Business Growth
A Website for Your Small Business in Sri Lanka: Where to Start
You don’t need a big budget to look professional online. The pages, features and steps that matter for small businesses.
තව කියවන්නBusiness Growth
Sri Lanka’s Personal Data Protection Act: What It Means for Your Website
Sri Lanka’s Personal Data Protection Act No. 9 of 2022 sets rules for how organisations collect and use personal data. If your website has forms, accounts or a shop, it applies to you. This is a general overview, not legal advice.
Collect only what you need
Every form field should have a purpose. Don’t ask for NIC numbers or birthdays unless you genuinely need them.
Be transparent
Publish a clear privacy policy explaining what you collect, why, how long you keep it and how people can contact you about their data.
Get consent where needed
Use clear opt-ins for newsletters and marketing messages. Don’t pre-tick boxes.
Keep data secure
Use SSL, strong passwords, role-based access, secure hosting and regular backups. Limit who can export customer lists.
Respect requests
Have a process for people who ask to see, correct or delete their data.
Frequently asked questions
Do small businesses need to comply?
The Act applies broadly. Check the current requirements and timelines with a legal advisor.
Can you add a privacy policy and consent options?
Yes, we include policy pages and consent-friendly forms in our builds.