AyuLantra Wellnessayulantra.com

Privacy notice

Last updated 23 October 2026

Draft: awaiting clinic approval.

This notice explains how AyuLantra Wellness (“we”) uses the personal information you give us when you book an appointment, as required by Sri Lanka's Personal Data Protection Act, No. 9 of 2022.

Who is responsible

AyuLantra Wellness, No. 3017, Stage 3 Pubudu Mawatha, Anuradhapura 50000, Sri Lanka, is responsible for your information. For any privacy question, contact the clinic (Data Protection Officer to be named): ayulantra@gmail.com, +94 78 755 5900 (phone and WhatsApp), or by post to No. 3017, Stage 3 Pubudu Mawatha, Anuradhapura 50000, Sri Lanka.

What we collect

  • Your name.
  • The ways you choose to be contacted: WhatsApp number, phone number and/or email address.
  • How you would like to be reminded.
  • Your appointment: doctor, type of visit, date and time, and any short note you add.
  • Your device's time zone, so we can show appointment times in your local time if you are abroad.
  • The time you gave your consent.

If you book for someone else, such as a child or a family member, please make sure they (or their parent or guardian) agree.

Why we use it

  • To book, confirm, change and cancel your appointment.
  • To send you confirmations and reminders, and to tell you if anything changes.
  • To keep the clinic's appointment book, which our doctors use to prepare for your visit.

We use your information because you agree to it when you book. We do not sell it, and we do not use it for advertising or marketing.

Who can see it

Only our two doctors can see your details. We use these service providers to run the booking system:

  • Supabase: stores the appointment book (data centre in Tokyo, Japan).
  • Vercel: runs this website.
  • Google Calendar: holds each doctor's calendar. Calendar entries show only your name and the type of visit.
  • Resend or Google (Gmail): sends our emails.
  • WhatsApp (Meta): carries the WhatsApp messages we send you.
  • Cloudflare Turnstile: a security check on the booking form that stops automated spam. It looks at technical information about your browser.

Some of these providers handle information outside Sri Lanka. They only use it to provide their service to us. We share information with others only if the law requires it.

How long we keep it

We keep your details for as long as you are a patient of the clinic, and for as long as the law requires us to keep clinic records. After that we delete them. You can ask us to delete them sooner (see below).

Your rights

Under the Personal Data Protection Act you can ask us to:

  • show you the information we hold about you;
  • correct or complete it;
  • delete it, where we do not need to keep it by law;
  • stop using it, by withdrawing your consent. This will not affect anything we did before.

Contact us: ayulantra@gmail.com, +94 78 755 5900 (phone and WhatsApp), or by post to No. 3017, Stage 3 Pubudu Mawatha, Anuradhapura 50000, Sri Lanka. We will reply within the time the law allows. If you are not happy with our answer, you can complain to the Data Protection Authority of Sri Lanka.

Cookies

The booking pages do not use advertising or tracking cookies. The security check may use technical information or cookies only to tell people from automated programs. The clinic dashboard uses a cookie to keep our doctors signed in.

Keeping it safe

Your information is sent over encrypted connections, access is limited to our doctors, and the link in your confirmation that lets you change your appointment is unique to you. Please do not share that link.

Changes

If we change this notice, we will update it on this page and change the date at the top.