Privacy Policy

1. Information We Collect

We collect personal information necessary to deliver quality educational services, manage student accounts, and process class enrollments:

• Personal Identity Data: Student full name, contact number, WhatsApp number, email address, and examination year.
• Account Credentials: Username and securely hashed/encrypted passwords used for portal login.
• Academic & Progress Data: Class enrollment history, video lesson view logs, smart notes downloads, and performance tracking.
• Technical Data: IP address, device type, browser information, and session cookies for staying logged in.

2. How We Use Your Data

Your information is processed strictly for legitimate educational and administrative purposes:

• Providing online classroom access, video streaming, and study material delivery.
• Verifying user identity and securing access to restricted student portal features.
• Sending class announcements, exam preparation alerts, and schedule changes via WhatsApp or email.
• Improving server performance, website functionality, and overall platform security.

3. Protection of Minors (G.C.E. O/L Students)

As our courses cater primarily to G.C.E. Ordinary Level students who may be under 18 years of age, we mandate parental or guardian awareness and consent upon registration.

Parents or legal guardians retain the right to review, update, or request the removal of their child's account information at any time by contacting our support line.

4. Data Sharing & Third-Party Integration

MATHS TO BLOOD does not sell or lease student data. Information is shared only with trusted systems strictly required for service operation:

• Technical Infrastructure: Managed and maintained under technical agreement by softwaresolution.lk.
• Embedded Video Content: Video lessons streamed via third-party embedded video engines (e.g., YouTube) operate in line with Google/YouTube privacy protocols.
• External Study Groups: Joining our public or private WhatsApp/Telegram study communities is optional and governed by those platforms' privacy settings.

5. Data Security & Storage

We enforce standard administrative and technical safety protocols to prevent unauthorized data access, loss, or alteration. Account passwords are encrypted, and access to student database records is restricted to authorized platform administrators.

6. Your Rights under the Sri Lanka PDPA

Under Sri Lanka's Personal Data Protection Act No. 9 of 2022, students and parents possess the right to:

• Request access to the personal data registered on our platform.
• Request correction of inaccurate or incomplete information.
• Request account deletion or data erasure upon course completion.
• Withdraw consent for optional communications.

7. Contact Us

If you have questions regarding this Privacy Policy or wish to exercise your data protection rights, reach out directly to us: