Privacy Policy

At Lyceum Campus, we take your privacy seriously. This Privacy Policy sets out how we collect, use, and look after the personal information you share with us when you visit or use our website and related services. We want to be open and honest about what we do with your data, so you can feel confident every time you interact with us online.

Please take a moment to read through this policy. If you have any questions, our contact details are at the end of this document.

Throughout this document, certain words are capitalized to indicate that they carry specific meanings as defined below. These definitions apply whether the terms appear in singular or plural form.

Lyceum Campus (also referred to as "we", "us", or "our")
The entity responsible for operating this website and providing services to users. For the purposes of data protection law, Lyceum Campus acts as the Data Controller.

You
The individual accessing or using our website, or the organization or legal entity on whose behalf that individual is acting.

Website
The Lyceum Campus website and any associated digital properties through which our services are delivered.

Service
The content, features, and functionality made available through our website.

Personal Data
Any information that relates to an identified or identifiable individual. This includes details such as your name, email address, location data, or any online identifier that could be used to recognize you.

Usage Data
Information collected automatically when you use our website, such as your IP address, browser type, pages visited, time spent on those pages, and other technical diagnostic data.

Cookies
Small text files placed on your device by a website. They help the site remember information about your visit, such as your preferences or whether you are logged in.

Device
Any device you use to access our website, including a computer, smartphone, or tablet.

Service Provider
A third party engaged by Lyceum Campus to carry out tasks on our behalf, such as hosting, analytics, or communications. Under data protection law, these parties act as Data Processors.

Data Controller
The entity that determines how and why personal data is processed. For the purposes of this policy, that is Lyceum Campus.

Account
A personal account you may create to access certain parts of our website or services.

Affiliate
Any entity that is under common ownership or control with Lyceum Campus, where control refers to holding 50% or more of the voting shares or equivalent authority.

Country
Sri Lanka

Personal Data You Provide
When you interact with our website, for example by filling in a form or creating an account, we may collect the following:

• Full name
• Email address
• Phone number
• Postal address, city, province, and postal code

Usage Data We Collect Automatically
Whenever you visit our website, certain technical information is gathered automatically. This helps us understand how people use our site and allows us to keep things running smoothly. This data may include:

• Your device's IP address
• Browser type and version
• The pages you visit on our website and the time you spend on them
• The date and time of your visit
• Unique device identifiers and diagnostic information

If you access our website on a mobile device, we may also collect information about your device type, mobile operating system, and your mobile browser type.

We use the information we collect to run our website effectively, to communicate with you, and to keep improving what we offer. More specifically, we may use your data for the following purposes:

• Running and maintaining our website: To monitor overall usage and ensure the site continues to work as it should.
• Managing your account: To give you access to the relevant features and a personalized experience when you are logged in.
• Fulfilling service agreements: To carry out any commitments we have made to you in connection with services you have signed up for or purchased.
• Staying in touch: To send you important updates, security notifications, and information about your account or our services via email, phone, or other channels.
• Sharing relevant news and offers: To let you know about events, services, or developments we think may interest you, unless you have asked us not to.
• Responding to your inquiries: To address questions or requests you send our way in a timely and helpful manner.
• Personalized content and advertising: To work with trusted partners to deliver content and advertising that is more relevant to your interests.
• Analytics and improvement: To analyse trends, measure how well our campaigns are working, and make informed decisions about how we develop our services over time.
• Legal and regulatory compliance: To meet our obligations under applicable laws and to protect our rights when necessary.

We do not sell your personal information. We may, however, share it in the following circumstances:

• With Service Providers: We work with trusted third parties who help us run our website, process payments, display advertising, and analyse how the site is used. These providers only have access to the information they need to carry out their specific tasks on our behalf.
• During Business Transactions: If Lyceum Campus is involved in a merger, acquisition, or sale of assets, your personal data may form part of the assets being transferred. We will give you advance notice before any such transfer takes place and before your data becomes subject to a different privacy policy.
• With Affiliates: We may share information with affiliated entities, but all parties are required to honour the commitments set out in this policy.
• With Business Partners: We may share information with partners for the purpose of offering you specific products, services, or promotions.
• In Public Areas of the Website: Any information you share in areas of our website that are visible to other users may be seen and shared by those users. Please keep this in mind before posting anything publicly.
• With Your Consent: We may share your information for any other purpose with your explicit agreement.

We use analytic tools to understand how visitors interact with our website. This helps us identify areas for improvement and make better decisions about content and features.

1. Google Analytics (Google LLC)
   Google Analytics tracks and reports website traffic. Google may use the data collected to personalize ads within its own advertising network. You can opt out of Google Analytics tracking by visiting Google's Ads Settings or by using the Google Analytics Opt-out Browser Add-on.
   Personal data processed: Cookies, Usage Data
   Place of processing: United States
2. Meta Pixel (Meta Platforms, Inc.)
   The Meta Pixel helps us measure the effectiveness of our advertising by tracking actions people take on our website. This information may also be used by Meta to personalize ads on its platforms. You can manage your preferences through your Facebook ad settings.
   Personal data processed: Cookies, Usage Data
   Place of processing: United States
3. Mailgun (Mailgun Technologies Inc.)
   We use Mailgun to send transactional and marketing emails to subscribers. When you sign up, we collect your name, email address, location, IP address, and the time of sign-up. Once you receive an email from us, Mailgun may track whether the email was opened and whether any links were clicked. You can opt out of marketing emails at any time using the unsubscribe link in any email we send.
   Personal data processed: Name, Email Address
   Place of processing: United States
4. Google Web Fonts (Google LLC)
   We use Google Web Fonts to ensure text on our website is displayed consistently and attractively across all devices. Your browser connects to Google's servers to load these fonts, which means Google becomes aware that our site was accessed via your IP address.
   Personal data processed: Usage Data
   Place of processing: United States

We use re-marketing to reach you with relevant advertising after you have visited our website. This involves us and our advertising partners using cookies and similar technologies to recognize your device and tailor ads based on your browsing behaviour.

