Privacy policy
Editorial review: 26 August 2026 · By: Alston Antony
This policy explains what personal data WebsiteHosting.lk actually collects, how the data is used, and where readers stand under Sri Lankan and international data-protection norms. Every claim is checked against the site's real technical implementation on 2026-08-27; if a section reads as if it describes a bigger operation than the site actually runs, the section is wrong and worth reporting.
Data collected from readers
- Contact form submissions. When the contact form (or a QuoteCTA form submission) is completed, WebsiteHosting.lk collects the fields the reader fills in: typically name, email, phone (optional), and the project brief. Nothing else.
- Server access logs. The site is hosted on Cloudflare Pages. Cloudflare records standard server logs including IP address, browser user-agent, request URL and timestamp, used for edge routing, cache and abuse prevention. Cloudflare's own privacy policy covers the retention and use of those logs.
- Aggregate usage patterns. Cloudflare Web Analytics may be enabled at the edge, which reports aggregate page-view counts without a browser cookie and without setting a per-visitor identifier. No individual reader is identified from those numbers.
Data NOT collected
- Google Analytics 4 is not currently loaded on the site (verified against the built HTML on 2026-08-27). If it is added later, this section will be updated and the change noted.
- No advertising pixels (Facebook, TikTok, LinkedIn, X, Google Ads) are loaded.
- No third-party session-replay or heatmap tools (Hotjar, FullStory, etc.).
- No login system, no member profile, no comment cookies.
- No newsletter or email-subscription form on any page as of 2026-08-27.
Cookies
WebsiteHosting.lk does not set first-party tracking cookies. Cloudflare may set a
strictly-necessary anti-DDoS cookie (typically __cf_bm) for bot detection at
the edge, which is required for site security and cannot be opted out of without blocking
access. No consent banner is shown because no non-essential cookies are set. If GA4 or
similar tracking is added later, a consent mechanism appropriate to the site's audience
will be added at the same time and this section will be updated.
How contact-form data is used
Form submissions land in the site owner's email inbox. If the reader submitted a quote
request through a QuoteCTA (indicated by the ?intent=quotes or
?intent=ecommerce query parameter on the URL), the submission may be
forwarded to one or more Sri Lankan providers matched to the reader's stated requirements,
as described on the CTA before submission. The reader can opt out of the forward by
saying so in the message field. Editorial questions and error reports are read by the site
owner only.
Affiliate tracking
Outbound affiliate links (see affiliate disclosure) pass through the vendor's own tracking mechanism, not one WebsiteHosting.lk operates. When a reader clicks an affiliate link, the destination vendor (Hostinger, Shopify, etc.) may set their own cookies under their own privacy policy - those are the destination's, not WebsiteHosting.lk's. WebsiteHosting.lk does not receive personally-identifying data about individual affiliate conversions from the vendor; the affiliate network reports only aggregate counts and commission.
Third-party services this site uses
- Cloudflare Pages - hosting, edge routing, DDoS protection.
- Cloudflare Forms / Pages functions - contact form processing.
- Google Fonts - if used, served from Google's CDN at page load. If a reader has cookies disabled Google will not set any.
- Affiliate networks - only when a reader clicks an affiliate link (see above).
Data retention
Contact form submissions are kept in the site owner's email for as long as the enquiry remains open plus a reasonable follow-up window (typically one year). Old enquiries are archived or deleted on request. Cloudflare's edge logs follow Cloudflare's retention policy.
Readers' rights
Under Sri Lankan Personal Data Protection Act (PDPA) principles and equivalent international norms, readers can request:
- Access to the personal data WebsiteHosting.lk holds about them.
- Correction of any inaccurate data.
- Deletion of the data.
- Withdrawal of consent to a lead forward that has not yet reached the provider.
Email [email protected] with the request and the email address originally used to contact the site. Responses within 5 business days.
Changes to this policy
Material changes (adding analytics, changing lead-forward practice, adding a subscription form) are noted in the "Last updated" date on this page and, for the first 30 days, in a visible note above the policy. Typo fixes are not called out.
Contact for privacy questions
[email protected], or via the contact page with "privacy" in the subject.