SFT.Suganda Kithulgoda

Privacy Policy

Last updated: 29 September 2026

This policy explains what personal data Suganda Kithulgoda ("we") collects through this learning platform, why, and how it is protected. We process personal data in line with Sri Lanka's Personal Data Protection Act, No. 9 of 2022.

1. Data we collect

  • Account details: first and last name, email address, mobile number and school.
  • Your National Identity Card (NIC) number (see section 2).
  • If you sign in with Google: your Google account ID, email address, name and profile picture.
  • Payment records: class, amount, bank reference and the bank slip you upload.
  • Learning activity: the classes you are enrolled in.
  • Security data: sign-in times, IP address and device/browser type, used to protect your account.

2. Your NIC number

We ask for your NIC number when you register. We collect it only to:

  • confirm who you are when we verify a class payment made by bank transfer;
  • make sure each student has one account, so paid classes aren't shared; and
  • help you recover your account if you lose access to your email.

How we protect it:

  • It is stored encrypted; it is never kept in plain text.
  • You only ever see it partly hidden (for example ********0937).
  • Only the teacher and authorised admin staff can see the full number, and only to verify payments.
  • We never sell it, publish it, or share it with third parties, except where the law requires us to.
  • You can't change it yourself after registering; contact us if it needs to be corrected.

If you are under 18, please register with the knowledge and consent of your parent or guardian.

3. How we use your data

  • To create and secure your account and let you sign in.
  • To verify payments and give you access to the classes you bought.
  • To send essential emails: email verification, password reset and payment updates.
  • To contact you about your classes using the phone number you provide.

We don't send marketing messages and we don't use your data for advertising.

4. Service providers

We use trusted providers to run the platform: Neon (database), Upstash (security and caching), Cloudinary (storing class materials and bank slips privately), Google (optional sign-in) and YouTube (video playback). They process data only to provide their service to us.

5. How long we keep it

We keep your account data while your account is active. Payment records are kept as long as needed for accounting and dispute purposes. When you ask us to delete your account, we delete or anonymise your personal data unless we are legally required to keep it.

6. Your rights

You can ask to access, correct or delete your personal data, or withdraw your consent, by contacting us. You can update your name, phone number and school yourself on your profile page.

7. Contact

Questions about this policy or your data: contact Suganda Kithulgoda on 076 377 8235.