Privacy Policy

Who is responsible for your data

MangalaMatch is the data controller for the personal information you give us. You can reach us about anything in this policy at support@mangalamatch.com.

MangalaMatch is an online service operated from the United Kingdom. The quickest way to reach us is by email at support@mangalamatch.com.

We are registered with the UK Information Commissioner's Office (ICO) as a data controller under registration number ZC199146.

Where your data is stored

All personal data on MangalaMatch is stored and processed in the United Kingdom (London), on servers operated by Amazon Web Services in their London region.

Because MangalaMatch serves the diaspora, many of our members live in the United Kingdom, Canada, the United States, Australia, New Zealand, the EU and elsewhere. Wherever you sign up from, your data is transferred to and held in the United Kingdom and processed under UK data-protection law (UK GDPR and the Data Protection Act 2018).

For members in the EU/EEA, transfers to the United Kingdom are covered by the European Commission's adequacy decision for the UK, which recognises that the UK provides an equivalent level of data protection; no additional safeguards are required. For members elsewhere, your data is likewise protected to UK-GDPR standards while it is held here.

What we collect and why

We only collect what we need to run a matrimony service. This includes:

• Account details — your name, email address and password (stored only as a secure hash), and your chosen language. Purpose: to create and secure your account.
• Profile details — gender, date of birth, city, education/profession, your roots in Sri Lanka, country of residence, visa/residency status and relocation preference. Purpose: to build your matrimony profile and find suitable matches.
• Birth & astrology details — your time and place of birth and derived raasi/natchathiram. Purpose: to compute porutham (jathaka) compatibility, which is optional. These are special-category-adjacent details, so we keep them private and use them only for matching you have asked for.
• Photos and ID documents — profile photos and, if you choose verification, an identity document. Purpose: to display your profile and to confirm members are genuine. ID documents are reviewed only by our team, are never shown to other members, and are deleted once the verification check is finished (see “How long we keep it”). We then keep only a record that the check took place — the document type and the date — not the document itself.
• Activity — interests sent/received, shortlists, messages, video-call scheduling and profile views. Purpose: to operate the matching, messaging and reviews features.
• Payment details — handled by our payment provider (Stripe). We store a payment reference and your plan, never your full card number. Purpose: to take payment for paid features.

For parents and brokers registering on behalf of someone else, the same applies to the profile details you enter for that person; you confirm you have their consent to do so.

Our lawful basis

We rely on your consent (given when you create an account and tick the box accepting this policy) and on the performance of our contract with you (providing the service you signed up for). For keeping the platform safe — moderation, verification and fraud prevention — we rely on our legitimate interests.

You can withdraw consent at any time by deleting your account (see “Your rights” below). Some birth/astrology processing only ever happens when you actively request a porutham match.

Who we share it with

Other members see the profile information you choose to make visible. We never sell your data.

We share data with a small number of service providers who process it on our behalf and under contract: Amazon Web Services (hosting, in the UK), Stripe (payments), and our email provider (account and notification emails). Where you request a manual porutham review, the relevant details are shared with the pandit you choose.

We will disclose data if required by law or to protect the safety of our members.

How long we keep it

We keep your data for as long as your account is active. When you delete your account we erase your personal data, except where we must keep limited records for legal, accounting or fraud-prevention reasons, which we hold only for as long as the law requires.

Identity documents are treated more strictly. We delete the ID document you submit for verification as soon as our team has finished the check — whether it is approved or not — and keep only a record that the check took place (the document type and the date). To help keep accounts genuine, we retain a copy of the profile photo that was confirmed during verification, so we can tell if a verified account later replaces it with someone else’s photo.

Your rights

Under UK and EU data-protection law you can: access a copy of your data, correct it, erase it, restrict or object to processing, and ask for portability. You can download your data and delete your account at any time from Settings → Data & privacy.

To exercise any right, or if you have a concern, email us at support@mangalamatch.com. If you are in the UK you may also complain to the Information Commissioner’s Office (ico.org.uk); members elsewhere may complain to their local data-protection authority.

EU/EEA and Swiss members — our representative

MangalaMatch is operated from the United Kingdom and does not have an establishment in the European Union. Under Article 27 of the EU GDPR we have appointed a representative in the EU whom members in the EU/EEA may contact on any matter relating to our processing of their personal data.

Our EU representative is Punniyanantham Paraneetharan, 2 avenue du Poitou, 77270 Villeparisis, France (kirusha1112@hotmail.com). You may contact them, or us directly at support@mangalamatch.com, and you may also complain to the supervisory authority in your country of residence.

California residents

If you live in California, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what personal information we collect and how we use it, to request access to or deletion of that information, to correct it, and not to be discriminated against for exercising these rights. The categories of information we collect and the purposes are set out in “What we collect and why” above.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. To exercise any of these rights, email us at support@mangalamatch.com.

Cookies and local storage

MangalaMatch uses only the storage it needs to work. We do not use advertising cookies or third-party analytics or tracking tools, so there is nothing non-essential to opt in or out of.

• Essential — we store a secure sign-in token in your browser so you stay logged in (and, if you choose “remember me”, across visits). Without it you could not use your account.
• Preferences — we remember small settings such as your chosen language, your incognito browsing setting, and notices you have dismissed, so the service behaves the way you left it.
• Payments — when you make a payment, our provider Stripe sets its own cookies to process the payment securely and help prevent fraud.

You can clear this storage at any time through your browser settings; clearing the sign-in token will simply log you out. If we ever introduce analytics or other non-essential cookies, we will ask for your consent first and let you accept or reject them.

Security

Passwords are stored only as secure hashes, traffic is encrypted in transit, and access to member data is restricted. No service can promise perfect security, but we take it seriously and review our practices regularly.

Children

MangalaMatch is only for adults. You must be 18 or over to register, and we do not knowingly hold data about anyone under 18.