Privacy policy

Dr. Yasas Sri Wickramasinghe, of 67/5, Ganemulla Road, Ihala Karagahamuna, Kadawatha 11850, decides what is collected here and why. ICT Campus (ictcampus.lk) is a fully online tuition service with no shop or office open to the public. Contact: 0768666603, yasassriofficial@gmail.com.

• To create an account: mobile number, name, and optionally school, district and preferred medium — plus the date you first signed in and which version of these policies was shown to you at the time.
• To keep the class paid-for: a coarse device fingerprint (a hash, never the raw details) so one account cannot be used on unlimited phones.
• From the classes themselves: attendance, quiz and mock-exam answers, scores, XP and streaks.
• To take payment: the amount, date, method and reference of each payment, and — if you pay by deposit — the photograph of the slip you upload.
• If you buy Campus Match: the answers you type into it — your Z-score, district, A/L stream, the subjects you say you passed at C or better, whether you can study in English medium, and the order you would write your course preferences in. If you choose to tell us after selection, we also store which course you were offered. Nothing here is shared with the UGC, with any university, or with anyone else.
• If you buy the A/L ICT Exam Pack: your answers to each paper, your score and rank, the study plan worked out from them and what you tick off in it, the time you book for your consultation and anything you write for it. Print copies you make carry your name and part of your number. Other students see only their own rank, never your name or score. The teacher sees your results and plan, to prepare for your consultation.
• If you own the Complete Short Notes (bought, or with the Exam Pack): a certificate with your name, its number and the date it was issued. Copies you save carry your name, part of your number and the certificate number. Anyone who checks the number on our website sees your initials, the date and whether the licence is current — never your name or number.
• If you take a free unit test: your best and latest score on each unit and how many times you took it. Your answers themselves are marked and not kept. The teacher sees your name and scores.
• How you use the site: which pages you opened and when, which files you downloaded, and when you signed in. Your teacher can see this on your record. Apart from what you submit in a form — a Campus Match answer, a note for your consultation — we do not record what you type, what you search for, your location, or anything you do on other websites.

We never see your card number. Card details are entered on PayHere's own payment page and never reach this platform.

The answers behind your Campus Match report can be deleted on their own, at any time, from Account — you do not have to close your account or write to us. Deleting them removes the report; your purchase is unaffected, and you can type them again if you want the report back. We keep nothing from them once they are deleted, except the payment record itself, which tax law requires us to hold.

To let you in to the classes you have paid for, to teach and mark you, to tell you when a class is starting, to keep proper payment records as tax law requires, and to stop paid material being shared with people who have not paid.

The record of which pages you opened is there so your teacher can help you — to see that you have not opened the notes before an exam, or that a file you paid for never downloaded. It is not used to advertise to you and it is not sold or shared with anyone outside this platform.

We do not sell your data, and we do not run advertising on this platform.

• Google Firebase — sign-in, database, file storage and hosting.
• Google Analytics — anonymous counts of which pages are visited and which buttons are pressed, so we can see what students actually use. It is not linked to your name or your number, and it is not used for advertising.
• PayHere — card payments (a licensed Sri Lankan payment gateway).
• Zoom — the live monthly classes.
• Google Meet, Google Calendar and Gmail — the Exam Pack's consultations. When you book one, your name, phone number, the time, your note and a one-line summary of your paper scores and the units you are working on are put into the teacher's own Google Calendar so the call can happen, and the teacher is sent the same details by email from their own Gmail. When you join a Meet, Google shows the host the name on your Google account. Nothing else about you is sent to Google for this.

Each of these is used only to run the service, under their own terms. Some of them store data outside Sri Lanka.

If you are under 18, a parent or guardian should agree to this policy with you. A parent may ask to see what we hold about their child, to have it corrected, or to have the account closed, by contacting us on the number above. We may ask them to confirm their identity first — otherwise anyone could ask for a child's records.

Parents can also be given a read-only link showing their child's attendance and progress. That link is issued by the student from their own account.

Account and progress data for as long as the account exists, and for a year afterwards in case it is reopened. Payment records are kept for at least six years, because tax and accounting rules require it — that means a closed account still leaves its receipts behind, including any deposit slip uploaded as proof of payment.

The record of which pages you opened is shown to your teacher for the last 30 days. You can ask us to delete it at any time and we will, because nothing depends on keeping it — unlike a receipt, it is not a record we are required to hold.

You may ask what we hold about you, ask us to correct it, ask us to delete what we are not required to keep, and object to a particular use. Write to the contact above and we will answer within 30 days. Sri Lanka's Personal Data Protection Act No. 9 of 2022 gives you these rights and a route to complain to the Data Protection Authority if we get it wrong.

Sign-in is by one-time SMS code — there is no password to leak. Access to paid material is checked on the server on every request. Payment approvals and anything that grants access can only be written by our server, never by a browser. Nothing is perfectly secure, but nothing here is left to the honesty of the person's own device either.

Four small cookies, all of them ours and all of them doing a job you can see:

• The session — keeps you signed in for up to 14 days, and renews itself while you keep using the site so you are not asked for an SMS code again.
• The device marker — tells this browser apart from your other ones, so freeing up a device slot signs out the right one.
• Your language — English or Sinhala, remembered between visits.
• A signed-in marker — lets a page show "Back to dashboard" instead of "Sign in" without waiting. It proves nothing on its own.

We set no advertising cookies and sell nothing to advertisers. Google Analytics, listed above, also stores an anonymous identifier in your browser to count visits.