This notice describes how the Tea Small Holdings Development Authority handles personal information collected through this website. It does not cover information the Authority holds about you for other reasons — your smallholder registration, a subsidy application made on paper, or your employment — which is governed by the Authority's general records practice and by the law under which it operates.
Legal
රහස්යතා දැනුම්දීම
What this website collects, why, how long it is kept and what you can ask the Authority to do about it.
What this notice covers
What the site collects
Information you give us. When you submit a feedback form, a petition, a training application, a comment on a discussion topic or a subscription request, the site stores what you typed, together with the date and time. Each submission is given a reference number so that it can be tracked to an answer. Contact details are used to reply to you and to notify you of the outcome, and are not used for anything else.
Information collected automatically. The site records page views for statistical purposes, as Clause 3.17 of the Authority's requirements provides for. What is recorded is the page, the time, the language version, the type of device and browser, an approximate location derived from the network, and the site that referred you, reduced to its host name. Visitors are counted using a value derived by one-way hash from the network address and the browser's own description of itself; the network address itself is not stored, and the hash cannot be reversed to identify a person or a household.
What is not collected. The analytics are self-hosted on the Authority's own server. No visitor data is sent to any third-party analytics service. The site does not use advertising trackers. Requests that carry a Do Not Track header are not recorded at all, and neither are requests from search engine crawlers or requests to administrative pages.
Cookies and local storage
The site uses a session cookie to keep you signed in if you are a member of staff using the administration console or the Field Officer Portal, and to protect forms against cross-site request forgery. It stores your language choice and your light or dark preference in your browser's local storage so that the site opens the way you left it. None of these are used to build a profile of you.
Retention, disclosure and your rights
Analytics records are retained for the period set in the Authority's settings — 400 days by default — and are then deleted automatically. Feedback, petitions, applications and correspondence are retained under the Authority's records schedule, because they are part of the record of a decision taken by a public body.
Personal information collected through this site is not sold, rented or shared for marketing. It is disclosed only within the Authority to the officer responsible for answering the matter, and outside it only where the Authority is required by law to do so.
You may ask the Authority what information it holds about you, ask for it to be corrected if it is wrong, and ask for a subscription to be ended — every alert message carries a one-click unsubscribe link, and the subscription is deleted rather than merely flagged. Requests for information held by the Authority may also be made under the Right to Information Act No. 12 of 2016; the procedure is under Services.
Questions about this notice should be addressed to the Information Officer at the Authority's Head Office, whose details are in the Staff Directory, or submitted through the feedback form.