Privacy Policy

1. Information We Collect

When you apply for membership, we collect the information you provide on the application form, including:

• Full name, date of birth, NIC number, occupation, and permanent address
• Contact details: mobile number and email address
• School details: index number, admission year, leaving year
• Introducer's name, membership ID, and contact number
• Payment details: bank, branch, deposit date, transaction number, and a copy of your payment slip
• A recent photograph for your digital membership card

If you register for SMS updates or use the Suggestion Box, we collect only the name, contact details, and message you choose to submit.

2. How We Use Your Information

Your data is used strictly to:

• Verify your eligibility for OBA membership and process your application
• Issue your official membership number and QR-based digital membership card
• Communicate with you about your application status, events, and official announcements
• Maintain the Association's official membership records

We do not sell, rent, or use your information for advertising, and we do not share it with third parties except as described below.

3. Sharing of Information

Your information is accessible only to authorised OBA committee members for verification and administration. We do not share your personal data with external organisations, except where required by law or to protect the rights and safety of the Association and its members.

4. Data Security

Uploaded documents (payment slips, photographs) are stored on access-restricted servers and are not publicly browsable. Membership applications are reviewed manually by the OBA secretariat before approval. While we take reasonable technical and administrative measures to protect your data, no online system can be guaranteed 100% secure, and you share information at your own discretion.

5. Data Retention

We retain membership records for as long as you remain a member and for a reasonable period afterward, for historical and record-keeping purposes consistent with the Association's constitution. Rejected applications and their supporting documents may be retained for a limited period to prevent duplicate or fraudulent submissions, after which they are deleted.

6. Your Rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your data, subject to our legitimate record-keeping obligations as a registered association
• Withdraw consent for non-essential communications (e.g. SMS announcements) at any time

To exercise any of these rights, contact the OBA Secretary using the details below.

7. Cookies

This website does not use tracking or advertising cookies. Any technical storage used (for example, to remember a form draft in your browser) stays on your own device and is never transmitted to us or any third party.

8. Third-Party Services

This site uses standard third-party services to render fonts and icons (Google Fonts, Font Awesome) and to generate QR codes and downloadable PDFs within your own browser. These services may receive standard technical request data (such as your browser type) as part of normal web delivery, but no OBA membership data is sent to them.

9. Minors

OBA membership is intended for former students of St Joseph's College, Anuradhapura, who are adults. This site is not designed to knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will always show the most recent revision. Continued use of this site after changes are posted constitutes acceptance of the updated policy.