MonetaBrief Privacy Policy

Effective date : 15 July 2026 Last updated: 15 July 2026

This Privacy Policy explains how Moneta Brief collects, uses, discloses, stores, transfers and protects personal data when you use our Services.

We are committed to processing personal data in accordance with the Personal Data Protection Act, No. 9 of 2022 (“PDPA”), and any applicable regulations, directives and guidance issued by the Data Protection Authority of Sri Lanka.

1. Who we are

Controller: Moneta Brief

Mailing Adress: 396/3 Saram Mw, Kadawatha, Post Code 11850, Sri Lanka

Email: monetabrief@gmail.com

2. Personal data we collect

We may collect the following types of personal data:

• Identity and contact data, such as your name, email address, phone number and postal address.

• Account data, such as login details, subscription status and preferences.

• Payment and billing data, such as payment reference details and transaction history, where relevant.

• Technical data, such as IP address, browser type, device identifiers, operating system and access logs.

• Usage data, such as pages viewed, reading habits, clicks, session duration and referral sources.

• Communication data, such as enquiries, complaints, feedback and correspondence.

• Marketing data, such as newsletter preferences, consent records and unsubscribe history.

• User content, such as comments, posts, uploaded files, images or tips.

• Any other data you choose to submit to us or that we lawfully obtain from third parties.

3. How we collect data

We collect personal data:

• directly from you when you register, subscribe, contact us, comment, submit content or manage preferences;

• automatically through cookies, pixels, analytics tools and similar technologies;

• from service providers, including payment processors, analytics providers and hosting providers;

• from third parties where you authorise us to do so or where permitted by law.

4. How we use personal data

We use personal data for the following purposes:

• to provide, operate and improve the Services;

• to create and manage accounts;

• to process subscriptions, payments and billing;

• to send newsletters, alerts and marketing communications where permitted;

• to personalise content, advertising and user experience;

• to analyse traffic, measure performance and improve editorial quality;

• to detect fraud, security incidents and misuse;

• to comply with legal and regulatory obligations;

• to respond to enquiries, complaints and requests;

• to enforce our Terms and protect our rights and the rights of others. 5. Lawful grounds for processing

Where applicable, we rely on one or more of the following grounds:

• your consent;

• performance of a contract or steps taken at your request before entering into a contract;

• compliance with legal obligations;

• our legitimate interests, provided those interests do not override your rights and freedoms.

Where we rely on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Cookies and similar technologies

We use cookies, pixels, tags and similar technologies to operate the Services, remember preferences, analyse performance and support advertising. Essential cookies are required for the Services to function. Non-essential cookies, including analytics and advertising cookies, will only be used where permitted by law and, where required, after you have given consent through our cookie banner or preference centre.

For more information, please see our Cookie Policy.

7. Disclosure of personal data

We may disclose personal data to:

• our employees, officers and authorised personnel on a need-to-know basis;

• service providers and processors acting on our instructions, including hosting, payment, email, analytics, customer support, security and content delivery suppliers;

• advertising and marketing partners, where permitted by law and subject to your consent where required;

• professional advisers such as lawyers, auditors and insurers;

• law enforcement agencies, courts, regulators or other public authorities where required by law or necessary to protect rights, safety or security;

• third parties involved in a merger, acquisition, restructuring or sale of assets, subject to confidentiality and lawful processing safeguards;

• any other person with your consent or where otherwise permitted by law.

8. Suppliers and sub processors

We use certain third-party suppliers and subprocessors to provide the Services.

9. Cross-border transfers

Personal data may be transferred to, or accessed from, countries outside Sri Lanka. We will only do so where permitted under the PDPA and applicable rules. Where cross-border transfers occur, we will take appropriate safeguards, which may include:

• contractual protections with recipients and suppliers;

• technical and organisational security measures;

• reliance on approved transfer instruments or other lawful mechanisms recognised under Sri Lankan law;

• consent where required by law; and

• other safeguards required by the Data Protection Authority.

Where relevant, you may contact us for further information on cross-border transfers and the safeguards we use.

10. Retention of personal data

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law, regulation, accounting requirements, dispute resolution, audit, enforcement or legitimate business needs.

Indicative retention periods may include:

• account data: for the duration of the account, plus a reasonable period thereafter for legal and operational purposes;

• billing records: for the period required by tax, accounting and audit laws;

• newsletter consent records: until consent is withdrawn and for a reasonable audit period thereafter;

• analytics logs: for a limited period necessary for security, measurement and diagnostics;

• support correspondence: for as long as necessary to resolve the issue and maintain records.

Where possible, we will anonymise or securely delete data once it is no longer needed.

11. Security

We use reasonable technical and organisational security measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, authentication, encryption, network security, logging, staff training and supplier due diligence.

No system is completely secure. If we become aware of a personal data breach, we will assess the incident and take steps required under the PDPA, including notifications where legally required.

12. Data subject rights

Subject to any applicable exceptions under the PDPA, you may have the right to:

• access your personal data;

• request correction or completion of inaccurate or incomplete data;

• withdraw consent where processing is based on consent;

• object to certain processing activities;

• request erasure of personal data where legally applicable;

• request restriction of processing in appropriate circumstances;

• receive certain information about the processing of your personal data;

• lodge a complaint with the Data Protection Authority of Sri Lanka.

If you wish to exercise any of these rights, please contact us using the details below.

13. Marketing communications

We may send newsletters, alerts and promotional messages where permitted by law. You can opt out at any time by using the unsubscribe link in the communication or by contacting us directly.

14. Automated decision-making and profiling

We may use analytics and profiling to personalise content, improve the Services and tailor advertising. Where required by law, you may object to such processing or request human review.

15. Children

Our Services are not intended for children under 18 without parental or guardian involvement. We do not knowingly collect personal data from children under 18 without appropriate consent where required. If you believe a child has provided us with personal data, please contact us.

16. Complaints and contact

For privacy enquiries, rights requests or complaints, contact:

Privacy Contact

Moneta Brief

Mailing address: 396/3, Saram Mw, Kadawatha, Post Code 11850 Email: monetabrief@gmail.com

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any material changes will be posted on the Services and, where appropriate, notified to you by email or other reasonable means.

MonetaBrief Cookie Policy

Effective date: 15 July 2026 Last updated: 15 July 2026

This Cookie Policy explains how Moneta Brief uses cookies and similar technologies on our Services.

1. What cookies are

Cookies are small text files stored on your device when you visit a website. They help us recognise your device, remember preferences and improve the performance and functionality of the Services.

2. Types of cookies we use

We may use the following categories of cookies:

Essential cookies

These are necessary for the Services to function properly. They support security, page navigation, login, load balancing and basic site functionality.

Performance and analytics cookies

These help us understand how visitors use the Services, which pages are popular and how content is performing.

Functional cookies

These remember your preferences, such as language settings or display choices.

Advertising and personalisation cookies

These are used to deliver more relevant content or advertising and to measure campaign effectiveness.

3. Third-party cookies

Some cookies are placed by third-party suppliers, including analytics providers, advertising partners, content delivery networks and technical service providers. These parties may collect information about your browsing activity over time and across websites.

4. Consent and control

Where required by law, we will only use non-essential cookies after you have given consent through our cookie banner or preference centre. You can change your cookie settings at any time through the cookie preferences tool on our website, or by changing your browser settings. Disabling certain cookies may affect the functionality of the Services.

5. Updates to this Cookie Policy

We may update this Cookie Policy from time to time. If the changes are material, we will provide a prominent notice on the Services.