JB HerWealth

Last updated: 28 October 2026

This Privacy Policy explains what personal data JB HerWealth collects, why we collect it, how long we keep it, who we share it with and the choices you have. JB HerWealth is a free financial learning programme for women in Sri Lanka, run by JB Financial (Pvt) Ltd, 150 St. Joseph’s Street, Colombo 01400, Sri Lanka (“we”, “us”, “our”).

We handle personal data in line with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka. If you have a question about this policy or your data, write to us at [email protected]

1. The personal data we collect

When you create an account
  • Your first name, last name and email address.
  • Your age range.
  • Your password, which is stored in a scrambled (hashed) form that we cannot read.
  • Whether you have confirmed your email address.
When you use your profile
  • A profile picture, if you choose to upload one.
  • Your full name as it should appear on your certificate.
  • Your postal address (address lines, city or town, postal code and country), if you choose to add it.
  • A new email address, while you are confirming a change.
When you learn with us
  • Your progress through the modules and lessons.
  • Your questionnaire answers, scores and results, and any retakes.
  • Your answers to the activities in the lessons.
When you claim your certificate
  • The name to print on the certificate and the email address to send it to.
  • Your certificate number and date of completion.
  • Whether you asked for a printed copy, and the postal address to send it to.
  • When you ask for your certificate again, whether you want another printed copy, and when your certificate was downloaded.
When you book a free call with an advisor
  • Your first name, last name, email address and phone number.
  • The message you write about what you need help with.
  • The page you sent the request from.
When you give us a testimonial
  • Your name, your words and, if you agree, your photo.
  • Your permission to publish them. You can ask us to remove your testimonial at any time.
Information collected automatically
  • Your IP address, used to keep the site secure, for example to slow down repeated attempts to log in or sign up.
  • The pages you visit and basic details about your device and browser, used to count visits and improve the site. Our statistics tool runs on our own website and uses no cookies: it counts visitors with an anonymous code, made from your IP address and browser, that changes every day.
  • When you use a form protected against spam, details about your device and how you use the page, which the spam protection service checks to tell people from automated programs.
  • Cookies and similar browser storage, explained in our Cookie Policy.
Information that stays on your device

Our calculators work out their results in your browser. The figures you type into them are not sent to us or stored by us. Answers you pick in a questionnaire are kept in your browser until you submit them, so they are not lost if the page reloads, and they are removed once submitted.

2. How we use your personal data

  • To create and run your account, and to let you log in, reset your password and change your details.
  • To give you the free courses, show your progress, score your questionnaires and open the next lessons.
  • To issue your certificate, email it to you and, if you ask, post a printed copy within Sri Lanka.
  • To pass your booking request to our advisor team so they can contact you.
  • To publish your testimonial on our site, if you have agreed to it.
  • To send you emails about your account and the services you use, such as email confirmation, password reset, certificate and booking emails. We do not send marketing emails without your consent.
  • To keep the site secure and protect our forms from spam and misuse.
  • To understand how the site is used, so we can improve it.
  • To meet our legal obligations and respond to lawful requests.

3. Why we are allowed to use it

We process your personal data only when we have a lawful reason, such as:

  • Your consent, for example when you upload a profile picture, ask for a printed certificate or give us a testimonial. You can withdraw your consent at any time.
  • To provide the services you ask for, such as your account, courses, certificate and advisor call.
  • To comply with the law.
  • Our legitimate interests in running a safe, working and useful site, where these are not outweighed by your rights.

4. Automatic scoring

Your questionnaire answers are scored automatically, and your total is compared with a pass mark that we set. This decides whether you can claim your certificate. If you think your result is wrong, contact us and a person will review it.

5. Who we share your data with

We do not sell your personal data. We share it only as needed with:

  • Our team and advisors who need it to run the programme, issue certificates and answer booking requests.
  • Service providers who help us run the site: Namecheap, which hosts our website, its database and its backups, and sends its emails; Cloudflare, which every visit to our site passes through, to protect it from attacks and help it load quickly; and our spam protection services, Google reCAPTCHA on our sign up, log in, password reset and advisor booking forms, and hCaptcha on our team’s login page. They may use your data only to provide their service to us.
  • Postal or courier services, to deliver a printed certificate you asked for.
  • Authorities, when the law requires it or to protect the rights and safety of our users and others.

Our pages also load fonts from Google Fonts. When your browser fetches them, Google receives your IP address.

Our sign up, log in, password reset and advisor booking forms are protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply. Our team’s login page is protected by hCaptcha, and the hCaptcha Privacy Policy applies.

6. Data outside Sri Lanka

Our website is hosted by Namecheap on servers outside Sri Lanka, and every visit passes through Cloudflare’s network, which has servers around the world. Google (reCAPTCHA and Google Fonts) and hCaptcha may also store or process data outside Sri Lanka. We choose providers that protect personal data to a standard required by the law of Sri Lanka.

7. How long we keep your data

  • Your account data is kept while your account is open.
  • Booking requests and certificate claims are kept for as long as we need them to deal with your request, confirm certificates we have issued and keep proper records, and no longer than [number] years.
  • We back up the site once a week and keep only the latest backup, so each backup is replaced after a week.
When you delete your account

You can delete your account at any time from the Delete Account tab of your profile. Your account, profile, picture and learning progress are then deleted, and you are logged out. We keep a record of your questionnaire marks, your advisor booking requests and your certificate claims, separate from any account, so that we can confirm the certificates we issued and keep proper records. If you sign up again later, you start afresh: these records are not linked to your new account. You can ask us to delete these records too, unless we must keep them by law.

8. Your rights

Under the Personal Data Protection Act, you have the right to:

  • Ask for a copy of the personal data we hold about you.
  • Ask us to correct data that is wrong or incomplete. You can change most of your details yourself on your profile page.
  • Ask us to delete your data.
  • Withdraw your consent, or object to our use of your data.
  • Ask for a review of a decision made only by automatic means, such as your questionnaire result.

[email protected]. We may need to confirm your identity first, and we will reply within the time the law allows. If you are not happy with our answer, you can complain to the Data Protection Authority of Sri Lanka.

9. How we protect your data

We use secure connections (HTTPS), store passwords in hashed form, limit access to your data to the people who need it, and protect downloads with links that only work for you, for a limited time. No website can be completely secure, so please use a strong password and keep it private.

10. Children

JB HerWealth is for adults. You must be at least 18 years old to create an account. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, please contact us and we will delete it.

11. Links to other websites

Our site links to other websites, such as our Instagram and Facebook pages. Their own privacy policies apply when you visit them, and we are not responsible for how they handle your data.

12. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top shows when it last changed. If we make an important change, we will tell you on the site or by email.

13. Contact us

JB Financial (Pvt) Ltd
150 St. Joseph’s Street, Colombo 01400, Sri Lanka
Email: [email protected]
Phone: +94 70 211 1999 (Hotline), +94 11 249 0900 (General)