Privacy Policy
Care Bridge Lanka (“we”, “us”, “our”) provides home and hospital care services in Sri Lanka, based in Matale, Kandy. We understand that families trust us with sensitive information about the people they love. This policy explains what personal data we collect through this website, why we collect it, how we protect it, and the choices you have.
We handle personal data in line with Sri Lanka’s Personal Data Protection Act, No. 9 of 2022. By using this website and submitting our forms, you acknowledge this policy.
What personal information do we collect?
The information we collect depends on how you use the website:
- Booking an appointment: the guardian’s and patient’s names, NIC numbers, phone numbers, email addresses and home addresses, the service you need, your preferred date and time, and any description of care needs you choose to give us. This description may include health information.
- Applying to be a caregiver: your name, email, phone number, preferred location, specialization, years of experience, your motivation and expectations, and any attachments you upload (such as a CV, certificates or ID).
- Contacting us: your name, email, phone number, subject and message.
- Newsletter: your email address.
- Technical data: basic information such as browser type and the pages visited, and your language preference (stored in your browser).
Location information from our mobile app
If you are a caregiver or a patient using our mobile app, the app collects your device’s location (GPS) during a shift, from check-in until sign-off. This continues while the app is in the background or your screen is off, and on Android a notification shows while it is happening. A position is sent at a set interval, every 15 minutes by default. We do not collect location outside a shift, and we never collect location from guardians.
We use this information to confirm that care is being delivered in the right place, to keep caregivers and patients safe, and to help our team respond if something goes wrong. We also compare a caregiver’s location with the patient’s home when they check in and sign off.
Our authorised care coordinators and administrators can see these positions on a map, including for past shifts. Guardians do not see positions or a map: they only see a status showing whether the caregiver and patient are together at the start of a shift.
We also record whether a caregiver or patient is using the mobile app or the web portal, and when they were last active, so our team can support them.
You can turn off location access for the app in your device settings at any time. If you do, we may not be able to confirm that a shift took place at the right location. Our care team may contact you about this.
How do we collect your personal data?
We collect data you give us directly by completing a form on this website, by phone, by WhatsApp or by email. We do not buy personal data from third parties.
How do we use your information?
- To respond to enquiries and arrange assessments, bookings and care plans.
- To match families with suitable caregivers and to keep families informed about care.
- To assess and process caregiver applications.
- To send the newsletter, if you subscribed, and to contact you about your request.
- To protect the website from spam and abuse, and to meet our legal obligations.
What are our legal bases for processing your data?
We process personal data (a) with your consent, which you give when you submit a form, (b) to take steps at your request before providing care, or to deliver the service you asked for, (c) to comply with legal obligations, and (d) for our legitimate interests in running and securing the website. Health information is treated as sensitive and is used only to arrange suitable care. If you give us information about another person, such as a family member, please make sure you are entitled to do so.
Who do we share your data with?
We do not sell your personal data. We share it only as needed to deliver our services:
- Our caregivers and care team, limited to what is needed to provide care.
- Service providers who help us run the website and our systems: Microsoft Azure (website hosting and document storage), provider.lk (database hosting), Mailgun (sending emails) and Cloudflare Turnstile (spam protection on our forms). Google Fonts may be loaded to display text on this website. Your data is stored and processed outside Sri Lanka, in the United States: our website, systems and documents are hosted by Microsoft Azure in the eastern United States, and our database is hosted by provider.lk on a server in Las Vegas. Where this happens, we take reasonable steps to make sure your data is protected in line with this policy and Sri Lankan law.
- Google, which provides push notifications in our mobile app (Firebase) and the maps our team uses to view locations (Google Maps).
- Doctors, hospitals or authorities where care coordination or the law requires it.
- WhatsApp, if you choose to message us there. WhatsApp’s own privacy policy applies to that conversation.
How long do we keep your data?
We keep appointment and enquiry records for about 2 years, and caregiver applications for about 1 year, unless a longer period is needed for legal or safety reasons. After that we delete or anonymize the data.
Location records are kept for about 2 years and then deleted, unless they are needed for longer for legal or safety reasons.
Security
We use reasonable technical and organizational measures to protect personal data, including encrypted (HTTPS) connections and restricted access to our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please do not send sensitive documents by unsecured channels.
Your rights
Under Sri Lankan law you may ask us to access, correct or delete your personal data, to withdraw your consent, or to object to how it is used. To do so, email [email protected] and we will respond within a reasonable time. You may also complain to Sri Lanka’s Data Protection Authority.
Cookies and local storage
This website does not use advertising cookies. It stores your selected language in your browser so the site opens in that language next time. You can clear this at any time in your browser settings.
Children
This website is for adults. Where care is for a child, the booking must be made by a parent or legal guardian, who provides the child’s information.
Changes to this policy
We may update this policy from time to time. The “Last updated” date above shows when it was last revised.
Contact us
Care Bridge Lanka, Matale, Kandy, Sri Lanka
Email: [email protected]
Phone: +94 70 383 4847 / +94 70 000 0000