Privacy
This site collects nothing except what you type into the enquiry form. It sets no cookies, runs no analytics and builds no profile of you. What follows is the detail, in plain terms.
Last updated
10 August 2026
Who is responsible
Divron Bioventures (Pvt.) Ltd. is responsible for the information described here. We are based in Negombo, Sri Lanka, and our postal address and email are at the foot of every page on this site.
If you have a question about this policy, or you want us to do something with your information, write to shan@divron.com and say so plainly. It reaches a person, not a ticketing system.
What we collect
Only what you enter in the enquiry form on our contact page. That is your name, your email address and your message, which are required, and your company and phone number, which are optional. Nothing on this site asks you for anything else, and there is no account to create.
When you submit the form we also read the IP address the request came from. It is used for one thing: to stop the same connection sending a large number of messages in a short period. It is held in the memory of a single server for ten minutes and then discarded. It is never written to a database, never attached to your enquiry and never shared.
Why we hold it, and on what basis
To read your enquiry, reply to it, and if it goes somewhere, to quote and supply you. That is the whole purpose. We do not use it for marketing, we do not add you to a mailing list, and we do not build a profile from it.
For anyone writing to us from the United Kingdom or the European Economic Area: our lawful basis is that processing is necessary to take steps at your request before entering into a contract, and, for the IP address used to limit abuse of the form, our legitimate interest in keeping a public form usable.
Who else sees it
The people at Divron who handle enquiries. Two companies are involved in getting your message to us: Vercel, which hosts this website and runs the code that receives the form, and Resend, which delivers that form to us as an email. After it arrives it sits in our own email account.
If a message fails to send, its contents are written to the site's error log, held by Vercel, so that the enquiry is not simply lost. We delete those entries once the message has been recovered.
We do not sell your information, we do not trade it, and we do not share it with anyone for advertising.
Where your information goes
Divron is a Sri Lankan company and your enquiry is read in Sri Lanka. Vercel and Resend, the two companies described above, are both based in the United States, so your message passes through infrastructure there on its way to us.
Neither Sri Lanka nor the United States is covered by a general European Commission adequacy decision, so if you write to us from the United Kingdom or the European Economic Area, your information leaves it. That happens because it is necessary to do the thing you asked us to do: answer your enquiry.
If you would rather not send information outside Europe, please do not use the form. Our phone number and postal address are on the contact page.
How long we keep it
Your enquiry reaches us as an email and stays in our mailbox alongside the rest of our correspondence. We do not copy it into a separate database, a CRM or a mailing list, and we do not run an automatic deletion schedule over it.
Enquiries that lead to a trading relationship are kept for as long as that relationship runs, and afterwards for as long as we are required to keep commercial records. Anything else simply remains in the mailbox, and you can ask us to delete it at any time. We would rather tell you that plainly than publish a retention period we do not actually enforce.
Cookies, analytics and tracking
There are none. This site sets no cookies, stores nothing in your browser, and runs no analytics, no tag manager, no advertising pixel and no session tracking of any kind. We do not know who visits, how often, or where from.
That is why you have not been shown a cookie banner. There is nothing to consent to.
The one request that leaves this site
The still image for the documentary on our home page is served by YouTube. Loading that page therefore tells Google that a browser at your IP address requested the image, which is unavoidable if the picture is to appear at all.
The film itself does not load until you click it. YouTube's player, and the cookies that come with it, are only involved from that point on. Every other image, font and file on this site is served from the site itself.
Your rights
Wherever you are, you can ask us to do any of the following, and we will. If you are in the United Kingdom or the European Economic Area these are rights you hold under the GDPR, and we will respond within one month.
Access
Ask what we hold about you and get a copy of it.
Correction
Have anything inaccurate fixed.
Deletion
Have your enquiry and our record of it erased.
Restriction
Ask us to stop using it while a question is resolved.
Objection
Object to our processing it on legitimate interests.
Portability
Receive what you sent us in a portable format.
Email shan@divron.com to exercise any of these. We will not ask you to justify the request. If you are in the UK or the EEA and you are unhappy with how we have handled it, you can complain to your national data protection authority.
If this policy changes, the revised version appears on this page with a new date at the top. We do not change it quietly.


