DATA PRIVACY NOTICE

Privacy Policy

Effective Date: 7 October 2026 • Compliant with Sri Lanka Personal Data Protection Act (PDPA) No. 9 of 2022

Notice: This policy is subject to periodic governance review by UIEC legal counsel.

1. Introduction

United International Education Campus (UIEC), headquartered in Colombo, Sri Lanka, respects your privacy and is committed to protecting your personal data. This privacy notice explains how we collect, process, store, and safeguard your personal information when you visit our website (uiec.lk), submit an enquiry, book a consultation, or verify academic credentials.

2. Personal Data We Collect

We may collect and process the following categories of information:

Identity and Contact Data: Full name, telephone/WhatsApp number, email address, preferred meeting times.
Academic Background: Prior examination results (O/Ls, A/Ls, degree transcripts), intended fields of study, and destination preferences submitted in enquiries.
Consultation Bookings: Scheduled appointment times, selected counsellors, and consultation notes.
Verification Records: When employers or universities check a certificate, we log the timestamp, certificate ID queried, hashed IP address, and user agent. We do NOT store unhashed personal IP addresses.

3. Legal Basis and Purpose of Processing

Under the Sri Lanka Personal Data Protection Act No. 9 of 2022 (PDPA), we process personal data under the following legal bases:

Consent: When you provide consent to receive university placement guidance, newsletter updates, or counselling calls.
Contractual Necessity: To process university admission applications, issue official certificates, or confirm consultation appointments.
Legitimate Interests: To maintain the cryptographic integrity and 24/7 availability of our central credential verification registry.

4. Data Retention

Enquiry and consultation records are retained for a maximum of 2 years following last active contact, after which personal identifiable data is pseudonymised. Issued certificate metadata is retained permanently within our immutable registry to ensure verifiability for graduates throughout their professional careers.

5. Your Rights as a Data Subject

Under the PDPA, you are entitled to:

Request access to your personal data held by UIEC.
Request rectification of inaccurate personal details.
Withdraw consent for marketing communications at any time.

To exercise any of these rights, please contact our Data Protection Officer at UIEC.lk@gmail.com.