Privacy Policy

This website is run by Vanguard Bridge NZ (registration no. CPC/DC/PD/5111), 23/2/D Theldeniya Road, Madawala Bazaar, Kandy District, Sri Lanka. We are the controller of the personal data described here. Contact us about privacy at fazraan@vanguardbridge.co.uk or +94 72 248 6827.

We follow Sri Lanka's Personal Data Protection Act, No. 9 of 2022. Because most of our customers are in the United Kingdom, we also follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 where they apply.

• When you contact us or send a brief: your name, business name, email, phone number and what you tell us in your message.
• When you message us on WhatsApp: your WhatsApp name, phone number and the messages and files you send.
• When you become a customer: billing name and address, invoice details, and the emails and files we exchange while doing the work.
• When you pay by card: the payment is handled by OnePay on its own secure payment page. We receive confirmation of the payment, the amount and the last four digits of the card. We never see or store your full card number or security code.
• When you visit this website: our hosting provider keeps standard technical logs (such as IP address, browser and pages requested) for security. We do not use advertising or tracking cookies.

• To reply to you and quote for work (because you asked us to).
• To carry out the work, invoice you and take payment (to perform our contract with you).
• To keep accounting and tax records (because the law requires it).
• To keep this website secure (our legitimate interest).

We do not sell your data and we do not send marketing emails unless you have agreed to receive them.

If you are an agency and give us content for your client's website, it may include personal data about your client or their customers. We use it only to build the website you asked for, we do not contact your client, and we delete it or hand it back when the work ends. For this data we act on your instructions as a processor.

Only the services we need to run the business: OnePay and its partner banks (card payments), WhatsApp (when you message us there), our email provider, our web hosting provider, and our accountant. Each of them may only use the data to provide their service to us. We share data with authorities only when the law requires it.

Our business is in Sri Lanka and some of our service providers store data in other countries. When we transfer data out of the UK or Sri Lanka, we use providers that protect it to the standard those laws require. We protect your data with access controls, two-factor sign-in on our accounts and encrypted connections (HTTPS).

• Enquiries that do not become work: 12 months.
• Customer, invoice and payment records: as long as tax and accounting laws require, normally 6 years.
• Your clients' website content: until the work ends and is handed over, then deleted within 30 days.

You can ask us to show you the data we hold about you, correct it, delete it, limit how we use it, or give you a copy to take elsewhere. You can also object to how we use it. To ask, email fazraan@vanguardbridge.co.uk with the subject "Data request". We reply within 30 days. We may ask you to confirm who you are first.

Email fazraan@vanguardbridge.co.uk with the subject "Delete my data". We delete it within 30 days and confirm by email, except for records the law requires us to keep, which we keep only for that purpose and then delete.

If you are unhappy with how we handle your data, please contact us first. You can also complain to the Data Protection Authority of Sri Lanka or, if you are in the UK, to the Information Commissioner's Office (ico.org.uk (opens in a new tab)).

This site uses only cookies that it needs to work. It does not use analytics, advertising or tracking cookies, so we do not ask for cookie consent. If that changes, we will update this policy and ask for your consent first.

We will post any changes on this page and update the date at the top.