Privacy Policy

Last updated: September 2026

1. Who We Are

Bantiya.com is operated by Bantiya Global (Pvt) Ltd, based in Sri Lanka. We run a free resource platform for Sri Lankans living, working, and studying in South Korea — including visa guides, the Download Centre, the Help Centers directory, and the community blog. We also promote Korean language classes at school.bantiya.com and event ticketing at bookingministry.com.

Questions about this policy? Email us at contact@bantiya.com.

2. What Data We Collect

We collect the minimum data needed to run our services:

• Account information: When you register, we collect your name, email address, and password (stored as a secure hash). If you sign in with Google, we receive your name, email, and Google profile photo from Google OAuth.
• Contact form submissions: When you fill in the Contact page, we collect your name, email, optional phone number, and your message.
• Usage data: We automatically record your IP address, browser type, pages visited, time spent on pages, and referring URLs to help us improve the site. This data is processed by our hosting provider and analytics tools.
• Cookies: We use a single locale cookie (bantiya_locale) to remember your language preference (English or Sinhala). No tracking or advertising cookies are set.

We do not sell your personal data to anyone, ever.

3. Why We Process Your Data

We do not use your data for profiling, behavioural advertising, or automated decision-making.

4. Who We Share Your Data With

We only share your data with the third-party services that are necessary to run the platform:

• Hosting and infrastructure: Our servers are hosted on a cloud provider that processes data on our behalf under a data processing agreement.
• Google OAuth: If you choose to sign in with Google, Google processes your sign-in data under Google's own Privacy Policy.
• Email delivery: We use a transactional email service to send password-reset and notification emails.
• Analytics: We use aggregate, anonymised analytics. No personally identifiable data is passed to analytics providers.

We do not share your data with any Korean or Sri Lankan government authority except where required by law.

5. Cross-Border Data Transfers

Bantiya.com serves users in both Sri Lanka and South Korea. Your data may be stored on servers located outside your country of residence. Where transfers occur, we ensure appropriate safeguards are in place consistent with Sri Lanka's Personal Data Protection Act (No. 9 of 2022, as amended 2025) and South Korea's Personal Information Protection Act (PIPA, as amended 2026).

6. Your Rights

Regardless of where you are based, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Withdraw consent at any time (where processing is based on consent)
• Object to processing based on legitimate interest

To exercise any of these rights, email us at contact@bantiya.com. We will respond within 30 days.

7. Data Retention

We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain it by law (for example, for tax or legal compliance purposes).

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and access controls. No system is 100% secure, and we cannot guarantee absolute security — but we take every reasonable precaution to protect your data.

9. Changes to This Policy

We may update this Privacy Policy when our practices change or when regulations require it. If we make significant changes, we will notify registered users by email. The “Last updated” date at the top of this page always reflects the most recent version.

10. Contact Us

If you have any questions about this Privacy Policy or want to exercise your rights:

• Email: contact@bantiya.com
• Online: Contact Us page