1. Scope of this notice

This notice covers the public website at www.ncit.lk. It explains what information the website collects, why, who it is shared with, and the choices available to you.

The NCIT member portal is a separate system with its own sign in, its own records and its own terms. This notice does not describe it. Membership correspondence handled by the secretariat over email is described in section 3 because it begins on this site.

2. Who we are

The Northern Chamber of Information Technology (NCIT) is the industry chamber for the information and communication technology sector in the Northern Province of Sri Lanka, established in 2016. The chamber is the controller of the information described here.

Office: No.95, KKS Road, Jaffna 40000, Northern Province, Sri Lanka. General enquiries: support@ncit.lk. Telephone: +94 77 086 9328.

3. Information we collect

3.1 Information you choose to send us

If you write to the chamber, what you send is what we hold: your message, your email address, and anything you attach. Nothing more is gathered from you in the background.

A membership application is the main case. Applicants download a form, complete it, and email it to hello@ncit.lk with supporting documents and a payment receipt. That correspondence contains the details the form asks for, and it sits in the chamber’s mailbox so the secretariat can assess the application against the eligibility rules in the bylaws.

3.2 Information collected automatically

Analytics, only with your consent. The site uses Google Analytics to count visits and see which pages are read. It is not loaded until you press Accept on the notice at the foot of the page. Until then, and permanently if you press Decline, no request is made to Google and nothing is recorded. When it is running, Google receives the page viewed, an approximate location derived from the network address, and the device and browser type, in the chamber’s analytics property G-NHLCZKK609.

Page speed measurement. The site records how quickly pages load, using the measurement built into our host. It collects timings and the page they belong to. It sets no cookie and does not identify you, which is why it sits outside the consent question.

Server logs. Like every web server, the host keeps short term request logs that include the network address a request came from and the browser that made it. These are operational records used to serve the site and investigate faults.

4. Cookies and local storage

This website sets no cookies of its own. Two things are stored in your browser, and only two:

A Google Analytics cookie, and only if you accept. It holds a randomly generated identifier whose job is to tell a returning visit from a new one so the same person is not counted twice. The site never gives it your name.
Your answer to the consent notice, kept in your browser’s local storage so you are not asked on every page. It is not a cookie, it is never transmitted, and it is specific to that browser.

No advertising cookies are set, and the site carries no advertising or remarketing tags of any kind.

5. How we use information

To answer your enquiry or assess your membership application.
To understand which pages are read, so the chamber can improve what it publishes. This is done in aggregate and only with your consent.
To keep the site running, secure and reasonably fast.

We do not use your information to make automated decisions about you, and we do not profile you.

6. Your choices

Analytics is a choice you make, and you can change it at any time. Your browser also gives you controls of its own: you can clear site data, block cookies, or use a private window, and the site works the same either way.

Two service providers are involved in running this site, and no others:

Google, which provides Google Analytics, and only where you have accepted.
Vercel, which hosts the site and provides the page speed measurement.

The chamber does not sell your information, does not share it for anyone else’s own purposes, and does not pass it to advertisers. Information may be disclosed where the chamber is required to do so by law.

8. Where information is processed

The chamber is in Sri Lanka. The two providers named above operate globally, so information handled by them, including analytics data and server logs, is processed on infrastructure outside Sri Lanka under their own terms. If this matters to you, declining analytics stops anything being sent to Google at all.

9. How long information is kept

Your consent choice stays in your browser until you change it or clear your site data. Nobody else can read it.
Analytics data is held by Google under the retention period set on the chamber’s property.
Server logs are short lived operational records held by the host.
Correspondence and membership files are kept by the secretariat for as long as needed to administer the membership and to meet the chamber’s record keeping obligations. Ask the secretariat if you need the position for your own file.

10. Security

The site is served over HTTPS only, with HTTP Strict Transport Security, so a browser will not connect to it insecurely. A Content Security Policy restricts what the page is allowed to load, and the site sends X-Content-Type-Options, Referrer-Policy and a Permissions-Policy that switches off camera, microphone, geolocation, payment and USB access.

No payment is ever taken on this website, and it asks for no card or bank details. If a page ever appears to do so, it is not ours. No method of transmission over the internet is completely secure, and email in particular is not: please do not send identity document numbers or bank details by email unless the secretariat has asked you to.

11. Third party content and links

The contact page embeds a Google map so you can find the office. That frame is served by Google and is subject to Google’s own terms. The site also links out to the chamber’s social accounts, to member and partner organisations, and to government bodies. Once you follow a link, you are on someone else’s site and their notice applies, not this one.

12. Children

This website is aimed at businesses, professionals and institutions. It is not directed at children and collects nothing from them directly, because no form on this site submits anything. Where a membership category involves a student, the application is made by the applicant or their institution to the secretariat by email.

13. Changes to this notice

This notice is updated when the website’s practice changes, and the date at the top records the last revision. Material changes will be reflected here rather than announced individually. The current version is the one on this page.

14. Contact and requests

To ask what the chamber holds about you, to ask for it to be corrected or removed, or to raise a concern about how it has been handled, write to support@ncit.lk, telephone +94 77 086 9328, or use the contact page. Membership matters are best sent to hello@ncit.lk. Post reaches the secretariat at the office address in section 2.