Independent · Editorial only · No sales, no commission · Editorial desk in Colombo · Plans current as of the date on each review
Legal

Privacy Policy

Last revised: May 12, 2026

This is the privacy policy of Dialoq ("we", "the publication"), an independent editorial publication operated from Colombo. This page explains, in plain language, what personal data we hold about visitors to dialoq.click, how it is processed, and what rights you have over it under Sri Lanka's Personal Data Protection Act No. 9 of 2022 and other applicable regimes.

The data controller

The data controller for the purposes of this policy is Dialoq, 24/3 Bagatalle Road, Colombo 03, Western Province, Sri Lanka. Privacy questions should be addressed to [email protected].

What we collect, and when

Dialoq collects personal data in three discrete circumstances:

  1. When a page is served. Our web server receives the technical metadata required to deliver the page: an IP address, a browser user-agent string, the URL requested, and the date and time of the request. We use this data to deliver the page itself, to defend against abusive traffic, and — in aggregate — to understand which reviews and explainers readers find useful.
  2. When a message is sent through the contact form. The contact form captures the name, email address, subject line, and message body that you provide. The data is used solely to respond to your message.
  3. When you subscribe to the newsletter. The subscription form captures your email address. We use it only to send the monthly newsletter and we do not pass it to any third party. You can unsubscribe at any time using the link at the foot of every issue.

What we do not collect

For clarity: Dialoq does not collect or hold any data that would identify you as a subscriber to any specific mobile operator. We do not request, store, or process your phone number, your SIM identifier, your operator account number, or any other information that connects you to a particular plan or operator. You can read the entire site without ever providing such information, and we strongly prefer that you do.

Cookies and analytics

We use only essential cookies necessary to operate the site, plus a privacy-respecting analytics tool that records anonymous, aggregate readership data. We do not use advertising cookies, cross-site tracking, or any third-party marketing tag. The full list of cookies and their purposes is in our Cookie Policy.

Retention

Server logs are retained for thirty days and then deleted. Contact-form messages are retained for as long as is necessary to respond and for a reasonable period afterwards (typically no more than 24 months). Newsletter subscribers are retained for as long as they remain subscribed.

Legal basis

The legal bases on which we process personal data, under Sri Lanka's Personal Data Protection Act No. 9 of 2022 and equivalent regimes, are: (a) the legitimate interest of operating and securing the site, for technical server logs; (b) the data subject's consent, for newsletter subscriptions and for non-essential cookies; and (c) the necessity of responding to a request, for contact-form messages. Readers in the European Economic Area are processed on the equivalent grounds under Articles 6(1)(a), (b), and (f) of the General Data Protection Regulation.

Your rights

Under the Sri Lankan Personal Data Protection Act and equivalent regimes, you have the right to: be informed of the processing of your personal data; access the personal data we hold about you; request correction of inaccurate data; request deletion of data; withdraw consent where processing is based on consent; and lodge a complaint with the Data Protection Authority of Sri Lanka. To exercise any of these rights, write to [email protected]. The Data Protection Authority of Sri Lanka, established under the 2022 Act, accepts complaints from data subjects who believe their rights have been infringed.

Cross-border transfers

Our hosting infrastructure is provided by a third-party operator whose servers may be located outside Sri Lanka. Technical data about your visit may therefore be transferred to and stored in other jurisdictions. We use providers that implement appropriate safeguards and, where required by applicable law, standard contractual clauses or equivalent transfer mechanisms.

Children

Dialoq is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has submitted personal data through the contact form or newsletter, please write to [email protected] and we will delete it without undue delay.

Revisions

We may revise this policy from time to time. The date at the top of the page records the most recent revision. Material changes are noted in the next monthly newsletter.

Contact

For any question about this policy or about how we handle your personal data, please write to [email protected].