Privacy Policy | DivineUnion

1. Who We Are

This Privacy Policy explains how DivineUnion collects, uses, and protects your personal data, in accordance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (as amended). DivineUnion is an aggregator and introduction platform; see our Terms & Conditions for what this means.

2. Information We Collect

Identity & contact data: name, email, mobile number, date of birth, gender.
Profile & preference data: the details you add to your matrimony profile, including your partner preferences.
Special category data: religion, ethnicity, and caste are collected only where you separately consent to this, since these are treated as special categories of personal data under Sri Lankan law.
Photos and, optionally, a short verification video if you choose to complete Trust Verification.
Billing and payment data: billing address and payment reference details. We do not receive or store your card details, as these are handled directly by our payment processor.
Technical & usage data: IP address, browser/device information, and pages visited (analytics data only with your cookie consent).

3. How We Use Your Information

We use your information to operate the introduction service (showing your profile to, and showing you, compatible members), to process payments and memberships, to review and moderate profiles for safety, to communicate with you about your account, and to comply with our legal obligations.

4. Special Category Data & Consent

Where we collect religion, ethnicity, or caste, we ask for this separately from our general Terms/Privacy consent, since matrimonial matching on these criteria is a deliberate, opt-in part of the service.

5. Who We Share Data With

We share data with the following service providers, each acting on our behalf and only for the purpose described:

PayHere (payment processing): your name, contact details, billing address, and payment amount, for card payments. PayHere is a Sri Lanka-based payment gateway.
Dialog Axiata eSMS Gateway (Sri Lanka): your mobile number to deliver SMS messages.
Zoho Corporation (ZeptoMail): your email address and the content of transactional emails we send you (such as login codes, payment confirmations, and account notices), to deliver those emails.
DigitalOcean, LLC (United States): profile photos, payment slips, Trust Verification videos, and the archived copy of your data kept for a limited period after account deletion are stored on DigitalOcean’s cloud infrastructure. This involves a transfer of personal data outside Sri Lanka.
Cloudflare, Inc. (global network): DNS resolution for the Platform’s domain passes through Cloudflare, which may involve processing of technical request data outside Sri Lanka.
Google LLC (United States): if you consent to analytics cookies, anonymized usage data is shared with Google Analytics to help us understand how the Platform is used.
ipapi.co: your IP address may be sent to this service to auto-detect your country for the mobile number field. This can be disabled in our system settings.

6. Cross-Border Data Transfers

Some of the providers above (currently DigitalOcean, Cloudflare, Google, and Zoho) may process data outside Sri Lanka. Where we transfer your data internationally, we do so only where necessary for the purposes described above.

7. Cookies

See our Cookie Policy for details on the cookies we use and how to manage your preferences.

8. How Long We Keep Your Data

We keep data only as long as necessary for the purposes described above. For example: account activity logs and payment records are retained for a limited period and then purged or redacted; Trust Verification videos are deleted a set time after a review decision is made; if you delete your account, a limited archival copy is kept for a fixed retention period (to handle disputes or legal obligations) before being permanently erased. Current retention windows are available on request.

9. Your Rights

You have the right to access, correct, or request erasure of your personal data, and to object to certain processing. You can request a copy of your data or ask us to erase it from the “Privacy & Your Data” section of your dashboard, or by submitting a general privacy request there. We aim to respond within one month (extendable to three months for complex requests, with notice to you).

10. Children

The Platform is not directed at, and does not knowingly collect data from, anyone under 18. Profile creation requires you to confirm you are at least 18 years old.

11. Security

We use technical and organizational measures including access controls, private file storage, and audit logging to protect your data. No system is completely secure, and we encourage you to use a unique, secure email account.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will require you to re-accept it the next time you visit your dashboard.

13. Contact & Complaints

You may also have the right to lodge a complaint with Sri Lanka’s Data Protection Authority.

This service is operated by Tekhelp Pvt Ltd.

Company Registration No.: PV00307724