Privacy Policy
Last updated: 8 September 2026 Effective: 8 September 2026
This policy explains what personal data bioloomislands.com collects, why we collect it, who else can see it, and what you can ask us to do about it. We have written it to describe what this website actually does, rather than to cover every practice we might one day adopt.
The short version. This website sets no cookies and runs no advertising or cross-site tracking. The only personal data we ask you for is what you type into the contact form. We use it to reply to you, and nothing else.
1. Who we are
Bioloom Islands is the data controller for personal data collected through this website — that is, we decide what is collected and why.
Bioloom Islands (Pvt) Ltd No. 18/34 A, Egodawaththa Road,Boralasgamuwa 10290,
Sri Lanka
Email: info@bioloomislands.com
2. What we collect
Everything this website collects is listed below. There is nothing else.
| Data | When | Required? |
|---|---|---|
| Your name | Only when you submit the contact form | Yes |
| Your email address | Only when you submit the contact form | Yes — we cannot reply without it |
| Subject / topic | Only when you submit the contact form | No — optional |
| Your message | Only when you submit the contact form | Yes |
| IP address | On form submission, and in standard web-server logs | Automatic — see below |
We do not ask for your phone number, postal address, date of birth, job title, organisation, or any special-category data (health, biometric, genetic, political, religious or similar information). Please do not include such details in a message to us unless they are genuinely necessary for your enquiry.
About the IP address
When you submit the contact form, your IP address is recorded for up to one hour and used solely to enforce a submission limit that stops automated spam. It is stored as a short-lived counter, is not linked to the content of your message, and is automatically discarded once the hour has passed.
Separately, our web host keeps standard server access logs (IP address, page requested, time, browser user-agent) as every web server does. We use these only to keep the site running and to investigate abuse or technical faults.
3. Why we use it
| Purpose | Lawful basis |
|---|---|
| Reading and replying to your enquiry | Your consent, given by ticking the box on the contact form. You can withdraw it at any time. |
| Blocking spam and abuse of the contact form | Legitimate interests — keeping the form usable and our inbox functional. |
| Keeping the website secure and available | Legitimate interests — operating the service safely. |
| Understanding which pages are visited, in aggregate | Legitimate interests — improving the site. No cookies, no individual profiling (see section 6). |
We do not use your details for marketing, we do not add you to a mailing list, and we do not sell, rent or trade personal data to anyone.
4. How long we keep it
- Contact-form messages: kept in our email inbox for as long as needed to deal with your enquiry and any follow-up, and reviewed periodically. Ask us to delete yours at any time and we will.
- Spam-protection IP records: automatically deleted after one hour.
- Server access logs: retained by our hosting provider on their standard schedule, typically a few weeks.
5. Who else sees it
Your message is delivered to our own @bioloomislands.com inbox and read by Bioloom Islands
staff dealing with enquiries. Beyond that, the only third parties involved in running this website are:
| Who | What they receive | Why |
|---|---|---|
| Our web & email hosting provider | Everything stored on the server, including your message in transit | They host the site and mailbox |
| jsDelivr (CDN) | Your IP address and browser details, when your browser fetches the site's animation libraries | Delivers the JavaScript libraries used for the site's visuals |
| Cloudflare | Your IP address and request details, if and when the anti-spam check on the contact form is switched on | Distinguishes humans from bots |
Web fonts are served from our own domain, so loading this site does not send your IP address to Google Fonts or any other font host.
We may also disclose personal data where we are legally required to — for example in response to a valid order from a court or regulator.
6. Cookies & analytics
This website sets no cookies. It does not use browser storage to track you, does not fingerprint your device, and carries no advertising or social-media tracking pixels.
Where we measure traffic, we use a privacy-focused analytics service that is cookieless and records only aggregate, non-identifying information — such as the number of visits to a page, the referring site, and general country-level location. It does not follow you across other websites and does not build a profile of you.
Full detail is in our Cookie Policy.
7. International transfers
Bioloom Islands is based in Sri Lanka. Some of the service providers listed in section 5 operate servers outside Sri Lanka, which means limited technical data (principally your IP address) may be processed abroad. Where this happens we rely on those providers' own contractual data-protection commitments. If you would like details of a specific provider, ask us.
8. Security
This site is served over HTTPS, so what you type into the contact form is encrypted in transit. Access to the mailbox that receives enquiries is restricted to staff who need it. The contact form is protected against automated abuse by rate limiting and hidden anti-spam checks.
No website can promise perfect security. If you ever believe your data has been compromised through this site, please tell us immediately at info@bioloomislands.com.
9. Your rights
Under Sri Lanka's Personal Data Protection Act, No. 9 of 2022 — and, where it applies to you, the EU/UK General Data Protection Regulation — you can ask us to:
- Access the personal data we hold about you;
- Correct it if it is wrong or incomplete;
- Delete it, where we have no continuing need to keep it;
- Withdraw your consent at any time, which stops any further processing that relied on it;
- Object to or restrict processing we carry out under legitimate interests;
- Receive a copy of what you gave us, in a portable format.
Email info@bioloomislands.com and we will respond within 30 days. There is no charge. We may ask you to confirm your identity before we act, so that we do not disclose your data to someone else.
If you are not satisfied with our response, you may complain to the Data Protection Authority established under the Personal Data Protection Act. If you are in the EU or UK, you may instead complain to your national supervisory authority.
10. Children
This website is aimed at researchers, students, partners and businesses, and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.
11. Other Bioloom sites & social profiles
Our internship application system at internships.bioloomislands.com is a separate system with its own forms and its own privacy notice. This policy does not cover it — please read the notice provided there before applying.
Our pages on Facebook, Instagram, YouTube and LinkedIn are governed by those platforms' own privacy policies. We link to them; we do not embed them, so simply loading this website sends nothing to those platforms. Data is exchanged with them only if you click through.
12. Changes to this policy
If we change what we collect or why, we will update this page and change the "Last updated" date at the top. Where a change materially affects you, we will make that clear rather than relying on the date alone.
13. Contact us
Questions about this policy, or want to exercise any of the rights in section 9? Email info@bioloomislands.com, or write to us at the address in section 1.