Cambridge Success Centre is committed to maintaining the highest level of privacy and data security. We uphold full transparency regarding student learning records, credentials, and financial safety.
Privacy Commitment & Scope
This Privacy Policy governs the practices of Cambridge Success Centre (operating at 34/6, I, Duwana Road, Kochchikade, Western Province, Sri Lanka) regarding data collected via our website https://cambridgesuccess.lk, our Smart Learning Management System (LMS), mobile interfaces, and offline campus admissions.
By enrolling in our academic programs, utilizing our classroom portal, or interacting with our services, you acknowledge the terms outlined in this document.
Information We Collect
To provide high-quality educational instruction and maintain verified academic transcripts, we collect specific categories of personal data:
Full legal name, preferred name, date of birth, gender, school attended, grade/level, and National Identity Card (NIC) / Student ID number where applicable.
Primary email address, WhatsApp-enabled mobile phone number, residential address, and parent or legal guardian contact info for underage students.
Video lecture viewing progression, quiz responses and mastery scores, attendance in live Zoom lectures, homework submissions, and teacher feedback notes.
Audio recordings submitted voluntarily by students during spoken pronunciation exercises to enable faculty feedback and phonetic speech assessments.
Payment Security & Cardholder Protection
Cambridge Success Centre does NOT collect, capture, store, or process sensitive payment card data (such as 16-digit Credit/Debit card numbers, CVV/CVC security codes, PINs, or card expiration dates) on any of our web servers or databases.
When you choose to pay online, your transaction is securely handed over to the PayHere Payment Gateway, an authorized payment service provider regulated by the Central Bank of Sri Lanka (CBSL) and certified under PCI-DSS Level 1 (Payment Card Industry Data Security Standard) with 256-bit TLS/SSL encryption.
We only receive an encrypted token and transaction reference identifier (e.g. CSC-PAY-XXXXX) confirming whether the acquiring bank approved or declined the charge.
How Student Data Is Utilized
The collected information is used solely for legitimate educational and administrative purposes:
- LMS Access Provisioning: Setting up student accounts, issuing Student IDs, and granting permissions to enrolled course playlists and materials.
- Academic Support & Teacher Feedback: Reviewing homework, evaluating speech recordings, grading quizzes, and tracking syllabus progress.
- Transactional Communications: Sending automated email/SMS confirmations, payment receipts, password reset OTPs, and Zoom classroom join links.
- Certificate Verification: Generating tamper-proof digital completion certificates with unique verification QR codes.
Third-Party Infrastructure & Non-Disclosure
We never sell, rent, monetize, or trade student personal records to advertisers or third-party marketing companies. Data is shared exclusively with vetted enterprise technology providers essential for delivering our services:
For processing online card payments, FriMi, Genie, and mobile wallet checkouts securely under Central Bank regulations.
Enterprise encrypted PostgreSQL cloud hosting for managing student rosters and academic progress records.
Encrypted cloud infrastructure used to stream protected video courseware via pre-signed private URLs.
For delivering automated payment receipts, one-time authentication passcodes, and class schedule updates.
Data Security, Encryption & Retention
We implement rigorous administrative, technical, and physical safeguards:
- Transport Layer Security: All communications between your browser and our servers are encrypted using 256-bit TLS/SSL certificates.
- Role-Based Access Controls: Faculty and staff access to student profiles is restricted on a strictly need-to-know basis.
- Data Retention: Student academic records and transcripts are retained for up to 5 years following course completion to allow lifelong certificate verification and transcript re-issuance.
Student & Parent Privacy Rights
In accordance with the Sri Lanka Personal Data Protection Act, you maintain the following rights:
Contacting the Data Protection Officer
For questions, requests, or privacy concerns, please contact our administration: