Privacy policy.

Wedarala Wellness International (Pvt) Ltd. (“Wedarala”, “we”) runs this website and the sanctuary at Pulathisi Hela Weda Medura, 129/B Wathupitiwala Road, Nittambuwa 11880, Sri Lanka. We decide how and why the personal information described here is used, which makes us its controller.

You can reach us at email@wedarala.com or +94 77 997 1700 (phone or WhatsApp).

We collect only what you give us through a form, what you send us by email, and a small amount of technical information.

• Your account: your name, email address and password. Passwords are stored by our authentication provider in a form that cannot be read back; we never see them.
• A treatment booking: your preferred date and time, any health notes you choose to add, and any referral code, linked to your account.
• An Academy enrolment: your full name, date of birth, gender, nationality, passport or NIC number, email, phone, country of residence, preferred start date and accommodation needs; and, if you choose, your occupation, prior experience, dietary requirements, health conditions or medications, how you heard of us, a photo of yourself, and notes for the instructor.
• A volunteer application: your name, date of birth, gender, nationality, email, phone, country and city, an emergency contact’s name, phone and relationship to you, the role, dates and length of stay you would like, languages and motivation; and, if you choose, your skills and experience, dietary requirements, health conditions, travel-insurance and accommodation answers, a photo of yourself, and a referral code.
• A membership application: your name, email, the role you are applying for, the referral code you would like and, if you choose, why you want to join.
• A review: your name, whether you are a patient, volunteer, student or caregiver, your rating and your story.
• A donation pledge: the amount, the campaign, your email and, if you choose, your name. No card or bank details are taken on this website.
• Emails you send us: when you write to any wedarala.com or wedarala.lk address, we keep the message, the sender and recipients, and the names of any attachments, and check it automatically for spam and phishing.
• Technical information: the cookies that keep you signed in, and anonymous measurements of visits and page speed (see “Cookies”).

Health notes and health conditions, passport or NIC numbers, dates of birth and photos of you are sensitive. We ask for them only so that a physician can treat you safely, an instructor can prepare for you, and we can recognise you when you arrive. The health fields are optional. By filling them in you consent to our using them for those purposes, and you can withdraw that consent at any time (see “Your rights”).

The email alerts our staff receive about new bookings and applications do not include your health information.

If you give us someone else’s details — an emergency contact, for example — please tell them, and only share what they would expect us to have.

• To provide what you ask for: to arrange treatments, enrolments, volunteer placements and memberships, and to reply to you. This is necessary to do what you asked us to do.
• To keep you informed about what you booked or applied for: confirmations, reminders before a start date, payment instructions and replies from our team, sent by email.
• To use health information for your care, with your consent.
• To keep the website and our mailboxes secure, including filtering spam and phishing. This is in our legitimate interest and yours.
• To keep the records the law requires of us, such as financial records.

We do not sell your information, use it for advertising, or make decisions about you by automated means alone.

A small number of service providers process information on our behalf and on our instructions:

Our staff see your information only through accounts with administrator rights. We may disclose information where the law requires it, or to protect someone’s safety.

Because of the providers above, your information is stored in Singapore and some of it passes through the United States. These providers process it under their data-processing terms with us, which require them to protect it and to use it only to provide their service.

We use only the cookies needed to keep you signed in to your account. We use no advertising or tracking cookies, which is why this website does not show a cookie banner.

Vercel Web Analytics and Speed Insights measure how many people visit and how quickly pages load. They work without cookies and do not identify you.

Links to Google Maps, Facebook and YouTube take you to those services, which have their own privacy policies.

• Reviews, once we approve them: your name, your role, your rating, your story and the month and year you wrote it.
• Members, once we approve them: your name, role and referral code, and any biography and photo shown in the directory.

Photos you upload with an enrolment or volunteer application are stored with our provider at addresses that are not published anywhere on this website.

We keep your information for as long as we need it for the reason you gave it to us, and afterwards only for as long as the law requires us to keep records. Reviews and directory entries stay published until you ask us to remove them. When we no longer need information, we delete it or remove what identifies you.

Under Sri Lanka’s Personal Data Protection Act, No. 9 of 2022 — and, if you are in the European Union or the United Kingdom, under the GDPR — you can ask us to:

• tell you what information we hold about you, and give you a copy;
• correct information that is wrong or incomplete;
• delete your information;
• stop using it, or withdraw a consent you gave (this does not affect what we did before);
• give it to you in a format you can take elsewhere, where the law provides for this.

Write to email@wedarala.com from the email address we hold for you. We may ask you to confirm who you are, and we will reply within the time the law allows. If you are unhappy with our answer, you can complain to the Data Protection Authority of Sri Lanka or, in the EU or UK, to your local data-protection authority.

There is no delete button yet. Write to email@wedarala.com and we will delete your account, which removes your profile and your bookings and enrolments with it. We may keep records the law requires us to keep.

Our services are meant for adults. If you are under 18, a parent or guardian should contact us on your behalf. If you believe a child has given us information without a parent’s or guardian’s knowledge, write to us and we will delete it.

Everything you send us travels over an encrypted connection. Access to stored information is limited to staff with administrator accounts, and passwords are never stored in readable form. No system is perfectly secure; if a breach puts your information at risk, we will tell you and the authorities as the law requires.

When we change this policy we will update the date at the top of this page. If a change is significant, we will also tell account holders by email.

Wedarala Wellness International (Pvt) Ltd., Pulathisi Hela Weda Medura, 129/B Wathupitiwala Road, Nittambuwa 11880, Sri Lanka · email@wedarala.com · +94 77 997 1700