1. Introduction
We respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy describes how we collect, use, store, share and protect your personal information when you use our website, services, or interact with us, and your rights regarding that information.

2. Data We Collect
• We may collect the following types of personal data:
• Contact details: name, email address, postal address, phone number.
• Academic / educational information: course enrolment, previous qualifications, grades, academic history.
• Identification data: e.g., national ID number, passport number (if required).
• Payment information: banking/credit card details, invoices (if applicable).
• Usage data: IP address, device type, browser, access times, pages visited, cookies.
• Communications data: any messages, feedback, enquiries you send us.
• Other data: any other data you voluntarily provide (e.g. photos, resumes, etc.).

3. How We Collect Data
Data may be collected through:
• Direct interactions (e.g. when you fill out forms, apply for courses, contact us).
• Automated technologies (cookies, server logs).
• Third parties (e.g. educational partners, regulatory bodies, service providers).

4. Purposes of Processing
We use your data for purposes including:
• Providing, maintaining, and improving our educational services and website.
• Course admissions, enrolment, assessments, certification.
• Communications (news, events, updates) with students, prospective students, alumni.
• Processing payments or financial transactions.
• Security, fraud detection, safeguarding of campus and systems.
• Compliance with legal or regulatory obligations.
• Marketing, only with your consent (if applicable).

5. Legal Basis for Processing
Our lawful bases may include:
• Your consent (where required).
• Performance of a contract (e.g. course enrolment).
• Compliance with legal obligations.
• Legitimate interests (e.g. security, improving services), provided these do not override your fundamental rights.

6. Disclosure of Your Information
We may share information with:
• Staff, faculty and departments within Insight as necessary.
• Service providers and partners (e.g. cloud hosting, payment processors).
• Regulatory and educational authorities as required by law.
• Third parties you explicitly consent to.

7. Data Storage, Security & Retention
• We use appropriate technical and organizational measures to protect your data (secure servers, encryption, access controls).
• Your data is stored for as long as necessary for the purposes for which it was collected, or as required by law.
• We will delete or anonymize data when no longer needed.

8. Cookies and Similar Technologies
• We use cookies (and similar tools) on our website to collect usage data, improve user experience, and for analytics.
• You can typically manage or disable cookies through your browser settings.

9. Your Rights
Depending on applicable law, you may have rights including:
• Access to the personal data we hold about you.
• Rectification (correction) of inaccurate or incomplete data.
• Erasure (deletion) of your data under certain circumstances.
• Restriction of processing.
• Objection to certain processing (e.g. for marketing).
• Data portability (obtain a copy in transferable format).
• Withdraw consent when processing is based on that.

10. Children’s Data
If you are under a certain age (e.g., 18 or as required by law), please obtain parental consent before providing personal information. Insight does not knowingly collect or retain personal data from minors without consent.

11. Changes to this Privacy Policy
We may update this policy from time to time. When we do, we will post the updated version on our website with a revised effective date. We may also notify you if the changes are significant.

12. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us at:

IIMT Campus, Kandy Road, Mawanella
info@iimt.edu.lk
+94117 625 625