy Policy is periodically updated to reflect technological, operational, and legal changes. Updates are published on WordCraft.lk with a revised effective date. Continued use of the website constitutes acceptance of updated terms. Major revisions may also be communicated through website notifications or email when appropriate. Visitors are encouraged to review the policy regularly to remain informed. Updates maintain transparency, compliance, and ongoing protection of personal data, reflecting our commitment to safeguarding users’ information while adapting to evolving legal and technological landscapes.
All disputes arising from this Privacy Policy are governed by the laws of the Democratic Socialist Republic of Sri Lanka, including the Personal Data Protection Act, No. 9 of 2022. By using WordCraft.lk, users consent to the jurisdiction of Sri Lankan courts, primarily those in Nuwara Eliya or Colombo where applicable. WordCraft.lk is committed to resolving privacy concerns ethically, legally, and professionally, ensuring user rights are respected while maintaining operational integrity. For questions, complaints, or inquiries regarding personal data, visitors may contact [email protected] or visit our office in Nuwara Eliya. Our commitment is to uphold the highest standards of privacy and maintain trust in all our professional services, including translation, WordPress development, website training, graphic designing, copywriting, business email solutions, and ongoing support and maintenance.