A restrained approach to data.

Data controller

Pearlify (Private) Limited

No. 44, Battegoda Watta
Walagedara, Mathugama
Sri Lanka

Privacy enquiries: jochen@pearlify.net

Data processed when you visit or write

This website does not intentionally use advertising trackers, behavioural analytics, embedded social-media trackers or non-essential cookies. A public hosting provider may process technical connection data such as IP address, request time, browser information, referring page and requested URL to deliver and secure the service.

If you contact a director by email, Pearlify processes the contact details, message content and attachments you choose to provide. The public portal gateway does not collect portal usernames or passwords; authentication belongs exclusively to each separately deployed private portal.

Purpose and lawful basis

Technical data is used only to deliver, secure and troubleshoot the website. Enquiry data is used to respond, take steps you request, assess a potential business relationship and maintain necessary business correspondence.

Processing is based on the lawful basis applicable to the circumstances, including requested pre-contractual steps, performance of a business relationship, compliance obligations and legitimate operational or security interests where permitted by law.

Hosting, recipients and transfers

Technical data may be handled by the hosting and infrastructure providers required to operate the public website. Email data is handled by the relevant email service providers and by Pearlify personnel who need it to address the enquiry. Pearlify does not sell personal data.

The final hosting provider, processing locations, safeguards and operational log settings must be confirmed in the deployment record before publication. This local release is not a public deployment.

Retention and security

Technical logs should be retained only for the period configured for security and reliable service delivery. Business correspondence is retained only while needed for the enquiry, relationship, record-keeping or legal obligations. Exact periods depend on the final hosting configuration and the nature of the correspondence.

Pearlify applies proportionate organisational and technical safeguards, while recognising that no internet transmission or storage method can be guaranteed completely secure.

Your rights

Subject to applicable law, you may ask for access to personal data concerning you, correction, deletion, restriction, objection where applicable, and information about processing. Where processing relies on consent, consent may be withdrawn for future processing.

Requests can be sent to jochen@pearlify.net. You may also contact the Data Protection Authority of Sri Lanka.

This notice refers to Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, as amended by the Personal Data Protection (Amendment) Act, No. 22 of 2025, and related requirements in force.

Changes to this notice

This notice may be updated when the website’s features, hosting arrangements or legal requirements change. Last reviewed: 3 August 2026.