Skip to content
thedatadriven

Privacy policy

Last updated: 7 November 2026

This site belongs to The Data Driven, a freelance data service run by me from Sri Lanka. I am the person responsible for your information. This page explains what I collect when you contact me or hire me, why I collect it, how long I keep it and what rights you have.

What I collect

  • Contact form: your name, email, the website you mention, your message and, if you add it, your WhatsApp number. The form is delivered to my inbox by Web3Forms.
  • WhatsApp, Telegram and email: whatever you choose to send me in the chat, including your phone number or username.
  • Project information: the websites, fields and files you share so I can quote and deliver your job.
  • Visit statistics: Cloudflare Web Analytics counts page views without cookies and without identifying you personally.

This site does not use advertising cookies, tracking pixels or social media trackers. I do not ask for payment card details on this site.

Why I use it

I use your information only to reply to you, prepare a quote, deliver and support your project, send invoices, and keep basic business records. If you are in a country with data protection law such as the GDPR, the legal basis is taking steps at your request before a contract, performing the contract, and my legitimate interest in running my business and keeping this site safe from spam.

I do not sell, rent or trade your details. I do not use your messages or project data for marketing, and I do not use them to train AI models.

Project files and client data

  • Files and data from your project are used only for your job and are treated as confidential.
  • I delete project files and delivered datasets 30 days after delivery, unless you ask me to keep them for updates or monitoring.
  • If you give me a login, API key or other access, I use it only for your project, and I ask you to remove or change it when the work is done.

How long I keep things

  • Enquiries that do not become a project: up to 12 months, then deleted.
  • Invoices and payment records: kept as long as tax and accounting rules require.
  • Project files: as described above.

Who else handles your information

  • Cloudflare: hosts this site, routes email sent to the site address and provides visit statistics.
  • Web3Forms: delivers form messages to my email. Messages pass through their servers.
  • Email provider, WhatsApp and Telegram: when you contact me there, their own privacy policies apply.
  • Payment providers such as Wise, Payoneer, PayPal or my bank: they process payments under their own policies.

These services may store data outside Sri Lanka and outside your country, including in the United States and the European Union. I only use providers that publish their own privacy and security commitments. I do not share your information with anyone else unless the law requires it.

Security

This site is served over HTTPS with security headers. My accounts use strong passwords and two-step verification where it is offered. I keep access to your information limited to me. No online service is completely secure, but I take reasonable steps to protect what you send.

Your rights

You can ask me at any time to show you the information I hold about you, correct it, delete it, limit how I use it, or send you a copy. You can also object to how I use it. Write to thedatadriven@gmail.com and I will reply within 30 days. If you are in the European Union or United Kingdom, you also have the right to complain to your local data protection authority.

Children

This site and my services are for businesses and adults. I do not knowingly collect information from children.

Changes to this page

If I change how I handle information, I will update this page and the date at the top.

Contact

Questions about privacy: thedatadriven@gmail.com, or message me on WhatsApp or Telegram.