Privacy & Cookie Policy

Glory Village is a community welfare organisation based in Sri Lanka, founded in 2009, caring for lonely elders, widows and orphaned youth. We are the data controller for the information described on this page.

Our address is No. 14, Sevana Lane, Kandy, Sri Lanka. You can reach us at info@glory-village.com or +94 81 220 1450.

We only collect what we need to do the thing you asked us to do. We do not buy, sell, rent or trade personal information — ever.

Your card details.When you donate you are taken to a payment page hosted by Stripe. Your card number, expiry and security code are entered on Stripe’s systems and never touch our website or our database. We only receive confirmation that a payment succeeded, the amount, and a reference number.

Your Google password. Signing in with Google means Google verifies you and tells us only your name, email address and profile picture. We never see or store your password.

We share your information only with the service providers that make this website work. Each is bound by its own data protection obligations, and none of them are permitted to use your information for their own purposes.

We may also disclose information where we are legally required to — for example, in response to a lawful order from a competent authority, or to meet financial reporting and audit obligations.

This website uses only what is strictly necessary to work. There is no advertising, no tracking pixels and no third-party analytics.

Because these are strictly necessary for a service you have explicitly requested, they do not require consent under the ePrivacy Directive — but we list them here so you know exactly what is stored. If we ever introduce analytics or marketing cookies, we will ask for your consent first and give you a genuine way to refuse.

Stripe sets its own cookies on its payment page for fraud prevention. Those are governed by Stripe’s privacy policy, not this one.

• Donation records and receipts: seven years, as financial records we are obliged to retain for accounting and audit purposes.
• Contact messages, volunteer applications and support requests: up to three years, so we can follow up and understand who we have served.
• Newsletter subscriptions: until you unsubscribe.
• Sign-in sessions: until you sign out or the session expires.

• All traffic is encrypted in transit (HTTPS).
• Our database has row-level security enabled, so records cannot be read through the public interface.
• Administrative access is restricted to a named, approved account and requires Google sign-in.
• Payment card data is never stored by us in any form.

No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your personal information, we will tell you and the relevant authority without undue delay.

Depending on where you live, you may have some or all of the following rights. You can exercise any of them by emailing info@glory-village.com. We will respond within 30 days and will never charge you for it.

• Access — ask for a copy of the information we hold about you.
• Correction — ask us to fix anything inaccurate.
• Deletion — ask us to erase your information, except where we must keep donation records for accounting purposes.
• Objection — ask us to stop using your information for a particular purpose.
• Portability — receive your information in a machine-readable format.
• Withdraw consent — unsubscribe from our newsletter, or sign out at any time.

If you are in the European Economic Area or the United Kingdom, the GDPR applies to you because we offer this service internationally. If you are in Sri Lanka, the Personal Data Protection Act No. 9 of 2022 applies. If you believe we have mishandled your information, you may complain to your local supervisory authority — in Sri Lanka, the Data Protection Authority.

This website is not intended for children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us their information, please contact us and we will delete it.

If we change how we handle your information, we will update this page and change the date at the top. Where the change is significant, we will make a reasonable effort to tell you directly.

See also our Terms & Conditions.