The Tamil Progressive Alliance (“TPA”, “we”) respects your privacy. This policy explains how we collect and use personal data through this website, the Inthiya Vamsavali Malayaga Valvurimai Movement registration system and related services, in line with Sri Lanka’s Personal Data Protection Act No. 9 of 2022.
What we collect
- Movement registration: name, mobile number (verified by one-time code), date of birth, district and Divisional Secretariat (or country for overseas supporters), optional location details, occupation, email, the ways you want to take part and your areas of interest.
- NIC number (required for members living in Sri Lanka): stored only as a one-way cryptographic fingerprint to prevent duplicate registrations, plus its last four characters.
- Your support for the Movement may reveal political opinion, which is special-category data. We process it only with your explicit consent.
- Advisory panel, entrepreneur and contact applications: the details you submit in those forms.
- Pledges and contributions: donor identity and status as required by law. No payments are taken while the site is in pledge mode.
Why we use it
- To register and administer your Movement membership and issue your digital card.
- To route you to your local Movement team and organise activities in your district.
- If you opt in, to send WhatsApp updates and the monthly email newsletter.
- To record pledges and contributions and meet legal reporting obligations.
Who can see it
We do not sell personal data. Access is limited to authorised TPA and Movement officers on a need-to-know basis. Local coordinators see only members in their own district, contact details are masked by default, and every reveal and export is logged. Service providers (hosting, SMS, email and, later, payment gateways) process data on our instructions only.
Your rights
You may request access to, correction of, or deletion of your personal data, and withdraw optional consents at any time from “My membership” or through the contact page (topic “Membership & personal data”).
Security and retention
Data is encrypted in transit, access-controlled and audited, and retained only as long as your membership is active or as the law requires. Hosting location will be confirmed after legal review.