Services How it works About Book a call →
Legal

Privacy Policy

Last updated: 6 June 2026

This policy explains how Dotsite handles your personal data in line with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka. It is provided as a general, good-faith summary and is not legal advice — please have it reviewed by a qualified Sri Lankan attorney before relying on it for your practice.

01Who we are

Dotsite ("Dotsite", "we", "us", or "our") is a pay-per-performance advertising agency based in Sri Lanka that runs Meta and Google advertising campaigns exclusively for dental practices. For the purposes of the Personal Data Protection Act, No. 9 of 2022, Dotsite acts as the "controller" of the personal data you provide to us through this website.

If you have any questions about this policy or how we handle your data, contact us at dotsite.official@gmail.com.

02The data we collect

We only collect the information we genuinely need to respond to you and run our service:

  • Information you give us — when you submit our booking form or contact us, we collect your name, practice name, email address, phone/WhatsApp number, practice location, preferred call date and time, and anything you tell us about your goals.
  • Communications — records of messages you send us by email, WhatsApp, phone, or our form.
  • Technical data — limited information your browser shares automatically, such as device type and general usage, where analytics or our form provider record it.

We do not knowingly collect special-category data (such as health records) and ask that you do not send patient data to us.

03How we use your data

  • To respond to your enquiry and schedule or confirm a strategy call;
  • To provide, manage, and improve our advertising services if you become a client;
  • To communicate with you about your campaign, reports, and account;
  • To meet our legal, accounting, and regulatory obligations;
  • To protect our rights and prevent fraud or misuse.

We do not sell your personal data, and we do not use it for unrelated marketing without your consent.

04Our lawful basis

Under the Personal Data Protection Act, we process your data on one or more of the following bases: your consent (which you give by submitting our form); the performance of a contract with you; our legitimate interests in operating and growing our business in a way that does not override your rights; and compliance with the law. You may withdraw consent at any time (see "Your rights").

05Sharing & service providers

We share data only where necessary, with trusted parties who process it on our behalf or as part of delivering our service:

  • Form & email delivery — our website form is processed by a third-party form service (Web3Forms) that delivers your submission to our email inbox.
  • Advertising platforms — where you are a client, campaign data is processed through Meta (Facebook/Instagram) and Google Ads under their own terms and privacy policies.
  • Messaging & communications — WhatsApp, our email provider, and similar tools we use to talk with you.
  • Professional advisers & authorities — accountants, lawyers, or regulators where required by law.

These providers may process data outside Sri Lanka (see "International transfers").

06Cookies & analytics

This website uses only essential functionality by default. If we add analytics or advertising cookies (for example, to measure campaign performance), we will identify them here and, where required, ask for your consent. You can control or block cookies through your browser settings; some features may not work if you do.

07How long we keep it

We keep your personal data only as long as needed for the purposes above — typically for the duration of our discussions or engagement, plus any period required for legal, tax, or accounting reasons. When data is no longer needed, we securely delete or anonymise it.

08Your rights

Subject to the Personal Data Protection Act, you have the right to:

  • Access the personal data we hold about you;
  • Correct data that is inaccurate or incomplete;
  • Withdraw consent and request erasure of your data;
  • Object to or restrict certain processing;
  • Complain to the relevant data protection authority in Sri Lanka.

To exercise any of these, email dotsite.official@gmail.com. We will respond within a reasonable time as required by law.

09How we protect your data

We take reasonable technical and organisational measures to keep your data safe and limit access to it. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10International transfers

Some of our service providers (such as advertising platforms and the form/email services) are based outside Sri Lanka, so your data may be transferred and stored abroad. Where this happens, we take steps to ensure your data continues to receive an appropriate level of protection.

11Children

Our services are intended for dental-practice owners and decision-makers. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

12Changes & how to contact us

We may update this policy from time to time. The "last updated" date above shows when it last changed; material changes will be reflected here. For any privacy question or request, reach us at: