Delete your DigiT Portal account
DigiT Portal is operated by the Digital Trust Alliance, a non-profit organisation based in Sri Lanka. This page explains how to request deletion of your account and what happens to your data afterwards.
How to request deletion
From the DigiT Portal app or website, while signed in:
- Open Settings.
- Choose Delete account.
- Read what will be erased and what must be kept, then confirm the request. You may add a reason, but you do not have to.
- We action the request by hand and will confirm when it is done. There is no automatic acknowledgement email, so if you have heard nothing and want to check, write to privacy@digitaltrust.lk.
If you cannot sign in - because you have lost access to your account or removed the app - email hello@digitaltrust.lk from the address associated with the account and ask for it to be deleted. We may need to confirm your identity before acting, so that nobody else can delete your account.
What happens next
Submitting the request writes it to our records for the team to action by hand. It sends no alert to anyone, and it does not delete anything the moment you press the button, and we would rather say so than imply an immediacy we do not deliver. Your account keeps working until the request has been actioned, and the request cannot be reversed once processing has begun.
What is erased
- Your profile: name, email address, phone number, postal address and photo.
- Your professional directory listing, including headline, employer, job title, location, biography and LinkedIn address.
- Your event registrations, volunteering signups and cause enrolments - those made while signed in, or made as a guest and later claimed with your account.
- Your notification preferences and any push-notification token for your device.
- Your saved payment cards are not held by us at all - not the number, not the last four digits, not the expiry. They live with our payment provider, and the app asks for them each time you look. What we do hold is the reference that provider uses to recognise you, and that reference is deleted with your account.
What is retained, and for how long
Some records cannot be deleted on request, because we are required to keep them. We keep the minimum needed to meet those obligations, and nothing else.
| Record | Minimum we must keep it | Why |
|---|---|---|
| Contribution and donation receipts | 7 years | Tax, accounting and audit obligations |
| Audit logs of account actions | 3 years | Security and accountability |
| Logs relating to the deletion itself | 90 days | Evidence that the request was honoured |
| Event registrations made as a guest and never claimed | Not linked to your account | They carry no account to delete with - see below |
| Email campaign records | 2 years | Delivery and consent history |
Retained records are reduced to what the obligation actually requires. A retained receipt evidences a transaction; it is not a profile of you.
To be straightforward about how this works today: these are the periods we are required to keep records for, not a timer that erases them the moment it expires. We do not yet delete these records automatically when the period ends. If your period has passed and you would like what remains removed, write to hello@digitaltrust.lk and ask, and we will action it.
If you registered for an event without an account
You can register for some events as a guest, without creating a DigiT Portal account. A guest registration is not attached to any account, so deleting an account does not remove it - there is nothing linking the two unless you used the claim link we email you after registering.
We do not match guest registrations to accounts by email address. That is deliberate: two people can share an address, and assuming otherwise would let one person delete another’s records.
You can erase a guest registration yourself at erase an event registration. You will need access to the email address you registered with, because we email a confirmation code to it - erasing is permanent, and must not be something a stranger can do to you by knowing your address.
If you no longer have access to that address, email privacy@digitaltrust.lk and a person will handle it.
Your other rights
Deletion is one of several rights you hold under Sri Lanka’s Personal Data Protection Act No. 9 of 2022 and, where it applies, the GDPR. You may also request a copy of your data or ask us to correct it. See the privacy policy for the full list and how to exercise each one.