Who We Are

The Hope House of Ceylon (HHC) is a non-profit organisation (stichting) registered in the Netherlands. We also work with contributors connected to Sri Lanka, where registration is planned but not yet complete. This policy explains how we collect, use, and protect personal data when you visit our website or interact with our services.

Last updated: March 2026

What Data We Collect

We collect personal data only when you actively provide it:

• Contact form — your name, email address, subject, and message, submitted voluntarily through our contact page.

We do not use cookies, analytics, tracking pixels, or any form of behavioural profiling. We do not collect data about your browsing behaviour on our site.

How We Use Your Data

Information submitted through the contact form is used solely to respond to your enquiry. We do not use it for marketing, sell it to third parties, or process it for any other purpose.

Third-Party Services

Our website relies on a small number of external services:

• Web3Forms — processes contact form submissions on our behalf. Your name, email, and message are transmitted to Web3Forms when you submit the form. Web3Forms acts as a data processor under GDPR. See their privacy policy.
• YouTube (privacy-enhanced mode) — we embed a video on our Asymmetry exhibition page using YouTube's privacy-enhanced mode (youtube-nocookie.com), which does not set tracking cookies unless you choose to play the video.
• Cloudflare — our website is hosted on Cloudflare's network. Cloudflare may process connection metadata (such as IP addresses) for security and performance purposes. See Cloudflare's privacy policy.

Cookies

This website does not set any first-party cookies. We do not use analytics cookies, advertising cookies, or social-media tracking cookies.

The YouTube embed on our Asymmetry exhibition page may set cookies if you interact with the video player. These are managed by YouTube/Google and are subject to Google's privacy policy.

Data Retention

Contact form submissions are retained only as long as necessary to respond to your enquiry. We do not maintain long-term databases of personal information submitted through the website.

Your Rights Under GDPR

If you are located in the European Economic Area, you have the right to:

• Access — request a copy of any personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your personal data.
• Restriction — ask us to limit how we process your data.
• Objection — object to our processing of your data.
• Portability — request your data in a portable format.

To exercise any of these rights, please contact us through our contact page.

Legal Basis for Processing

We process personal data under Article 6(1)(f) GDPR — legitimate interest — to respond to enquiries submitted voluntarily through our contact form.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated date. We encourage you to review this page periodically.