Legal
Last updated: 23 August 2026 · Version 1.0
Signature Health Intelligence (“SHI”, “we”, “us”) is a physician-led preventive health service operated by Dr. D. R. Gamalathge, MBBS (SLMC Registration No. 36999), of Dr. Gamalathge Healthcare Centre, Mirihana, Nugegoda, Sri Lanka. For the purposes of the Personal Data Protection Act No. 9 of 2022 of Sri Lanka (the “PDPA”), the controller of personal data collected through this website is Dr. D. R. Gamalathge.
This policy explains what we collect through signaturehealthintel.com, why, where it goes, and the rights you hold. It covers this website and the enquiries you send us. Clinical care itself — your investigations, results and medical records — is governed additionally by the separate written consent you sign before any investigation, and by applicable medical record-keeping obligations.
Details you give us. When you submit the enquiry form we collect your name, WhatsApp number, age, the programme you are interested in, optionally your email address, and your message describing what prompted your enquiry. When you contact us by WhatsApp, telephone or email, we collect the contact details and content you choose to send.
Health information you choose to share. Your enquiry message may include information about your health — for example a family history or a recent result. Health information is a special category of personal data under the PDPA. We ask for your explicit consent, via the checkbox on the form, before you submit it; we use it solely to advise you on the suitability of a programme and to prepare for your consultation; and you are free to leave it out entirely — an enquiry without any health detail is equally welcome.
Collected automatically. We use Google Analytics 4 to understand how the site is used: approximate location (city level), device and browser type, pages viewed, and interactions such as which programme or button was selected. This relies on cookies holding a pseudonymous identifier — it does not tell us your name. Our hosting provider also keeps standard server logs (IP address, time, page requested) for security and reliability.
Under the PDPA we process personal data: (a) to respond to your enquiry, recommend a programme tier and arrange your appointment — with your consent and as steps taken at your request prior to entering a contract; (b) to administer your programme once you enrol — performance of a contract; (c) to keep the website secure and improve how it communicates — our legitimate interests, applied proportionately; (d) to meet legal and regulatory obligations, including those of the Sri Lanka Medical Council; and (e) health information you volunteer — your explicit consent, which you may withdraw at any time.
We do not sell personal data. We do not share it with advertisers. We do not send marketing messages unless you have asked us to, and any such consent can be withdrawn at any time by replying or writing to us.
We use a small number of established service providers to run this website and respond to you. Some are located outside Sri Lanka, which means your data may be transferred and stored abroad. Form submissions — including any health context — are transferred with your explicit consent, given via the consent box on the form. Infrastructure-level data (hosting, analytics and font requests generated by simply visiting the site) is transferred on the basis of our legitimate interest in operating a reliable, secure website, supported by the contractual and security commitments of these providers:
If you enrol in a programme, your samples and results are additionally processed by an accredited diagnostic laboratory in Colombo acting under our instructions, and that processing is covered by the separate written clinical consent you sign before any investigation.
This site sets Google Analytics cookies (_ga and _ga_*, lifespan up to 2 years) to distinguish visitors and measure use of the site. We use no advertising or social-media tracking cookies. You can block or delete cookies in your browser settings at any time — the site works fully without them — or install Google’s Analytics opt-out browser add-on.
Enquiry records (form submissions, WhatsApp and email correspondence) are reviewed at least annually and deleted within 24 months of our last contact, unless you enrol in a programme. If you enrol, records connected to your care become part of your clinical record and are retained in line with medical record-keeping obligations. User-level analytics data is retained on Google’s systems for at most 14 months; workflow and hosting logs (n8n, Vercel) rotate on shorter, provider-set schedules.
Under the PDPA you may: access the personal data we hold about you; ask us to correct or complete it; ask us to erase it; withdraw consent at any time (without affecting processing already carried out); and object to particular processing. To exercise any of these, write to dimithra@signaturehealthintel.com or message +94 75 619 2319 — we will respond within the timelines the Act requires. If you are dissatisfied with our response, you have the right to complain to the Data Protection Authority of Sri Lanka.
SHI uses AI-assisted pattern analysis as a supporting tool. No decision producing legal or similarly significant effects is made solely by automated means: every report is reviewed, interpreted and authored by Dr. Gamalathge personally.
The site is served over TLS encryption; form submissions travel encrypted; access to enquiry data is limited to Dr. Gamalathge and authorised staff; and we use reputable providers with recognised security practices. In the event of a personal data breach we will act in accordance with the PDPA, including notifying the Data Protection Authority and affected individuals where required.
SHI programmes and this website are intended for adults aged 18 and over. We do not knowingly collect personal data from minors through this site.
We may update this policy as the service or the law evolves. The current version, with its date, will always be published on this page. Material changes will be highlighted on the site.
Privacy questions and requests: dimithra@signaturehealthintel.com · +94 75 619 2319 · Dr. Gamalathge Healthcare Centre, Mirihana, Nugegoda, Sri Lanka.