Privacy Policy
Last updated: 8 November 2026
1. Who I am
This policy explains how personal data is collected and used through isharidesilva.com, the personal website of Ishari De Silva. The site is run by Stratgy Ltd, a private limited company registered in England and Wales (company number 16505157). Stratgy Ltd is the data controller for that data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. In this policy, “I”, “me” and “my” mean Ishari De Silva and Stratgy Ltd. You can contact me about anything in this policy at ishari@isharidesilva.com.
2. What I collect
I only collect personal data you choose to give me:
- Through the contact form: your name, email address, company (optional) and your message.
- By email: your email address and anything you include in your message.
The site does not use analytics or advertising tools, and I do not use it to track you or build a profile of you. Like any website, the servers that deliver it automatically process technical information such as your IP address and browser type, which is needed to show you the site and keep it secure.
3. How I use it, and why I am allowed to
| What I use it for | Lawful basis |
|---|---|
| Replying to your enquiry and any follow-up conversation | Legitimate interests: responding to people who contact me |
| Discussing a possible board, advisory or trustee role you have contacted me about | Legitimate interests, or steps taken at your request before entering an agreement |
| Keeping the site secure and working | Legitimate interests: protecting the site and its visitors |
| Meeting legal obligations | Legal obligation |
I will not send you marketing or add you to a mailing list, and I will not sell or rent your personal data to anyone.
4. Who I share it with
I share personal data only with the service providers needed to run the site and handle your message:
- Cloudflare, which hosts and protects the site;
- Formspree, which delivers contact form messages to my inbox;
- my email provider, which stores the messages I receive.
They act on my instructions and must keep your data secure. I may also share data where the law requires it.
5. International transfers
Some of these providers may process data outside the UK, including in the United States. Where they do, the transfer is protected by safeguards recognised under UK law, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.
6. How long I keep it
I keep contact form messages and related emails for up to two years after our last contact, unless we go on to work together, in which case I keep what is needed for that relationship. After that, I delete them.
7. Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the personal data I hold about you;
- ask me to correct data that is wrong or incomplete;
- ask me to delete your data;
- object to, or ask me to restrict, how I use it;
- ask for your data in a portable format, where this applies.
To use any of these rights, email ishari@isharidesilva.com. I will reply within one month. There is usually no charge.
8. Keeping your data secure
I take sensible steps to protect your data, including using secure, encrypted connections for the site and reputable providers with strong security standards. No method of sending data over the internet is completely secure, so I cannot guarantee absolute security.
9. Complaints
If you have a concern about how I handle your data, please contact me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk.
10. Changes to this policy
I may update this policy from time to time. The date at the top shows when it was last changed.