Privacy policy.

Who is responsible

This website is operated by Dinuka Gunaratne, a sole proprietor who practises as Dinukafication, an independent practice separate from any employer. Dinukafication is not a company.

Canadian private sector privacy law requires one identified person to be accountable for personal information. For Dinukafication that person is Dinuka Gunaratne. Privacy questions, access requests and complaints go to dinukagunaratne@gmail.com.

The practice operates from Vancouver, British Columbia, Canada. Privacy enquiries are handled by email rather than by post, so no mailing address is published on this site.

The short version

This site is five pages of writing. It does not ask you for anything.

• There is no contact form, no sign-up form and no account to create here.
• This site sets no cookies and stores nothing in your browser.
• There is no analytics, no advertising and no tracking pixel of any kind.
• No payment is taken on this site.
• Booking a call and subscribing to the newsletter both hand you to a separate company. You give your details to that company rather than to this site.

The sections below cover the few places information is still collected.

Information collected when a page loads

This site is published on Netlify. Like any web host, Netlify's servers record the requests made to it. Those records can include your IP address, the date and time, the page requested, the referring page, and what your browser reports about itself such as browser and operating system. This is automatic and is an ordinary part of serving a website. It is used to deliver the site, keep it available and protect it from abuse.

Page text and styling come from the site itself. The typefaces do not: they are fetched from Google Fonts when a page loads. Making that request discloses your IP address and your browser information to Google, because your browser has to connect to Google's servers to collect the font files. Google states that it does not use Google Fonts requests to build advertising profiles. This is the only third party contacted automatically when a page loads.

If you would rather not contact Google at all, most browsers and content blockers can block requests to fonts.googleapis.com and fonts.gstatic.com. The site stays readable without them and falls back to typefaces already on your device.

Booking a call

Every link to book a call on this site leads to Calendly, a scheduling service. Booking happens on Calendly, not here.

When you book you give Calendly what its form asks for. That normally means your name, your email address, your time zone, and your answers to the short questions asked at booking about what is going on in your career. That information is used to hold the appointment, to send you a confirmation and reminders, and to prepare for the call. What you write in those answers is read before the call.

Calendly is operated from outside Canada and handles that information under its own privacy notice and terms. Read it before you book if you want to know how it treats your information.

What you say in the booking questions and on the call is treated as described under confidentiality in the coaching terms. Please keep sensitive detail out of a booking form and bring it to the conversation instead.

The newsletter

Every link to subscribe leads to beehiiv, the service that runs the newsletter. Subscribing happens on beehiiv, not here.

You give beehiiv your email address, and the form asks where you are in your career so the welcome series matches your stage. beehiiv also records the ordinary delivery information an email platform collects, which can include whether a message was delivered, opened or clicked, and the approximate location and device derived from that activity.

That information is used to send the newsletter and to understand which issues are useful. Subscribing and booking a call are separate decisions, and neither one signs you up for the other.

Every issue carries a one-click unsubscribe link, and using it stops the newsletter. You can also write to dinukagunaratne@gmail.com and ask to be removed. Canada's anti-spam legislation allows ten business days to action a request to stop; unsubscribing through the link in an email takes effect immediately.

beehiiv is operated from outside Canada under its own privacy policy.

Canada's anti-spam legislation requires a commercial email to identify its sender, give a mailing address and a way to make contact, and carry a working unsubscribe. If anything in an issue of the newsletter falls short of that, please say so at dinukagunaratne@gmail.com and it will be fixed.

Why information is collected

Information is collected only to:

• deliver this website and keep it working and secure;
• schedule, prepare for and hold a call you asked for;
• send the newsletter to people who asked for it;
• answer a message you send, and keep a record of what was agreed;
• meet legal, tax and record keeping obligations.

Personal information is not sold, rented or traded. It is not used for advertising. It is not shared with anyone other than the providers named in this policy, except where the law requires disclosure.

Consent, and how to withdraw it

Consent is asked for where it matters rather than through a banner. Booking a call is your consent to the booking information being used to hold and prepare for that call. Subscribing is your express consent to receive the newsletter.

You can withdraw consent at any time. Unsubscribe from any issue to stop the newsletter. Use the link in your confirmation email to cancel a booking. Write to dinukagunaratne@gmail.com to ask that information held about you be deleted.

Withdrawing consent can mean a service is no longer possible: cancelling a booking means the call will not happen. Some records may have to be kept where the law requires it.

Cookies and similar technologies

This website sets no cookies. It uses no local storage, no session storage and no browser database. There is no cookie banner here because there is nothing on this site to consent to.

