Privacy Policy
Last Updated: 13th October 2026 • Published by Vikasha Community Based Organisation (විකාශා ප්රජා මූල සංවිධානය)
At Vikasha Community Based Organisation (CBO), we are committed to safeguarding the privacy, confidentiality, and security of our community residents, consumers, and website visitors. This Privacy Policy sets out our policies regarding the collection, use, disclosure, and protection of personal data in accordance with the Sri Lanka Personal Data Protection Act No. 9 of 2022 (PDPA) and Central Bank of Sri Lanka (CBSL) e-commerce regulations.
1Information We Collect
To maintain municipal utility service, calculate metered tariffs, and process payments, we collect and store:
- Consumer & Property Identifiers: Water account number (e.g. #135), account holder's legal name, and physical service address in Magammana (e.g. Ranmal Uyana, Kothalawela Road, Batahena).
- Contact Information: Resident mobile phone number and optional email address for dispatching monthly billing notices, SMS reminders, and payment receipts.
- Meter Reading & Consumption Data: Baseline meter index, previous and current meter readings (in m³ / units), consumption history, and reading dates recorded by field officers.
- Transaction & Audit Logs: Payment reference numbers (Transaction ID), bill reference number, amount paid, payment method type, and timestamp.
Vikasha CBO does NOT collect, store, or process full credit card numbers, debit card numbers, or CVV/CVC security codes on our servers. All online payment transactions are processed through PayHere, a PCI-DSS certified payment aggregator licensed and regulated by the Central Bank of Sri Lanka (CBSL). Transactions use end-to-end 256-bit TLS 1.3 encryption and mandatory 3D-Secure OTP verification through your issuing bank.
2How We Use Your Information
Your personal data is used solely for the legitimate operational purposes of the community water supply project:
- To calculate and generate progressive monthly water tariffs compliant with official NWSDB slabs.
- To issue electronic invoices, PDF bills, and verified payment receipts.
- To notify residents of emergency water pipe repairs, planned supply interruptions, or unexpected bursts in the Magammana distribution network.
- To audit revenue, reconcile financial records, and compile mandatory annual reports for the General Assembly and the Department of Community Water Supply (DCWS).
3Information Sharing & Third Parties
We treat consumer data as strictly confidential. We never sell, lease, or monetize consumer information. Information is disclosed only under these circumstances:
- Licensed Payment Gateway: Transaction amounts and account numbers are shared securely with PayHere to complete payment authorization.
- Regulatory & Legal Compliance: Disclosure to government authorities or statutory courts if required by Sri Lankan law or regulatory mandates under the National Water Supply & Drainage Board Act.
4Data Protection & Technical Security
We implement comprehensive security controls to protect community records:
- Transport Layer Security (TLS 1.3) encryption across all public and administrative interfaces.
- Strict rate-limiting and input sanitization to prevent unauthorized automated account scraping.
- Masked telephone numbers (e.g.
077 ••• •589) on public inquiry screens to protect consumer privacy. - Role-based access control restricting administrative operations to authorized CBO executive committee officers.
5Consumer Rights Under Sri Lankan Law
Under the Personal Data Protection Act No. 9 of 2022, community consumers have the right to:
- Verify the accuracy of their registered household account information and request corrections (e.g., updated contact mobile or ownership transfer).
- Inspect their past meter reading logbook and billing history at the CBO community office.
- File inquiries or grievances regarding data handling directly with our data protection officer.
Privacy Officer & Inquiries
If you have any questions regarding your data privacy, please contact: