Privacy policy
The short version: I only collect what you type into a form, I use it to reply to you and to send you my newsletter, I never sell it, and you can unsubscribe or ask me to delete it at any time.
Who this covers
This policy covers roshinthaperera.com (“the site”), run by Roshintha Perera (“I”, “me”). I’m the person responsible for your data. For anything in this policy, email roshinthaperera8@gmail.com.
Work delivered through Rope Digital is covered by Rope Digital’s own terms and privacy policy at ropedigital.co.
What I collect
What you give me
- Contact and consulting forms: your name, email, and anything else you choose to fill in, such as company, role, country, budget, what you want help with, and your message.
- Playbook, guide and itinerary downloads: your name and email, and optionally your role, company and country, plus which resource you asked for.
- Newsletter signup: your email, and your name if you give it.
- Booking a call:booking runs through Google Calendar’s appointment scheduler. The details you enter there go to Google and to my calendar.
- Emails you send me: whatever you choose to write.
What’s collected automatically
- Server logs. Like every website, the hosting provider (Vercel) records basic request data such as IP address, browser, the page requested and the time. These logs are used to keep the site running and secure, and are kept for a short period.
- Email activity. My email provider (Resend) records whether an email was delivered, and may record opens and clicks on the newsletter and follow-up emails.
No analytics, no ad trackers, no tracking cookies.The site doesn’t run Google Analytics, Meta pixels or anything similar.
The free calculators and the pitch builder run entirely in your browser. What you type into them is never sent to me.
Cookies and local storage
The site itself sets no cookies. It stores one thing in your browser:
- Your light or dark theme choice, in local storage, so it stays the same on your next visit. It never leaves your device.
Two embeds come from Google, and Google’s own cookie and privacy rules apply to them:
- The booking calendar on the contact page, from Google Calendar.
- Videoson Watch + Listen, from YouTube. These use YouTube’s privacy-enhanced mode, and nothing loads from YouTube until you press play.
How I use it
- To do what you asked: reply to your enquiry, send the playbook or guide you requested, and book your call.
- To send my newsletter, “Every Other Tuesday”, one email every second week. Anyone who submits a form on the site is added to it. This is said on every form, and every issue has an unsubscribe link.
- To send a short series of follow-upsafter you download a playbook. That’s a tip on day 2, a related article on day 5 and an offer to talk on day 9, after which they stop. Each one has its own unsubscribe link.
- To run and protect the site, and to keep records the law requires me to keep.
If you’re in the UK or EU, the legal bases are: taking steps you asked for (replying, sending what you requested), legitimate interests (the newsletter and follow-ups to people who asked for related material, which you can opt out of at any time, plus site security), and legal obligation where it applies.
I don’t sell your data, rent it, or share it with anyone for their own marketing. I don’t use it for automated decisions about you.
Who processes it for me
These services handle data on my behalf, under their own security and privacy terms:
- Vercel: website hosting and server logs.
- Resend: sending email and storing the mailing list.
- Google: Gmail and Google Workspace for my inbox, Google Calendar for bookings, and YouTube for videos.
Some of these providers store data outside your country, including in the United States. They use standard safeguards, such as the EU Standard Contractual Clauses, for those transfers.
I’ll also share data if the law requires it, or to protect my rights or someone’s safety.
How long I keep it
- Mailing list: until you unsubscribe. After that I keep only a record that you unsubscribed, so you aren’t emailed again.
- Enquiries and emails: as long as we’re in conversation or working together, then up to three years, unless the law requires longer.
- Server logs: as long as the hosting provider keeps them, typically days to weeks.
Your rights
Wherever you live, you can ask me to show you the data I hold about you, correct it, delete it, or stop emailing you. Depending on where you live (the UK, EU, Malaysia, California and elsewhere), you may also have the right to object to processing, restrict it, take your data elsewhere, or complain to your data protection authority.
- Unsubscribe instantly: use the link at the bottom of any email.
- Everything else: email roshinthaperera8@gmail.com. I’ll answer within 30 days, usually much sooner.
Security
The site is served over HTTPS, and form submissions go straight to the email and list services above. Unsubscribe links are signed, so nobody can unsubscribe someone else. No system is perfectly secure, but I keep what I collect to a minimum, so there’s less to protect.
Children
The site isn’t aimed at children under 16, and I don’t knowingly collect their data.
Changes
If this policy changes, I’ll update the date at the top. If the change is significant, I’ll mention it in the newsletter.
See also the terms and conditions.
See also: Terms and conditions