If you would prefer not to receive interest-based advertising, you can opt out through the following platforms:

• NAI opt-out: www.networkadvertising.org/choices
• EDAA opt-out: www.youronlinechoices.com
• DAA opt-out: optout.aboutads.info

On mobile devices, you can also limit ad tracking through your device settings under "Limit Ad Tracking" (iOS) or "Opt Out of Ads Personalisation" (Android).

The re-marketing partners we currently work with include:

• Google Ads: Re-marketing and behavioral targeting managed by Google LLC. You can opt out through Google's Ads Settings.
• Meta (Facebook): Facebook re-marketing is managed by Meta Platforms, Inc. You can manage your preferences through your Facebook ad settings or via the Digital Advertising Alliance platform.
• Microsoft Advertising (Bing Ads): Provided by Microsoft Inc. You can opt out by visiting Microsoft's personalised ads page.
• X (formerly Twitter): Re-marketing provided by X Corp. You can opt out through the platform's ad preferences settings.

We only hold on to your personal data for as long as we genuinely need it. How long that is depends on why we collected it in the first place:

• If we collected your data in connection with a service agreement, we will keep it until that agreement has been fully carried out.
• If we collected it to serve a legitimate interest, we will retain it for as long as that interest remains relevant.
• If you gave us your consent to process your data, we will keep it until you withdraw that consent.

There may be situations where we are legally required to hold data for a longer period, such as for tax or regulatory purposes. In those cases, we will keep it for as long as the law requires and no longer.

Usage data is generally kept for a shorter period, unless it is needed for security purposes, to improve our services, or to comply with a specific legal obligation.

Once your data is no longer needed, we delete it. After deletion, rights such as the right to access, correct, or transfer your data can no longer be exercised.

Your personal data may be processed in locations outside of Sri Lanka, including in countries where data protection laws differ from those here. This typically occurs when we use third-party service providers such as analytics platforms or email tools based overseas.

By using our website and agreeing to this policy, you acknowledge and accept that your data may be transferred in this way. We take reasonable steps to ensure that all transfers are carried out securely and that any third parties handling your data are held to appropriate standards of protection.

1. Business Changes
   If Lyceum Campus is involved in a merger, acquisition, or the sale of any part of its business, your personal data may be part of the assets involved. We will notify you before your data is transferred and before it becomes subject to a new privacy policy.
2. Legal Obligations
   There may be occasions where we are required by law, by a court order, or by a request from a public authority to share your personal data. We will comply with such obligations where we are legally required to do so.
3. Protection of Rights
   We may also disclose your data where we genuinely believe it is necessary to protect the rights or property of Lyceum Campus, to investigate suspected misconduct, to protect the safety of our users or the public, or to defend against legal claims.

1. Data Security
   We take the security of your personal information seriously. Access to personal data is restricted to a small number of authorized staff who need it to carry out their responsibilities, and all access is protected by secure credentials. We conduct regular reviews of our security systems and processes. Where sensitive information is involved, we use industry-standard encryption to protect data in transit and at rest. No method of transmitting or storing data over the internet is completely secure, and we encourage you to keep your login details private.
2. Third-Party Vendor Access
   Some of the third-party vendors we work with, such as payment processors or financial service providers, may independently collect personal information from users as part of the services they provide. Lyceum Campus does not control how these vendors handle such information, though we do ask them to be transparent about their data practices. Some vendors act purely as intermediaries and do not retain any user data beyond what is needed to complete a specific transaction.
3. Login and Technical Information
   When you log in to our website, we may collect technical information such as your IP address, internet service provider, and browser type. This information is used to analyse trends, keep the website running smoothly, and gather general demographic insights to help us improve our service.
4. Cookies
   We use cookies to improve your experience on our website, to remember your preferences, and to keep your session secure. If you are logged in and inactive for more than 10 minutes, we will automatically log you out to protect your account. For a full explanation of the cookies we use, please refer to our Cookie Policy.

1. Right to Delete or Deactivate Your Data
   You have the right to request that we delete or deactivate your personal information from our systems. You can do this by getting in touch with us directly using the contact details at the end of this policy. Due to the nature of data backups and audit records, it may not always be possible to remove every trace of your data immediately. However, once a deletion request is fulfilled, your information will be treated as inactive and will not be sold, transferred, or used for any purpose going forward.
2. Links to Other Websites
   Our website may contain links to third-party websites. When you click on one of these links, you are leaving our website and visiting a site that we do not control. We encourage you to read the privacy policy of any site you visit, as their practices may differ significantly from ours. Lyceum Campus is not responsible for the content or privacy practices of any external websites.

From time to time, we may update this Privacy Policy to reflect changes in our practices, our services, or legal requirements. When we do, we will revise the date at the top of this page.

If a change involves disclosing personal information in a way that you have previously asked us not to, we will contact you directly before making that change, so you have the opportunity to prevent it.

We encourage you to check this page periodically so you are always aware of how we handle your data.

If you have any questions about this Privacy Policy, would like to exercise any of your data rights, or simply want to know more about how we handle your information, please get in touch with us. We are happy to help.