Privacy Policy

Last updated: 22 October 2026

1. Introduction

CIPC Campus respects your privacy and is committed to handling your personal information responsibly. This Privacy Policy explains how information may be collected, used, stored, disclosed, and protected when you visit our website, submit an enquiry, apply for a programme, or interact with our services.

By using our website, you acknowledge that you have read this policy. Where consent is required by applicable law, we will seek it separately.

2. Information We Collect

Depending on how you interact with CIPC Campus, we may collect the following categories of information.

Personal and contact information

• Full name.
• Email address and telephone number.
• Postal or residential address, where required.
• Information submitted through enquiry and contact forms.

Academic and application information

• Programme of interest.
• Educational qualifications and relevant application details.
• Documents or information submitted as part of an application.
• Student identification and academic records, where applicable.

Payment and transaction information

Information needed to process programme fees, confirm payments, and maintain financial records. Payments handled by third-party payment providers may also be subject to their own privacy policies. We should not collect or store complete payment card details unless an appropriate, secure, and lawful arrangement is in place.

Technical and usage information

• IP address and browser information.
• Device type and operating system.
• Pages visited and interactions with our website.
• Cookie identifiers and similar technical data, subject to your preferences and applicable law.

3. How We Use Your Information

We may use personal information to:

• Respond to enquiries and requests.
• Provide programme details and admissions support.
• Process applications and manage student enrolment.
• Administer classes, assessments, and student services.
• Process payments and maintain financial records.
• Send essential service, application, or account-related communications.
• Send promotional communications where permitted and, when required, with your consent.
• Improve website functionality, accessibility, and user experience.
• Maintain security, prevent fraud, and protect our legal rights.
• Comply with applicable legal and regulatory obligations.

4. Legal Basis for Processing

Where applicable data protection law requires a legal basis, we process personal information on the basis of consent, contractual necessity, compliance with legal obligations, legitimate interests, or another lawful basis permitted by the relevant legislation.

Where processing relies on consent, you may withdraw that consent subject to applicable legal requirements.

5. Sharing of Information

We do not intend to sell personal information to third parties.

Information may be shared, where necessary and lawful, with:

• Academic and qualification-awarding partners.
• Payment processors and financial service providers.
• Website hosting, IT, security, and communication service providers.
• Professional advisers, auditors, or legal representatives.
• Public authorities or regulators where disclosure is legally required.

Service providers should receive only the information reasonably necessary to perform their authorised functions.

6. International Data Transfers

Some of our service providers or educational partners may process information outside Sri Lanka. Where personal information is transferred internationally, we will take the measures required by applicable law to protect that information.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including the administration of student records, contractual obligations, financial reporting, dispute resolution, and legal compliance.

Retention periods may vary according to the type of information and the purpose for which it was collected.

8. Data Security

We take reasonable technical and organisational measures intended to protect personal information against unauthorised access, disclosure, alteration, loss, or destruction.

However, no online system or method of electronic transmission can be guaranteed to be completely secure.

9. Your Privacy Rights

Subject to applicable law, you may be entitled to:

• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion or restriction of processing in eligible circumstances.
• Withdraw consent where processing relies on consent.
• Object to certain processing activities.
• Request information about how your personal information is handled.
• Exercise any additional rights available under applicable data protection legislation.

We may need to verify your identity before responding to certain requests.

10. Third-Party Websites

Our website may contain links to third-party websites, platforms, or payment services. We are not responsible for the privacy practices of those third parties. Please review their privacy policies before providing personal information.

11. Children's Privacy

Where our services are available to individuals under the age of 18, we will handle their personal information in accordance with applicable law, including any requirements concerning parental or guardian involvement and consent.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, technology, or legal obligations. The latest version will be published on this page with its updated revision date.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact CIPC Campus through the official contact channels published on our website.

• Institution: CIPC Campus
• Website: cipc.lk
• Email: info@cipc.lk
• Postal address:
  CIPC Campus
  502, Galle Road,
  Colombo 06, Sri Lanka