WFA is a regional fund dedicated to supporting women, girls, trans and intersex people across Asia. WFA is registered as a company limited by guarantee in Sri Lanka and has a subsidiary registration in Australia under the name Women’s Fund Asia Limited. WFA operates across twenty-two (22) countries and territories in South, Southeast and East Asia and works closely with grant partners, civil society organisations, donors, staff, consultants and other stakeholders to support the leadership of women, girls, trans and intersex people in bringing progressive change from within their communities.

While you use our website, we may collect the following types of personal data including but not limited to:

1. Identification and Contact Data

Examples include:

• Full name
• Address
• Telephone numbers
• Email address

2. Communications Data

The Organisation may process communications such as:

• Emails
• Letters
• Meeting notes
• Messages
• Other correspondence

3. Website and Technical Data

When individuals access the Organisation’s website, certain technical information may be collected automatically, including:

• IP address
• Browser and device information
• Cookies and analytics data
• Log data relating to website usage

Any personal data you provide on the website will be collected and used by WFA in compliance with the obligations set out under the Personal Data Protection Act No. 9 of 2022 (as amended) (“PDPA”) in accordance with our WFA Personal Data Protection Policy.

In certain cases, we require you to provide specific personal data to enable us to deliver our services, comply with legal obligations or enter into a contractual relationship with you. Where such information is necessary, we will clearly indicate it at the point of collection. Failure to provide the required personal data may result in our inability to:

• Respond to your inquiries and provide services
• Manage client relationships and project communications
• Customize marketing strategies and improve our services
• Send newsletters, marketing emails or promotional content (with your consent)
• Analyse website traffic and campaign performance
• Comply with legal and regulatory obligations

We process your data under the following legal grounds:

• Consent: For marketing communications and cookies.
• Legitimate interests: To grow our business, improve services and prevent fraud.
• Legal obligation: Where required by law or regulation.

We will in no event sell, trade or disclose to third parties any of your personal data except as stated below.

We may share your personal data with the following parties:

• Third-party service providers: Entities engaged under contractual agreements, such as hosting providers, CRM platforms and email marketing tools. Please note that your bank account, credit or debit card information will only be shared with service providers responsible for processing your payments.
• Advertising partners: For the purpose of campaign tracking and performance analysis.
• Legal, regulatory or governmental authorities: Where required by law, in connection with judicial proceedings or as otherwise mandated by applicable regulations.
• Our members of staff and subcontractors: Individuals or entities bound by confidentiality obligations who assist us in providing our services.

We implement appropriate technical and organizational measures to safeguard your data from unauthorized access, alteration, disclosure or destruction. However, no method of transmission over the internet is 100% secure.

We retain your personal data only for as long as necessary to:

• Fulfil the purposes outlined under Clause 3 in this Policy, unless a longer retention period is required or permitted by law.
• Comply with our legal obligations
• Resolve disputes and enforce our agreements

You retain full control over how we use your personal data. We will not collect any personal information from you without your knowledge and consent. You are entitled to the following rights:

• Right of access – You may request copies of your personal data held by us.
• Right to rectification or erasure – You may request that WFA correct any information you believe is inaccurate, complete any information you believe is incomplete or erase your personal data, subject to applicable conditions.
• Right to object or restrict processing – You may object to or request the restriction of WFA’s processing of your personal data, subject to applicable conditions.
• Right to withdraw consent – You may withdraw your consent to receive marketing communications at any time by unsubscribing from our mailings or by sending us a written request to remove you from our client list.
• Right to data portability – You may request that WFA transfer the personal data we have collected about you to another organization or directly to you, subject to applicable conditions.

To exercise any of these rights, contact us at: comms@wf-asia.org.

WFA will generally facilitate the exercise of data subject rights free of charge. However, where a request is manifestly excessive, repetitive or is likely to result in disproportionate administrative or operational costs, the Organisation reserves the right to charge a reasonable fee to cover such costs, in accordance with PDPA.

We may process or store your data outside your country of residence, including in jurisdictions that may not have equivalent data protection laws. Where required, we implement safeguards such as Standard Contractual Clauses or other legal mechanisms.

The website may contain links to other websites of interest. Once you use these links to leave the WFA website, please note that WFA does not have any control over such other websites or advertisements and WFA shall not be responsible for the protection and privacy of any information which you provide whilst visiting such sites. Such sites are not governed by this Privacy Notice or WFA Personal Data Protection Policy.

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. When you visit our websites, we may collect information from you automatically through cookies or similar technology. Our website may use cookies to:

• Improve site performance
• Analyse site traffic
• Remember your preferences

You may adjust your browser settings to refuse cookies, but some site features may not function properly.

In the event of unauthorized disclosure of any personal information that is likely to result in a high risk to your rights and freedoms as a data subjects under PDPA, we will promptly notify you of such an occurrence to mitigate any potential risk of residual harm.

Our services are not intended for individuals under the age of sixteen (16) and we do not knowingly collect personal data from minors. If we become aware that personal data relating to a minor has been collected, we will promptly delete such data or where appropriate, obtain the explicit consent of the parent or legal guardian for the processing of the child’s personal data for one or more specified purposes.

We reserve the right to change or update this Privacy Notice at any time. The amended Notice will be posted on this page with an "Updated Date". We encourage you to regularly review this Notice to be informed of how we are protecting your personal data.

If you have any questions, concerns or requests regarding this Privacy Notice, our Cookie Policy, the way we handle your personal data or to exercise your legal rights, you may directly contact us at:

Email: comms@wf-asia.org

Address: 48 Rosmead Place, Colombo 07, Sri Lanka

Website: https://www.womensfundasia.org