Skip to content

Your data

Data Subject Requests

Whether you are in Sri Lanka under the PDPA or in the EU/EEA under the GDPR, you can ask us for a copy of your data, have it corrected, or have it deleted. We handle every request the same way, to the same standard.

What you can ask for

Access
Get a copy of the personal data we hold about you, and an explanation of how it is used.
Rectification
Have inaccurate or incomplete data corrected. Once accounts are live, most profile fields will be editable yourself in account settings, which is faster than asking us.
ErasurePermanent
Have your account and personal data deleted. Completed within 30 days, except records we must keep by law. This is permanent and cannot be reversed.
Restriction
Have processing paused while a dispute about accuracy or lawfulness is resolved.
Portability
Receive your data in a structured, machine-readable format, or have it sent to another provider.
Objection
Object to processing based on legitimate interests, and to direct marketing at any time.
Withdraw consent
Withdraw consent for eligibility profiling, analytics or advertising, without affecting earlier processing.
Human review of an automated result
Contest an eligibility score or match result and have a person re-examine the inputs and criteria.

Make a request

Use the email address registered to your account. That is how we verify it is really you. You will get a reference number and a written acknowledgement immediately, and the 30-day statutory clock starts the moment you submit.

Goes to privacy@abroadmaster.com

0/5000

Sent straight to us, with a reference number and a confirmation email so you know it arrived.

How we handle your request

  1. We acknowledge it immediately. Submitting the form logs your request and emails you a written acknowledgement with a reference number, well inside the 3 business days we commit to.
  2. We verify your identity. Normally, sending from your registered address is enough. For a deletion or export request we may ask you to confirm from within your signed-in account, so that nobody else can delete or download your data.
  3. We act and respond within 30 days. Complex requests may be extended by up to two further months; if that happens, we tell you why inside the first 30 days.
  4. Requests are free. We may charge a reasonable fee or refuse only where a request is manifestly unfounded or excessive, and we will explain the reasoning.

What deletion actually does

  • Your account, eligibility profile, bookmarks, saved comparisons and AI Assistant history are deleted within 30 days of a verified request.
  • Community posts and reviews are either removed or permanently anonymised; you choose which when you make the request.
  • Deleted data disappears from backups within the rolling 35-day backup cycle.
  • Payment and transaction records are retained for 7 years, as Sri Lankan tax and accounting law requires. These are financial records, not profile data, and cannot be deleted on request.
  • Deletion is permanent. An active AI Assistant pass ends with the account and is not automatically refunded; request that separately under the Refund Policy.

If you are unhappy with our response

You can complain to the Data Protection Authority of Sri Lanka or, if you are in the EU/EEA, to your local supervisory authority. Full detail is in the Privacy Policy.