One small script runs on the writing page, to filter the list by topic. It runs entirely in your browser, stores nothing, and sends nothing anywhere.

Calendly and beehiiv are separate websites and they do set cookies and use similar technologies once you arrive on them. Their notices, linked above, cover that. Controls for cookies set by other sites are in your browser settings.

Information handled outside Canada

Canadian privacy regulators expect this to be said plainly, so: information connected with this site is handled outside Canada.

• Netlify hosts the site and holds the server records described above.
• Google Fonts receives your IP address when a page loads.
• Calendly holds booking information.
• beehiiv holds newsletter subscriber information.

All four are operated from the United States and may store or process information there or in other countries. While information is in another country it is subject to the laws of that country, and the courts, law enforcement and national security authorities there may be able to require access to it. No contract or policy can override those laws. This is true of most services of this kind, and it is set out here so that the choice to use them is an informed one.

Storage locations and subprocessors are set by those companies rather than here, and they can change. The current position for each is the one published in its own notice, linked above.

How long information is kept

No database is run for this site. Information sits with the services described above, and how long it lasts depends on their settings and on how long it is needed.

• Server records are kept by Netlify under its own retention policy.
• Booking records are deleted from Calendly 12 months after the call.
• Subscriber records stay in beehiiv for as long as you stay subscribed. Within 30 days of you unsubscribing, your record is deleted, apart from two things: your address on a suppression list, which exists so you are not added back by mistake, and the record of when and how you consented. Those are kept for up to three years, because anti-spam law can require consent to be shown for that long.
• Notes about a call are deleted 12 months after the call, or sooner on request unless a record has to be kept.

You can ask at any time for anything held about you to be deleted, and that request will be actioned unless a record has to be kept.

Safeguards

The protections here are the ones that suit a site collecting almost nothing:

• the site is served over HTTPS, so traffic between your browser and the site is encrypted while in transit;
• there is no database, no login and no payment processing on this site, so there is no store of personal information here to breach;
• information is collected only where there is a reason for it;
• scheduling and newsletter information sits with established providers, under the protections described in their own policies and agreements.

No claim is made here about how those providers encrypt or separate information once it reaches them, because that is set by them and not here. No method of transmission or storage is completely secure, and no absolute guarantee of security is given.

If a breach of safeguards creates a real risk of significant harm, the law requires that it be reported to the relevant privacy regulator and that affected people be notified. That obligation is accepted.

Your rights

Subject to the limited exceptions the law allows, you can:

• ask what personal information is held about you, and how it has been used or disclosed;
• ask for a copy of it;
• ask that anything inaccurate or incomplete be corrected;
• withdraw consent, as described above;
• ask that information be deleted.

Write to dinukagunaratne@gmail.com. A reply will be sent within 30 days, the period federal privacy law allows for an access request. Confirmation of who you are may be needed first, so information is not handed to the wrong person. There is no charge for a straightforward request.

Information held inside Calendly or beehiiv can also be dealt with directly by those companies under their own policies.

Complaints

If something here concerns you, raise it at dinukagunaratne@gmail.com first. Canadian regulators ask that an organisation be given a chance to resolve a complaint before they take it on, and they may decline a complaint if that step was skipped.

If the response does not satisfy you, you can take it further:

• the Office of the Privacy Commissioner of Canada, under federal private sector privacy law;
• the Office of the Information and Privacy Commissioner for British Columbia, under British Columbia's provincial private sector privacy law;
• the privacy regulator for your own province, where it has one, or the Commission d'acces a l'information in Quebec.

This practice operates from British Columbia, so the provincial regulator for it is the Office of the Information and Privacy Commissioner for British Columbia. If you are elsewhere, the regulator for your own province may also be able to help.

Children and young people

This site is written for graduates and working adults and is not directed at children. No information is knowingly collected from a child.

Some of the writing here is about graduate school and early careers, so it may well be read by students under the age of majority. Reading requires nothing from them. Booking a call or subscribing is a separate step, and anyone under the age of majority should involve a parent or guardian before taking it.

Coaching is offered to adults. Anyone under the age of majority should involve a parent or guardian before booking a call or subscribing.

Changes to this policy

This policy will change as the practice changes. The date at the top is the date of the current version. A change that materially affects how personal information is handled will be noted on this page, and consent will be sought again where the law requires it.

Canada's federal private sector privacy law is itself under review, and a bill that would replace part of it was before Parliament when this page was written. This policy will be revisited if that law changes.