Privacy

Privacy notice

This notice explains what personal data Land Support Crew collects, why, how long we keep it, and what you can ask us to do about it. It covers both visitors who send an enquiry and the professionals listed in the directory.

1. Who is responsible

The controller of the personal data described here is Vistara Ventures [PLACEHOLDER: registered entity name and address].

For anything in this notice — including a request to see, correct or erase your data — contact [PLACEHOLDER: privacy contact address — owner to supply before launch].

2. What we collect

If you send an enquiry

  • Your name, phone number and the message you write.
  • Your IP address and the time you submitted it. We keep this to detect and stop abuse of the enquiry form.
  • An anonymous session identifier stored in a cookie. It contains no information about you and is used only to count how many enquiries come from one browser.

If you browse the directory

  • We record that a profile was viewed, and that contact details were requested. These records store a salted one-way hash of your IP address — never the address itself — so we can spot bulk scraping without keeping a log of who looked at what.
  • If you arrived from one of our partner sites, we store the name of that site. We do not store the full address you came from, because those often contain search terms.

If you are a listed professional

  • Your name, email address and verified phone number.
  • Your profile content, including photographs and the areas you serve.
  • Credential details, including registration numbers and any certificates you upload.
  • Payment records and an audit trail of changes to your listing.

If you practise as a sole trader, information about your business is also information about you, and this notice treats it that way.

3. Why we use it, and on what basis

  • Your consent — sharing your enquiry with the professional you chose. You give this by ticking the box on the enquiry form, and the exact wording you agreed to is recorded alongside it.
  • Performing our agreement with you — listing a professional's profile, taking payment, and telling them when their listing is due to renew.
  • Running the service safely — rate limiting, spam detection and the abuse logging described above.

4. Who we share it with

When you send an enquiry, your name, phone number and message are sent to the professional you selected — the same sentence shown above the consent box on the form. We send it to the contact address on their listing, or to their account address if their listing has none.

We record every one of these disclosures: which enquiry went to which professional, and when.

We do not sell personal data, and we do not share it with advertisers. Professionals are listed because they pay a monthly fee; that is stated on every listing.

5. How long we keep it

  • Enquiries: the identifying parts — your name, phone number, message and IP address — are permanently overwritten 12 months after you submit them. An anonymous record that an enquiry happened remains, so a professional's historical figures do not change.
  • Professional records: when a listing is removed, the records are retained rather than deleted. Removal and erasure are different things, and we do not treat one as the other.
  • Payment and audit records are retained as financial and accountability records.

6. Your rights

You can ask us to give you a copy of your data, correct it, erase it, or withdraw consent you previously gave. This applies whether you are a visitor who sent an enquiry or a listed professional.

Write to [PLACEHOLDER: privacy contact address — owner to supply before launch]. We will verify who you are before acting — for an enquiry, that means confirming you control the phone number you submitted — and we aim to respond within 14 days.

Verification is not a formality: acting on an unverified request is how someone else gets your data, or gets it destroyed.

7. Cookies

We use cookies only to keep you signed in and to count enquiries. There are three: one for professionals' sign-in, one for administrators' sign-in, and one anonymous identifier for the enquiry form.

There are no advertising cookies, no third-party trackers, and no cross-site analytics on this site.

8. The law this follows

Sri Lanka's Personal Data Protection Act No. 9 of 2022 (as amended in 2025). The Act's obligations commence on dates appointed by the Minister; we have built to them ahead of time rather than waiting to retrofit.

We will update this notice when what we do changes. If a change affects what you have already consented to, we will ask again rather than assume.